Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          r8v39H/NyPltt75khxHkwAkKQyKNFV+iJHh21+ubLQk=
Subject key identifier:   C2:C9:B8:BF:8E:2F:45:1B:48:1D:07:BD:7F:92:07:54:12:57:00:E3
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       01901DECC5FAE85D4A427D83B14563BD0D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          095F
Signing time:             Sat 15 Jun 2024 22:02:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:54 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: /+fLs0txvdGrOIkKntG6WuuRzC6VdeN5zDQw6jBCCjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:c5:fa:e8:5d:4a:42:7d:83:b1:45:63:bd:0d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Jun 15 22:02:54 2024 GMT
            Not After : Jun 16 22:02:54 2024 GMT
        Subject: CN=c2c9b8bf8e2f451b481d07bd7f920754125700e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:28:8c:32:bc:24:d5:47:f9:52:db:b8:f8:
                    a1:e2:47:a4:56:a3:71:95:fd:43:d7:ea:dd:d1:05:
                    30:af:8a:4d:b2:4d:1e:82:58:e5:f9:de:07:31:05:
                    7c:20:0b:b0:b4:13:a1:2d:ff:83:e9:08:17:bd:7c:
                    0d:b9:06:bc:ac:ea:ea:71:ae:41:d6:dc:12:9d:cc:
                    25:7d:51:ad:30:19:3b:bf:ee:9e:d6:e3:39:4e:30:
                    b6:81:50:e3:9d:33:78:8d:22:3c:8d:76:11:6c:dc:
                    27:65:a3:d4:ca:a4:05:93:75:81:2f:15:dd:26:10:
                    ef:64:05:c9:76:b8:4c:82:86:99:95:5b:92:fb:92:
                    81:a9:24:bb:4a:77:42:4b:a4:62:09:c2:7e:05:b8:
                    79:4e:11:36:31:ae:36:4d:f8:fa:96:59:f5:48:ce:
                    5e:b7:12:94:ff:1c:c8:dd:48:3b:e4:e6:e9:c8:bb:
                    ad:c8:99:08:ed:8f:09:e2:76:75:1b:0f:30:6e:d3:
                    24:a7:c5:59:b7:66:52:9f:95:16:a8:83:f5:01:7d:
                    7c:a4:09:3e:92:6b:c8:10:39:21:5a:d8:0b:cb:49:
                    76:40:5d:6c:52:8c:42:be:db:26:52:4d:d1:95:fa:
                    88:ee:aa:2f:d2:0a:03:1b:e1:c5:91:8b:9f:53:cd:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C9:B8:BF:8E:2F:45:1B:48:1D:07:BD:7F:92:07:54:12:57:00:E3
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:c0:a3:c3:6d:c7:1a:3a:ea:b8:41:f5:60:cd:a5:10:5c:
         99:0d:2d:bc:93:61:66:37:d9:7a:fc:02:08:c5:34:d7:80:2f:
         aa:3a:01:8c:8c:9d:0a:9c:04:8c:24:62:0c:d1:c5:10:22:c0:
         9c:dd:3c:05:77:b8:30:85:45:98:62:8e:cd:c5:6a:ed:45:1c:
         48:9a:ca:1a:eb:fb:7d:8f:3c:14:14:48:ea:11:a2:55:d4:bc:
         25:08:2a:d9:66:24:63:9d:c1:b0:8d:12:09:6f:a6:d9:5e:cd:
         fc:35:d8:1d:7f:46:8d:00:69:16:c1:d1:4a:ae:37:d9:7c:51:
         f1:6d:42:8f:68:ee:2a:6e:01:1e:ba:26:79:8a:0d:92:91:4e:
         87:9f:c1:38:b0:f5:7f:ba:22:3b:9a:98:2b:6c:40:ba:23:c4:
         6a:0a:2e:32:c0:3c:57:3a:67:ad:91:bf:33:3c:b3:3e:15:ff:
         94:bd:46:40:9b:40:50:00:8a:7e:4b:2d:28:44:a9:00:82:e9:
         c3:44:0c:81:e8:bd:82:9a:8d:ee:97:c2:f5:c4:b4:1d:e5:bb:
         44:8c:5e:80:cf:8d:e5:49:99:8b:0e:59:ee:e7:3c:4e:4a:ab:
         60:3b:fe:93:dd:03:81:50:7b:9c:2a:e3:f6:08:78:fa:32:3c:
         67:ab:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:03:40 2024 by rpki-client on console-fra.rpki-client.org