Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File:                     ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier:          jh6oTtseLnbaGEnSVzNs3UqyCgHFeNZdd3I/x/56/d8=
Subject key identifier:   A8:C9:F9:46:FE:54:02:08:84:EA:6E:D8:5B:69:51:2B:FC:83:BD:E2
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer:       /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial:       018F4F48E02BB8723923B173D4AEFC692A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number:          09C1
Signing time:             Mon 06 May 2024 19:02:07 +0000
Manifest this update:     Mon 06 May 2024 19:02:07 +0000
Manifest next update:     Tue 07 May 2024 19:02:07 +0000
Files and hashes:         1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: gQErNtAdgUeNrUN2G72TfyhkzZ/l3GCKmRBmj1pV8yk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:e0:2b:b8:72:39:23:b1:73:d4:ae:fc:69:2a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
        Validity
            Not Before: May  6 19:02:07 2024 GMT
            Not After : May  7 19:02:07 2024 GMT
        Subject: CN=a8c9f946fe54020884ea6ed85b69512bfc83bde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:12:91:cf:a7:54:06:26:e6:e3:91:e7:e2:
                    09:5d:81:87:76:bc:59:ec:0f:8a:85:7b:86:fd:86:
                    b3:99:c3:f8:cd:dc:84:c9:75:51:2f:94:86:f3:12:
                    c3:80:9e:8b:15:96:3a:1d:90:08:64:e0:98:b9:b7:
                    f9:3c:ce:75:f3:97:96:9d:b9:c4:b4:d8:a9:9e:13:
                    97:57:dc:38:b1:6d:98:3a:e9:3e:79:75:be:3b:6b:
                    da:ea:1f:90:38:b3:7e:0d:2a:82:71:a2:d5:88:6c:
                    d8:21:dc:88:a9:a0:38:c6:29:fa:6f:1f:1d:86:9a:
                    04:15:19:50:7a:74:c7:d5:12:dd:f8:e8:0a:51:30:
                    c2:b2:82:8f:81:17:42:5d:c5:7b:07:d8:87:ee:b7:
                    21:ba:63:c7:f9:fe:e2:af:19:25:03:26:ee:f3:1d:
                    5d:3a:d2:1e:2b:44:fd:b6:50:8b:7a:70:96:3c:2c:
                    c5:b3:65:ad:02:88:84:8f:27:45:26:2d:9f:1d:52:
                    2e:7d:c5:0f:da:0c:8c:cb:81:17:be:11:d0:f0:06:
                    c5:8c:11:92:44:f9:dd:6d:dc:63:0c:21:49:5f:5f:
                    2f:da:28:2f:6f:5a:61:46:4f:2d:2d:e1:a5:13:63:
                    06:11:1d:55:e8:65:dd:25:b5:05:39:c0:a6:f2:9b:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C9:F9:46:FE:54:02:08:84:EA:6E:D8:5B:69:51:2B:FC:83:BD:E2
            X509v3 Authority Key Identifier:
                keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:54:ed:6c:12:a6:ac:3b:d6:b4:d9:88:31:69:88:1c:9d:31:
         7d:b8:a8:f7:27:25:2a:9f:87:4c:a2:3e:4f:d8:cb:96:3e:bc:
         6d:74:13:6d:85:4f:ec:97:24:f6:3e:58:f5:39:2d:cd:8e:5b:
         ce:a1:a3:2f:da:dc:1c:70:e3:1f:2b:e3:61:7e:1c:85:8b:55:
         57:dd:ac:7f:e0:c7:0e:36:2e:14:02:61:79:91:7d:2a:9b:0a:
         a0:97:8a:12:7a:3a:6a:ce:99:8a:6b:ca:79:d1:0e:ec:ec:66:
         7a:44:1d:45:df:81:7a:0b:b0:e9:5c:59:67:02:70:61:05:64:
         3c:71:a4:78:64:f4:1b:1c:3a:14:e8:15:70:0d:18:c5:ad:96:
         f7:c3:67:7d:1d:38:64:b6:90:0d:78:4b:39:14:2b:11:0b:89:
         ed:6e:bf:fb:a9:48:54:fb:eb:4e:4b:74:c6:2c:a3:38:df:4f:
         34:71:1e:13:06:6f:e5:fd:ea:7c:39:d0:3f:c1:5c:c8:7a:e7:
         a1:7f:36:e4:76:dd:c6:db:f8:09:98:8d:7b:a4:34:5b:36:f5:
         b0:cc:ea:c1:2a:6e:04:de:77:50:65:16:dd:79:e8:8f:db:ba:
         c6:c8:7e:bf:f2:a4:1c:6a:fc:1c:18:37:ed:44:e9:38:a1:75:
         82:36:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:13:56 2024 by rpki-client on console-ams.rpki-client.org