Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File:                     9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier:          UKoY+RgCD/fpzbgBTaPX15/8eeHVGTgiCQIuPztUvZ4=
Subject key identifier:   68:CE:BB:F3:72:42:82:1B:39:79:76:43:F8:8C:1B:01:F2:7F:39:3C
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer:       /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial:       018FD7C042FC48A2EE9D7776C6BE98BF009E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number:          10F1
Signing time:             Sun 02 Jun 2024 07:00:52 +0000
Manifest this update:     Sun 02 Jun 2024 07:00:52 +0000
Manifest next update:     Mon 03 Jun 2024 07:00:52 +0000
Files and hashes:         1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: 1yjh6AQIEUJ9kc6WW+sY41DSwbTQK33NtDZ/eMSh8QU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d7:c0:42:fc:48:a2:ee:9d:77:76:c6:be:98:bf:00:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
        Validity
            Not Before: Jun  2 07:00:52 2024 GMT
            Not After : Jun  3 07:00:52 2024 GMT
        Subject: CN=68cebbf37242821b39797643f88c1b01f27f393c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:f3:ba:d7:08:0c:73:1b:95:27:db:e3:9f:
                    08:45:91:0e:07:f6:ce:65:4e:76:a9:ed:f0:77:a5:
                    38:28:6a:7f:67:56:ae:8c:61:c3:7c:47:4a:e1:e9:
                    92:55:63:b8:b5:28:cc:71:df:a2:37:a9:78:1d:20:
                    9e:26:05:70:e7:82:0a:9b:49:42:a7:94:8b:02:58:
                    a1:c7:04:3c:5d:df:7f:4e:8a:f8:22:55:76:b9:f3:
                    b2:24:b9:f0:0c:a4:1d:21:b8:44:49:6c:a5:8d:5e:
                    84:44:3e:70:31:f9:8c:ce:cc:a0:4c:63:29:eb:e3:
                    79:63:26:c5:28:58:60:8a:36:9f:54:c9:35:98:46:
                    94:bd:76:28:07:ec:07:05:89:50:25:0f:7d:e3:fb:
                    23:74:fa:8a:d3:e7:3c:a6:01:1f:4a:74:e4:1c:0a:
                    c0:31:92:36:0b:3c:51:60:61:ef:76:b3:c8:bf:80:
                    dd:9a:91:88:0c:e6:9d:07:81:56:6b:35:91:3a:d2:
                    4e:a4:88:cd:7f:69:73:b4:d6:dc:ed:3c:21:b5:ff:
                    8c:21:70:f2:4b:8c:a3:17:a8:51:83:0e:8e:2b:38:
                    63:1b:a5:cd:22:6b:f9:b7:a4:e2:1c:3f:ce:3f:9a:
                    d6:8d:09:07:13:c2:1a:a1:d4:d0:bb:23:bc:3f:78:
                    48:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:BB:F3:72:42:82:1B:39:79:76:43:F8:8C:1B:01:F2:7F:39:3C
            X509v3 Authority Key Identifier:
                keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b1:fd:28:ae:6e:b5:d0:8b:8b:77:2f:f5:85:fe:81:10:d9:
         45:5e:06:c8:7b:1b:92:9c:36:b4:eb:f5:62:29:be:ab:b9:dc:
         9d:1d:09:98:00:78:1b:b3:93:98:d4:38:76:21:e5:b0:46:78:
         c7:24:16:b5:7f:72:12:33:e1:96:7e:4a:0f:70:cb:8d:7a:04:
         b1:c6:ae:6a:8b:9a:9c:b2:b8:4e:06:45:59:c9:e4:6c:b5:7e:
         d9:ec:ee:30:ee:25:16:66:7d:56:c1:e4:52:ae:3c:8b:c5:fd:
         19:5f:b0:42:b9:e2:f9:13:3c:e7:ef:0d:2f:01:d7:89:01:e3:
         be:8c:a4:84:81:81:86:a0:cf:e3:f7:a0:05:24:7b:ce:86:56:
         e8:75:0a:ee:ea:30:3f:a2:b3:ff:95:4a:74:5e:84:98:9c:60:
         e6:3c:4e:7d:e5:1b:bb:c2:06:94:13:f0:28:aa:98:ee:6d:a3:
         f1:fd:4e:5d:b2:46:53:65:19:5e:91:7b:c2:2a:f5:11:f3:2c:
         a8:27:a3:be:0e:83:cc:56:a4:bd:80:c8:0d:fb:f9:ea:de:f9:
         b2:75:e5:c6:e2:a1:8d:90:ef:0b:b2:a9:cf:77:80:da:19:09:
         97:ab:62:1e:28:d8:7a:b3:93:67:8f:2b:30:fc:a0:fb:38:6a:
         9c:38:1f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:55:36 2024 by rpki-client on console-fra.rpki-client.org