Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File:                     Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier:          J+sx3iCz8VZbhfguxZU21LP94p8CLetzeCJf71QWZ6E=
Subject key identifier:   5E:B5:8C:E0:44:A8:60:52:5C:6B:E2:FA:18:AE:B4:81:28:62:6C:1B
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer:       /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial:       019029EED01A463E3B8700088E739CF3F223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number:          11C9
Signing time:             Tue 18 Jun 2024 06:00:34 +0000
Manifest this update:     Tue 18 Jun 2024 06:00:34 +0000
Manifest next update:     Wed 19 Jun 2024 06:00:34 +0000
Files and hashes:         1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: xPKPXJt+Ii0PhbaXXFxW/fgidyNd9+21H/zxNm03KSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:ee:d0:1a:46:3e:3b:87:00:08:8e:73:9c:f3:f2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
        Validity
            Not Before: Jun 18 06:00:34 2024 GMT
            Not After : Jun 19 06:00:34 2024 GMT
        Subject: CN=5eb58ce044a860525c6be2fa18aeb48128626c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:3c:06:ff:42:d2:32:cd:e3:a4:e0:02:a6:
                    a8:9e:51:e4:2a:77:ce:bb:14:7f:19:95:dc:1e:ee:
                    2f:d7:12:09:fc:ed:0f:4b:b3:1c:5a:60:02:f7:6c:
                    71:79:c2:ae:5a:5a:47:e8:7d:af:ad:23:87:59:5f:
                    7b:c5:b4:61:78:db:4f:cd:f8:26:2e:6b:9f:75:7f:
                    32:5e:f4:6a:38:3b:fb:ea:80:37:22:d2:cc:cf:ea:
                    f1:6c:0e:b5:75:d7:f4:91:37:46:d8:0d:6d:26:71:
                    42:0f:d2:37:83:6b:0e:5d:7c:44:9f:a8:b2:60:fc:
                    f8:a5:98:8c:b0:53:67:9f:a6:c7:ea:b2:ef:15:1d:
                    ce:12:8d:47:e7:35:65:cf:07:60:db:8c:e4:45:79:
                    51:66:c0:04:de:00:e8:64:11:98:4a:8a:1f:fc:40:
                    14:00:34:ce:7f:d7:dc:6d:c9:36:c1:04:56:7c:43:
                    d5:a6:7b:85:d0:bd:52:c3:28:20:39:3a:e0:6d:49:
                    02:0a:34:9a:90:da:8b:56:98:5a:65:bd:86:c8:5f:
                    95:12:fc:14:1d:96:45:3a:f4:1a:11:46:e0:09:00:
                    e2:2f:d4:f0:d0:ca:fd:da:d6:aa:06:54:8f:b4:9b:
                    7c:18:2d:42:cc:1f:53:12:10:af:75:e5:47:bf:e1:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B5:8C:E0:44:A8:60:52:5C:6B:E2:FA:18:AE:B4:81:28:62:6C:1B
            X509v3 Authority Key Identifier:
                keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d1:a7:7a:4f:f2:96:1c:ce:15:af:23:91:c3:b4:2a:f7:fc:
         da:75:3c:c3:78:e6:72:f0:11:d3:a3:6c:31:9b:e2:95:df:96:
         cf:19:af:f0:7d:5c:e9:00:a3:30:fc:5f:32:43:49:cc:ca:c0:
         c8:a5:c5:14:c2:ce:53:d6:87:9c:ac:54:5a:3a:6b:a8:c2:f5:
         95:79:6f:03:cf:2b:e3:14:3e:e6:17:4e:33:26:7f:1d:52:3d:
         88:e4:ad:28:73:60:6c:0b:20:5b:d0:ce:32:c0:c1:b5:04:53:
         b7:01:f8:a7:82:b3:20:0f:a1:ee:e9:85:18:09:ec:cb:dc:89:
         79:1e:4f:2b:96:32:3a:ec:18:a8:3f:3d:b1:2a:9c:27:88:a5:
         43:20:10:b0:5b:bb:36:2c:2f:ef:69:17:a2:39:03:ad:80:d2:
         78:82:62:9a:5f:a4:73:08:50:9b:22:1b:fe:46:50:10:4a:c2:
         e5:cf:89:d9:b7:ea:11:d9:fc:8c:f1:29:88:60:a8:62:7a:f4:
         33:7d:45:1c:c4:9a:8d:48:f3:fe:e3:e7:32:b6:13:17:54:a6:
         69:11:4b:66:a5:a4:93:ef:97:26:94:53:31:15:7c:c4:01:d6:
         8e:63:b8:9f:2b:f2:3e:cd:a7:98:26:86:d4:82:b8:24:d9:2d:
         da:d9:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:39:14 2024 by rpki-client on console-ams.rpki-client.org