Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File:                     vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier:          aj7qObcjZqKZwzm0ot++J9SR+2B0wlnoK8br9PFRda8=
Subject key identifier:   C9:5B:77:63:15:19:DA:FF:EE:D4:D3:E0:2E:67:E6:85:B8:22:72:0F
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer:       /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial:       01906F08733C5786F6BE8A03162B4A7D3EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number:          0E24
Signing time:             Mon 01 Jul 2024 16:02:23 +0000
Manifest this update:     Mon 01 Jul 2024 16:02:23 +0000
Manifest next update:     Tue 02 Jul 2024 16:02:23 +0000
Files and hashes:         1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: o0uVjIIrOzp3L1WDyROyHpnGghac5g+/ioLocNRRHH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6f:08:73:3c:57:86:f6:be:8a:03:16:2b:4a:7d:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
        Validity
            Not Before: Jul  1 16:02:23 2024 GMT
            Not After : Jul  2 16:02:23 2024 GMT
        Subject: CN=c95b77631519daffeed4d3e02e67e685b822720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:f9:2e:85:f8:6f:1a:53:df:ed:dc:fd:9a:
                    30:72:d0:1f:14:f5:0c:2a:60:b1:97:75:12:75:c7:
                    67:43:24:42:1d:c3:df:8f:58:86:6f:00:f5:e2:b7:
                    e8:33:0c:90:a9:a4:9b:20:ee:c2:7d:b2:16:57:82:
                    9f:1a:bd:df:30:a8:79:75:b6:57:8c:12:4e:97:08:
                    72:ea:6f:6e:85:fe:b1:02:15:ed:46:7f:60:b8:fc:
                    ef:97:d8:60:2a:68:a9:e3:53:ad:ae:0b:3b:9d:47:
                    8d:2a:29:64:00:bc:c1:66:c8:43:c7:cb:8b:a3:b5:
                    3f:3a:1f:38:68:fc:7e:dd:b5:76:17:b7:7b:29:bc:
                    c3:34:21:ba:0d:9c:d3:73:b8:39:6e:29:20:0d:53:
                    ca:c4:6f:22:81:5f:00:d2:89:a8:93:0c:d9:e4:5d:
                    57:f9:ae:12:85:13:a8:71:ba:fe:da:cf:b3:d2:47:
                    55:93:06:a2:7e:8d:76:24:e4:2f:82:32:4e:00:bf:
                    ae:db:2a:27:cb:a0:34:ef:59:70:13:29:f7:13:b8:
                    57:67:2e:80:1d:00:54:48:74:1e:e5:b4:4e:6a:cb:
                    c9:95:17:28:ea:dd:58:8f:10:f4:ca:6d:61:f7:9e:
                    94:ca:3f:69:b1:fa:9c:c3:7c:28:6e:cf:fa:24:cb:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5B:77:63:15:19:DA:FF:EE:D4:D3:E0:2E:67:E6:85:B8:22:72:0F
            X509v3 Authority Key Identifier:
                keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8e:57:fe:d7:32:92:5e:64:b0:a5:a5:9f:04:39:9b:31:11:
         38:ce:61:0c:3a:48:36:b6:df:75:2c:65:bb:02:e7:95:78:ab:
         40:42:08:6f:f3:fb:ad:f2:65:30:2a:5f:2f:a1:41:2f:99:fb:
         0a:0d:44:a3:72:94:35:e1:54:ab:48:d4:b4:0d:f3:cf:5a:f1:
         96:8e:78:6d:ab:e7:70:97:f6:9c:16:c2:25:60:21:fd:11:d5:
         af:ad:8d:6e:07:1a:9f:3f:09:b6:24:d3:ec:e5:fa:4a:71:ce:
         ed:c9:fb:d2:77:79:47:4d:f7:b6:38:fe:d5:c3:e8:dc:4a:2a:
         34:39:5f:d8:18:1b:ab:12:86:da:25:96:1a:39:68:1e:08:77:
         fa:f5:2d:85:25:d6:f0:92:9f:ef:38:27:e8:c0:60:25:81:aa:
         15:f1:62:e0:c1:bd:c3:d6:ff:13:a6:dc:89:dc:a2:e7:9a:13:
         e4:3e:85:7c:b4:a4:2b:2d:b3:e2:a1:f7:fe:bb:05:29:81:5a:
         df:8c:27:a1:f8:0e:bc:34:6e:93:57:61:ff:f5:91:d4:59:bf:
         11:da:81:67:07:72:d5:15:46:92:a2:8b:b8:37:14:a2:d0:e8:
         d0:98:07:3b:c5:18:38:34:5a:33:2b:1d:47:06:17:aa:4c:34:
         09:97:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:27:20 2024 by rpki-client on console-fra.rpki-client.org