Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
File:                     CSaQfEuWlut6_HQka5wpKSBfYQM.mft (raw, json)
Hash identifier:          m3XIa3ZSG6s5839G4TwGErb/kJEXd/uNDGfWm7r45kA=
Subject key identifier:   B8:7B:95:C0:67:E3:C3:3A:94:69:26:FC:E3:F0:D1:04:EE:0E:69:FF
Authority key identifier: 09:26:90:7C:4B:96:96:EB:7A:FC:74:24:6B:9C:29:29:20:5F:61:03
Certificate issuer:       /CN=0926907c4b9696eb7afc74246b9c2929205f6103
Certificate serial:       01901BFDA384E9BB287C4500A5A470FF0472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSaQfEuWlut6_HQka5wpKSBfYQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
Manifest number:          0778
Signing time:             Sat 15 Jun 2024 13:02:05 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:05 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:05 +0000
Files and hashes:         1: CSaQfEuWlut6_HQka5wpKSBfYQM.crl (hash: AyceF6vpGsbcphtyW/5NUwcSM3Eyx41IzCyldrZL5QU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSaQfEuWlut6_HQka5wpKSBfYQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:a3:84:e9:bb:28:7c:45:00:a5:a4:70:ff:04:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0926907c4b9696eb7afc74246b9c2929205f6103
        Validity
            Not Before: Jun 15 13:02:05 2024 GMT
            Not After : Jun 16 13:02:05 2024 GMT
        Subject: CN=b87b95c067e3c33a946926fce3f0d104ee0e69ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:56:07:0a:58:d8:be:bc:59:aa:29:d6:22:
                    72:e2:16:e3:de:3a:8b:14:a7:e3:82:56:ac:1e:4f:
                    23:cd:11:e8:00:8a:57:ae:90:e1:df:ea:5c:1e:54:
                    60:23:1a:81:82:96:8c:e3:2a:bf:ec:33:40:68:d2:
                    77:27:dd:0b:80:ce:f8:fb:19:06:c0:4c:fe:ca:57:
                    70:b3:5a:24:56:38:28:0e:9c:89:99:6f:a6:4b:b3:
                    37:8e:e2:a7:80:02:52:82:2b:98:43:22:18:fb:5e:
                    b0:78:94:75:fa:ad:27:e7:39:59:f4:2a:23:74:49:
                    44:e4:9c:d2:dd:01:bc:cb:e4:9f:4e:ea:8b:a7:47:
                    c1:10:f6:27:73:1b:ef:db:38:d1:05:66:fe:c7:6c:
                    03:52:6c:cd:44:80:e3:5d:db:7a:80:f8:5f:d1:f5:
                    53:eb:fb:e6:67:43:64:69:86:30:a9:bb:7f:8d:36:
                    1f:55:40:35:14:30:74:79:04:24:8b:bb:39:09:fa:
                    ca:7e:06:fc:94:7d:ab:ab:ee:db:72:0f:7c:37:d7:
                    5c:ad:4d:56:a8:66:19:72:43:c4:86:0c:33:86:1d:
                    c8:ca:00:bf:06:9f:ec:78:2d:62:4a:a9:ab:52:51:
                    c3:72:a4:ea:2b:57:da:cb:e5:45:f6:37:a8:82:36:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7B:95:C0:67:E3:C3:3A:94:69:26:FC:E3:F0:D1:04:EE:0E:69:FF
            X509v3 Authority Key Identifier:
                keyid:09:26:90:7C:4B:96:96:EB:7A:FC:74:24:6B:9C:29:29:20:5F:61:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSaQfEuWlut6_HQka5wpKSBfYQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:62:d5:ee:5a:eb:81:0d:18:a5:ac:52:7b:52:a1:37:f7:0e:
         2e:9c:47:ad:20:e8:11:2f:72:1e:3c:e3:27:e8:e3:67:c6:38:
         80:1b:08:c4:da:39:bd:bc:b1:ad:49:41:36:57:59:b4:e6:6d:
         5d:a2:73:d5:94:9e:cf:09:cc:e9:2f:60:1f:32:24:2e:49:39:
         84:f5:b5:51:8a:ed:db:e5:e7:94:5a:6e:43:bc:68:fc:4d:82:
         d4:c0:88:34:37:4f:ec:d2:8a:16:74:9c:16:7d:c9:58:74:41:
         87:19:05:3f:69:08:a6:9f:87:ca:22:96:fb:30:9b:a8:5a:ea:
         8f:19:9d:12:f0:53:95:36:25:9e:0c:c1:6a:9f:ac:99:22:16:
         bf:8c:b0:a3:89:b6:52:4d:05:18:4a:cb:fe:ef:6f:a2:e6:b0:
         f6:ae:d8:5d:e7:14:5a:94:42:ba:6d:89:fc:40:93:f6:05:6c:
         f4:b3:a9:e1:44:d8:0a:61:1c:ee:0d:74:97:51:32:c0:46:a0:
         c3:4f:1b:95:56:8d:c8:25:e0:02:ec:7e:c1:0e:27:f5:db:de:
         75:3d:85:47:07:74:69:6a:84:90:6d:6b:02:c7:3b:85:52:ab:
         e4:1a:79:be:c6:84:ca:ca:64:86:d1:e8:ac:8e:6d:ae:2e:b9:
         35:55:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:56:24 2024 by rpki-client on console-ams.rpki-client.org