Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File:                     Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier:          M851tZs7Qzl7I9+z03Fc4sAGH1b2+fMxB7EHpmEubdY=
Subject key identifier:   E6:39:E2:91:50:85:C0:67:9C:AC:D3:10:B5:3A:06:5B:02:87:A9:C5
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer:       /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial:       018FD8663FB304B57076473E8D762DC531F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number:          05DF
Signing time:             Sun 02 Jun 2024 10:02:10 +0000
Manifest this update:     Sun 02 Jun 2024 10:02:10 +0000
Manifest next update:     Mon 03 Jun 2024 10:02:10 +0000
Files and hashes:         1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: 1KawJk2ToVN+gPpowLFBEGR/v7EP7XIqqE9foQw85hY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:66:3f:b3:04:b5:70:76:47:3e:8d:76:2d:c5:31:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
        Validity
            Not Before: Jun  2 10:02:10 2024 GMT
            Not After : Jun  3 10:02:10 2024 GMT
        Subject: CN=e639e2915085c0679cacd310b53a065b0287a9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:16:f3:c2:42:a9:08:c0:96:1b:b6:c0:6b:
                    17:5d:8a:80:34:38:a3:70:78:ea:2b:11:83:c3:3d:
                    5c:0b:90:14:05:db:16:7c:c7:3e:a7:c4:87:c7:38:
                    64:4e:6c:41:3f:8d:1e:c5:89:25:2a:94:52:fb:07:
                    b6:a3:c6:62:70:1c:b6:47:86:6e:bd:9d:7d:39:a4:
                    f3:9a:f5:ab:eb:a6:0f:f2:f7:25:63:17:df:bc:7f:
                    c1:a2:f8:9b:8f:16:d0:7e:44:8e:58:36:30:6e:e4:
                    6e:3f:db:6c:d1:7b:f4:dd:66:ee:31:c6:73:d8:77:
                    a6:af:03:a0:4e:ae:74:57:80:53:cc:9d:35:39:71:
                    f9:57:9d:e9:ce:8a:b7:1d:cc:1c:9b:5a:3a:ad:b2:
                    b0:1b:d3:f1:38:8f:34:cc:7d:c2:c5:19:66:09:52:
                    be:14:ac:23:26:b4:f0:22:d6:26:3e:9b:74:87:42:
                    c2:c4:bf:a7:0b:28:85:ef:f0:fb:fa:01:a2:73:c4:
                    4f:c9:fa:7b:71:2f:7d:5c:ee:73:14:71:c6:08:97:
                    19:4d:29:f5:16:5a:b4:79:34:87:4e:b6:b4:44:8f:
                    f7:03:1a:07:4e:22:de:92:72:19:00:e6:73:a3:f2:
                    7f:3a:91:f5:ed:78:62:e8:97:68:cb:d6:c8:7d:f5:
                    c9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:E2:91:50:85:C0:67:9C:AC:D3:10:B5:3A:06:5B:02:87:A9:C5
            X509v3 Authority Key Identifier:
                keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:0f:9d:e0:ca:ff:61:c7:b5:d5:3a:2b:65:1c:50:92:e9:d1:
         bc:fd:b2:b6:13:67:53:c9:e0:48:fc:49:2b:bb:a5:b6:86:30:
         c9:ef:da:e6:db:ba:c7:65:8d:cf:fc:97:1a:39:75:2c:2f:08:
         b8:de:49:49:f0:0b:3c:00:0a:73:07:8b:f7:d2:c1:ab:85:dc:
         e6:1a:af:fb:8a:0a:b5:70:5e:42:4d:93:98:fc:a1:88:74:f4:
         57:2d:57:d0:34:8c:9a:1f:fb:36:29:de:8f:1b:dc:e8:18:bf:
         28:eb:0f:07:da:7c:e3:59:ea:7c:09:73:8b:46:48:36:a6:ff:
         bd:b0:3f:dd:a3:4e:8f:41:e0:7c:b5:8e:e2:f7:4b:9e:70:e7:
         19:1a:a5:76:35:10:e1:1d:8d:2b:e6:ed:0a:ac:db:bf:24:d7:
         c4:ac:77:80:5b:a9:ac:57:a2:09:ee:9e:d4:c0:2f:94:b2:5e:
         b7:79:8f:70:17:41:81:f0:44:66:51:51:ad:0a:31:6b:84:01:
         4d:1f:2e:c0:15:31:69:f4:b6:48:d3:78:25:30:22:1a:59:05:
         ac:c5:47:74:89:2c:f1:f6:06:69:d4:91:31:8e:b7:63:29:5f:
         14:c4:f8:04:74:7a:39:a0:bd:01:bb:f1:ba:cb:fb:6e:75:ac:
         53:8b:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:01:45 2024 by rpki-client on console-fra.rpki-client.org