Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File:                     9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier:          xvhdwy6pPtcwnJPpNsGgDAv0ybMjiXjk/8jUEiQ2bxA=
Subject key identifier:   62:D7:31:AF:38:BA:E3:B1:1E:80:0B:7D:8A:22:DB:03:94:6A:1F:F4
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer:       /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial:       018F1E5B5D14D40E3EFCBDF61D2007F8C59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number:          086E
Signing time:             Sat 27 Apr 2024 07:00:55 +0000
Manifest this update:     Sat 27 Apr 2024 07:00:55 +0000
Manifest next update:     Sun 28 Apr 2024 07:00:55 +0000
Files and hashes:         1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: 8pAN3iWf5AKfuK86VAtR5UgYoSYX2mxW0SWDLCuA1qM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:5b:5d:14:d4:0e:3e:fc:bd:f6:1d:20:07:f8:c5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
        Validity
            Not Before: Apr 27 07:00:55 2024 GMT
            Not After : Apr 28 07:00:55 2024 GMT
        Subject: CN=62d731af38bae3b11e800b7d8a22db03946a1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:17:c7:7e:68:61:40:f3:c8:9f:97:23:58:
                    c3:94:a7:54:c8:19:9d:02:b8:92:35:9c:5a:11:24:
                    62:ac:dd:c9:c2:0e:4a:78:48:7d:ad:ee:64:b2:25:
                    ec:ac:60:e8:b3:85:9f:40:e9:36:f4:54:26:d3:41:
                    9a:51:37:2f:65:45:aa:42:c3:67:65:7f:52:52:b7:
                    7a:db:e5:eb:36:7f:96:14:96:8c:63:bd:63:38:3a:
                    44:1c:35:be:4a:f1:00:a3:7e:71:90:eb:b7:30:a5:
                    81:2f:5b:4b:53:8f:6a:fd:91:9d:1d:d6:e4:9b:74:
                    dc:8a:05:4c:5a:85:8a:38:d1:c6:eb:cf:c3:22:10:
                    7e:bd:80:28:a2:2f:33:e2:c8:b9:79:bd:ad:2f:f5:
                    f7:0a:24:01:68:3f:71:b9:8f:06:8d:15:33:c0:d1:
                    32:bd:32:62:3e:6a:7c:d2:53:a3:08:80:54:66:28:
                    cf:0d:6a:79:9e:99:29:69:42:aa:91:bf:8f:f7:8c:
                    e0:e3:b8:19:f0:68:3f:62:81:83:21:ad:72:84:1c:
                    0d:2b:39:5d:5b:d3:a7:7d:25:70:4a:e4:12:a5:49:
                    2d:5c:9f:6b:14:f4:1b:ec:fd:c0:df:37:2b:bc:0e:
                    31:22:51:f3:79:66:af:47:59:c2:62:c1:50:bb:90:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D7:31:AF:38:BA:E3:B1:1E:80:0B:7D:8A:22:DB:03:94:6A:1F:F4
            X509v3 Authority Key Identifier:
                keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:e6:58:d4:ba:8e:0b:2b:30:99:c8:b1:02:e7:dd:5d:5d:
         b8:12:ec:1e:1e:05:57:b3:01:8b:92:15:69:bb:e8:b1:40:dd:
         9e:1b:58:11:5b:d0:78:2b:7f:90:26:f3:6a:58:f5:fb:60:35:
         62:5d:73:3b:7e:23:67:96:d3:64:8e:78:a5:fa:41:fe:83:06:
         3a:91:f1:38:d4:b4:03:e9:1f:f6:d0:14:a8:2c:85:c0:25:2d:
         ab:1e:59:c2:4c:1d:11:8d:41:10:06:2b:60:25:c4:f2:5d:39:
         f6:7e:fc:0e:a1:d5:b7:05:a6:e4:b6:3a:68:65:cf:7c:54:93:
         8d:eb:29:cd:02:75:6f:84:5b:30:b4:83:d5:2d:d1:f4:0e:5f:
         c6:ba:40:a2:e7:06:e0:29:9c:a3:ae:1e:c1:af:40:8d:d3:0c:
         ad:99:32:8d:42:b4:da:27:c5:c3:f6:f9:84:92:45:e0:7e:24:
         94:87:e1:cb:e8:e6:f9:6c:86:85:8a:c3:09:fa:6c:45:3b:5b:
         37:63:22:71:8a:7d:bc:6b:59:f4:15:3e:41:d7:7b:e8:13:c9:
         01:ef:88:44:51:fa:68:e0:a5:1e:b9:84:e3:c8:b6:5a:63:61:
         40:d1:79:1c:b2:5c:94:0c:36:37:1a:36:67:59:4e:39:e6:e5:
         cd:e1:f6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:47:52 2024 by rpki-client on console-ams.rpki-client.org