Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File:                     0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier:          GKnxhg75tU4ctI4IoN5l3lLq2mqDtvanmrsKGJBkjsw=
Subject key identifier:   3D:D7:0E:44:D6:77:10:EF:88:47:0F:E5:C8:DB:79:0C:8C:8A:A6:FD
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer:       /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial:       6378005A482BC508FF63D2B8DDC409822070234F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number:          60
Signing time:             Mon 16 Sep 2024 14:15:45 +0000
Manifest this update:     Mon 16 Sep 2024 14:10:45 +0000
Manifest next update:     Tue 17 Sep 2024 16:02:45 +0000
Files and hashes:         1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: wTynh1p8aPsrv73PHn1k23T3yBSrNplRLctXpFCdBcI=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:78:00:5a:48:2b:c5:08:ff:63:d2:b8:dd:c4:09:82:20:70:23:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
        Validity
            Not Before: Sep 16 14:10:45 2024 GMT
            Not After : Sep 17 16:02:45 2024 GMT
        Subject: CN=3DD70E44D67710EF88470FE5C8DB790C8C8AA6FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:49:42:16:d9:e4:0f:5d:07:1f:f1:1d:c4:55:
                    13:e5:f1:92:a2:85:16:e4:e0:42:cd:5e:e7:a5:07:
                    cf:c9:53:35:8f:45:b1:3e:20:73:fd:60:1f:50:0d:
                    9f:21:ac:22:f9:a0:65:e8:22:9e:3c:c1:63:7a:9e:
                    4f:b7:06:30:f1:aa:20:81:7e:72:1a:0d:0a:b2:fe:
                    c1:63:5f:c1:97:2f:3f:e4:4f:8d:b0:d8:ec:3c:8d:
                    0f:ab:b9:b4:36:1f:16:96:02:0e:42:61:93:22:c3:
                    82:5e:e3:54:c1:11:0f:29:e5:b9:04:ad:d7:af:7a:
                    5a:68:ab:23:35:25:26:ce:50:ad:93:d0:c4:9d:a7:
                    53:ee:b6:58:d4:55:4b:b1:2d:63:62:3f:2c:d4:2e:
                    4b:14:06:ad:6a:93:c4:8b:47:a3:95:e4:ff:a0:38:
                    93:65:fb:83:ae:2e:72:70:d8:29:a9:9e:b8:25:4a:
                    1e:41:fe:a1:9d:95:6e:2c:33:ef:3e:4d:90:ff:03:
                    9f:22:dd:e0:60:69:70:eb:ef:b4:8e:ba:8c:3e:8d:
                    e2:00:c6:4c:5e:b0:ca:8d:83:4d:9e:88:c6:bb:ba:
                    38:6d:50:58:f2:2b:05:c8:2f:12:f4:ce:5e:e5:99:
                    f6:68:b3:83:2f:31:b1:71:0d:52:ae:ab:30:e7:cf:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:0E:44:D6:77:10:EF:88:47:0F:E5:C8:DB:79:0C:8C:8A:A6:FD
            X509v3 Authority Key Identifier:
                keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0f:df:31:33:8c:6a:8f:89:62:6d:24:94:59:8d:0a:1e:55:
         95:5f:a4:bd:4b:6a:b4:3f:a9:fc:c9:2d:43:5a:b7:9b:e1:b6:
         e3:10:38:75:6d:f5:3f:52:68:0a:61:dc:c9:fd:28:f2:3a:bb:
         e7:3f:4e:42:e5:92:80:79:33:e3:26:a1:3a:ef:11:ab:e6:c9:
         75:28:47:f2:27:c4:af:82:5e:9e:6e:23:df:67:1d:de:2c:fd:
         c5:9e:37:c5:1f:11:f8:89:79:33:70:07:38:b6:8a:34:72:d0:
         20:08:25:92:bb:0e:d6:15:47:57:78:31:fd:57:96:0d:32:78:
         de:11:c3:53:ec:b9:26:e2:ec:d0:de:5c:17:ba:76:b8:36:a3:
         0b:cc:ca:05:93:b8:4a:ad:2d:81:27:23:cd:19:2b:6b:11:b1:
         49:7b:da:2a:72:6a:40:81:a2:7d:ca:49:bc:34:12:7b:41:b6:
         64:44:6b:c8:7d:b5:40:b3:9a:7e:17:d5:fb:0c:88:6c:d5:4a:
         8f:1a:9e:fc:cf:4d:c4:62:39:31:e7:2a:2a:ac:7e:bd:c8:e8:
         ff:2b:d6:06:52:4d:bf:52:5d:e2:ec:76:79:11:43:21:3d:50:
         b4:70:b8:39:52:3c:d6:23:d9:03:43:f4:eb:9c:1b:06:2b:af:
         96:23:6a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:15:03 2024 by rpki-client on console-ams.rpki-client.org