Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File:                     FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier:          Otj1L2yngTCQrP8fiT21YoTPwIGEO/Q6SQajhfFvFUo=
Subject key identifier:   D0:E3:46:FE:2F:1A:E9:F9:DF:20:72:65:60:F6:3E:42:49:13:FF:9F
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer:       /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial:       01901E8F73798BEA839C7A08255779C3FC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number:          11C3
Signing time:             Sun 16 Jun 2024 01:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:35 +0000
Files and hashes:         1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: RLIx5AwZTyPtzECT9MtIUeazhuUoD/I63UII/d2Pw7I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:73:79:8b:ea:83:9c:7a:08:25:57:79:c3:fc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
        Validity
            Not Before: Jun 16 01:00:35 2024 GMT
            Not After : Jun 17 01:00:35 2024 GMT
        Subject: CN=d0e346fe2f1ae9f9df20726560f63e424913ff9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:29:71:aa:f5:49:65:83:ae:0f:3b:13:02:
                    eb:3d:df:6c:46:49:e5:2b:10:ae:ff:f4:35:a1:c0:
                    19:88:b5:a6:d6:36:1b:9f:51:46:f8:c7:dd:48:9e:
                    73:18:28:92:27:19:37:12:bb:17:43:1f:55:b7:d0:
                    9a:d0:8c:5c:4f:be:52:b4:f4:69:58:66:fa:85:9e:
                    9a:33:31:af:25:64:1d:36:ab:52:40:6c:d3:25:d6:
                    f3:42:05:77:32:79:5d:02:bb:de:3e:90:82:45:07:
                    df:b0:40:68:62:aa:b5:9c:38:1e:f3:f7:dd:e9:75:
                    98:04:fb:7a:b6:73:f4:35:76:69:69:95:da:0e:fb:
                    48:5e:2f:ed:7e:3f:72:25:fe:2a:39:d0:d6:30:0c:
                    10:16:fb:f0:16:bd:97:6f:0f:ce:53:28:b9:f4:57:
                    42:0a:c6:71:11:34:e9:8d:b1:3d:97:63:d4:1a:bb:
                    ff:d1:99:08:1f:62:84:e3:77:de:33:a0:e0:00:2d:
                    24:ee:d9:16:8d:ac:d3:49:37:35:64:7a:35:99:1c:
                    c1:5d:59:8f:33:6d:c5:bb:07:c0:e5:50:da:43:3e:
                    91:ad:e6:db:be:1a:38:79:86:49:20:4d:93:91:07:
                    94:39:f7:d6:f7:7e:65:8a:13:24:8e:54:89:1b:b2:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:46:FE:2F:1A:E9:F9:DF:20:72:65:60:F6:3E:42:49:13:FF:9F
            X509v3 Authority Key Identifier:
                keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:0b:09:a2:c0:dc:c6:dc:70:6c:e1:cb:21:ee:ef:84:f6:
         c5:a8:b5:56:e7:a1:03:3a:a3:42:29:1c:fc:fa:6c:ef:d1:00:
         61:ed:33:6f:88:42:ad:f3:69:83:db:6c:c5:5c:52:2b:1c:ce:
         36:7c:f7:52:08:4f:1e:63:23:5d:7f:c9:8d:0b:3a:08:9a:09:
         9d:bf:27:b0:5c:57:69:18:cd:a7:f6:6c:24:64:60:1c:45:e1:
         0e:e2:10:c6:a4:1e:9e:64:40:df:a6:8a:7a:47:21:d2:b7:33:
         a5:e6:0b:a5:bf:6d:73:95:31:96:a8:f6:77:4f:b2:4a:56:a7:
         e9:bd:3a:2a:9f:5d:24:2b:aa:0d:ac:02:85:84:cd:75:15:12:
         d2:41:ae:c3:77:61:b2:0c:09:e9:f6:90:ae:28:68:91:cc:43:
         be:f4:9e:30:98:10:b6:fb:1d:c6:ca:d1:69:05:d8:30:51:1a:
         b9:33:f1:94:37:6e:e6:7c:22:8a:b9:71:c0:65:f3:96:1a:3f:
         32:88:7d:58:93:30:7d:b9:1b:b9:c4:cc:f5:71:6f:cd:0d:0f:
         52:df:5f:d2:22:9b:2d:e2:cc:0e:0d:51:4c:80:36:4a:51:fb:
         a7:b1:3a:5d:7d:2c:00:5b:50:9f:49:0c:c8:4d:5d:c5:53:34:
         23:8a:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:34:09 2024 by rpki-client on console-ams.rpki-client.org