Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File:                     C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier:          Y0x31ZfJPk6KgviWJSUOzXTDJOAM2h3RjhA7QEUh7Z8=
Subject key identifier:   15:F3:A4:20:88:05:58:04:97:C7:72:81:52:74:2C:3C:7A:E6:44:31
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer:       /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial:       0190486950F7A42E0DD0CA9A43986B2EE29D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number:          96
Signing time:             Mon 24 Jun 2024 04:02:59 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:59 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:59 +0000
Files and hashes:         1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: nHa9ljTTI5T0D7iGHNh/dCpSgmSxir547WKdFrSva68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:50:f7:a4:2e:0d:d0:ca:9a:43:98:6b:2e:e2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
        Validity
            Not Before: Jun 24 04:02:59 2024 GMT
            Not After : Jun 25 04:02:59 2024 GMT
        Subject: CN=15f3a4208805580497c7728152742c3c7ae64431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:81:e1:b7:0c:dd:2a:2e:58:a5:92:7a:b2:
                    54:c5:90:48:4b:c2:44:8a:dc:6e:4e:69:54:e1:f2:
                    ab:df:31:f8:53:08:e2:59:5e:7a:23:6a:51:9f:f5:
                    83:fd:c9:7d:52:f4:79:3d:0b:3f:1e:9f:11:57:b7:
                    ec:1a:98:d4:01:cf:c1:57:2c:26:c9:c0:41:0d:d3:
                    12:9c:42:b3:7b:7b:23:31:82:10:d1:a2:c3:1f:de:
                    d0:e4:8a:83:cf:e8:e2:2a:4c:e5:6d:cc:e6:a2:08:
                    65:2d:c2:f7:a1:aa:37:d6:9e:e6:47:3c:66:e8:f6:
                    e3:32:54:6c:bf:57:88:3b:7d:54:4a:30:53:3c:a7:
                    d3:4f:ea:f1:c7:13:92:57:b3:eb:73:eb:c5:40:a3:
                    d0:98:85:56:08:e1:b0:3f:05:b1:1c:c2:a6:6a:42:
                    6d:5b:7b:11:4e:40:26:ac:1f:de:4c:b9:a2:e0:2b:
                    80:e6:c3:b5:d7:57:f3:ed:9a:88:6b:b4:80:58:72:
                    fa:02:5f:37:6d:38:00:11:0c:8e:5d:a0:04:bf:65:
                    51:16:22:a3:4b:1d:cc:29:5c:30:93:c2:d1:e0:5d:
                    ae:fc:32:75:7e:18:87:5b:c6:3b:38:67:a3:4f:94:
                    bf:75:fa:95:4a:46:bd:b2:01:e3:dd:20:ec:92:0a:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F3:A4:20:88:05:58:04:97:C7:72:81:52:74:2C:3C:7A:E6:44:31
            X509v3 Authority Key Identifier:
                keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ff:1c:54:56:3e:55:9a:06:1a:16:ce:5a:ec:d9:7e:1a:df:
         20:fa:44:00:7f:5d:12:80:24:23:5b:72:f5:1a:88:1b:cf:90:
         f3:65:ad:75:a5:c9:e6:d1:c6:2b:98:39:61:8c:d1:03:b3:12:
         f7:be:00:dd:12:d7:52:f9:08:af:2f:81:8a:e4:86:68:07:b5:
         e2:c0:dd:b5:fc:3e:22:0c:40:ad:c5:06:40:b8:ab:a9:59:8d:
         69:b6:d0:74:ec:60:48:a8:54:41:e2:ba:e8:af:97:f7:f8:63:
         6b:96:98:21:ff:f4:65:ce:d6:4a:1b:24:79:96:bc:e5:ab:89:
         3b:16:e8:1b:88:59:ab:94:59:b0:53:05:5b:46:98:e7:c2:9a:
         78:19:60:61:b7:11:34:d2:4b:b4:78:e0:a8:57:0e:d3:4c:f6:
         ec:86:5e:e9:14:4b:70:1b:1a:ea:4f:33:20:4e:85:e1:bf:76:
         e7:71:ff:a5:36:7f:8c:d8:d2:a9:37:64:79:e3:a4:92:6c:00:
         f6:25:1b:f0:e8:b3:2d:4d:db:78:63:a2:e1:c1:08:71:f2:a2:
         ae:fc:df:28:38:46:bb:2f:2a:0d:34:a4:96:5d:96:a7:ed:4c:
         cb:bf:1e:02:4a:85:7b:9a:68:ed:60:0b:56:c0:dc:b4:f9:e6:
         eb:cc:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:30:08 2024 by rpki-client on console-fra.rpki-client.org