Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File:                     bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier:          L1Dl2URYSEO6tR5hoyDcsgcZh+ajPcLpLPNd5GDsGqE=
Subject key identifier:   99:B2:40:04:2E:6D:51:8E:15:5A:5B:52:E1:06:62:96:97:C6:71:3D
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer:       /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial:       018F88922998E9BCA80387536A3620A8A19D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number:          096D
Signing time:             Fri 17 May 2024 22:00:31 +0000
Manifest this update:     Fri 17 May 2024 22:00:31 +0000
Manifest next update:     Sat 18 May 2024 22:00:31 +0000
Files and hashes:         1: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: 2xBDRotxWR+rZD5bZZDUP53q7QkWlLtpxpo1xPYC7m4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:29:98:e9:bc:a8:03:87:53:6a:36:20:a8:a1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
        Validity
            Not Before: May 17 22:00:31 2024 GMT
            Not After : May 18 22:00:31 2024 GMT
        Subject: CN=99b240042e6d518e155a5b52e106629697c6713d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:ec:a0:1a:22:dd:8a:b2:05:64:25:e1:08:
                    6c:04:e7:81:4c:d1:6c:95:1d:97:71:c6:a3:55:6c:
                    a8:4d:01:ac:87:25:c2:f7:ab:bc:6a:74:2a:42:eb:
                    bb:15:8e:a7:a3:6f:80:6a:e8:2a:a1:21:c1:90:2c:
                    33:5e:76:c5:eb:cf:69:6a:d1:e1:34:47:85:f6:90:
                    c4:80:6b:73:96:59:49:87:98:42:3b:23:c7:c6:74:
                    92:5b:ec:59:bd:02:23:05:53:ff:b9:c2:09:6a:43:
                    14:b3:d9:39:fb:88:bf:b6:ca:e7:c3:da:89:31:fa:
                    64:c5:dc:20:6c:f4:f6:4e:cd:db:77:94:02:8c:2d:
                    bf:67:8e:17:ee:6b:71:c8:42:be:9c:d9:c8:b1:7c:
                    92:e9:3a:4f:23:95:d0:c7:01:56:3a:01:a3:fc:ee:
                    78:36:d1:b0:32:2e:3f:f0:c1:fc:c9:48:f4:44:6d:
                    e3:35:5f:57:67:aa:3e:c1:11:f3:99:93:23:72:95:
                    cc:e6:77:f6:2b:a4:88:9f:60:4f:a4:ef:c1:6e:52:
                    f5:f6:be:fd:7c:f8:5d:ea:3b:15:3f:80:2d:20:c2:
                    a3:35:bc:ab:a9:47:11:93:48:5b:86:bd:c8:a9:15:
                    2d:fa:a9:13:35:d9:8a:b2:2a:28:8e:6d:15:4a:5e:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:40:04:2E:6D:51:8E:15:5A:5B:52:E1:06:62:96:97:C6:71:3D
            X509v3 Authority Key Identifier:
                keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:55:0a:63:8f:75:16:c2:ec:0b:41:3a:54:6b:0e:ef:f8:
         5a:8d:d9:c0:66:06:dd:09:87:bc:28:7c:d6:8d:19:63:7b:68:
         3d:fe:cb:7c:83:58:e7:c2:64:d3:4f:74:67:9a:2b:46:5b:1f:
         6e:87:d8:5b:69:60:ce:55:02:0c:8a:66:ff:c2:81:d5:9b:92:
         ea:0b:df:8f:02:f5:20:24:2b:02:ab:6f:bf:b0:cf:fd:2a:1b:
         57:c8:05:2c:6a:4b:77:c2:e1:02:54:64:16:fc:5a:8f:3c:d2:
         1b:ac:04:1d:28:6a:de:38:24:98:ba:bf:12:54:33:a2:ab:bb:
         15:48:0c:1a:72:8c:ee:8c:8d:4e:3f:82:7f:b3:60:60:b6:a0:
         13:e9:0f:3e:41:79:bb:04:a2:6e:a4:2c:61:40:5f:23:91:13:
         86:df:7d:50:72:31:7a:4e:ae:eb:53:31:90:07:35:29:a4:68:
         bf:2f:e7:a5:c3:f0:23:fd:42:a2:49:f5:05:ca:f5:7d:77:3f:
         d1:12:f5:81:1a:70:a1:e9:3d:8a:ba:18:7a:ab:db:30:f3:45:
         3d:42:ac:af:a0:4e:01:54:fd:15:ad:6d:9b:90:8f:32:80:4b:
         98:31:6e:1b:e6:4b:8a:d7:0a:b9:92:14:1b:80:23:c2:89:27:
         a2:09:da:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:56:33 2024 by rpki-client on console-fra.rpki-client.org