Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File:                     mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier:          DSiDCnFP4NMuHJ2bgurCtls+fChZf3D2balcdWTM8So=
Subject key identifier:   10:F7:40:08:49:5F:6F:B4:EA:AF:B2:D6:A8:67:90:03:89:B2:79:03
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer:       /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial:       019071638B90D2A1B48E965DD8C07CCD631B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number:          0DE9
Signing time:             Tue 02 Jul 2024 03:01:07 +0000
Manifest this update:     Tue 02 Jul 2024 03:01:07 +0000
Manifest next update:     Wed 03 Jul 2024 03:01:07 +0000
Files and hashes:         1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: XaW2I6HsJvDi8UxhfHtPSf+n4Icv9AL5DoZFhfT+Pe0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:71:63:8b:90:d2:a1:b4:8e:96:5d:d8:c0:7c:cd:63:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
        Validity
            Not Before: Jul  2 03:01:07 2024 GMT
            Not After : Jul  3 03:01:07 2024 GMT
        Subject: CN=10f74008495f6fb4eaafb2d6a867900389b27903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:c4:de:bc:13:15:39:fb:d7:67:ab:38:46:
                    12:ce:78:44:da:2d:54:9c:a7:eb:07:bc:e1:eb:82:
                    f5:fc:ba:8f:4d:a4:7e:f5:19:f4:b9:9b:1e:d1:83:
                    d8:70:72:dc:c2:13:1b:d0:47:9b:8f:c2:1a:43:91:
                    f8:62:e5:d9:3e:9b:36:74:8e:5f:65:2c:00:3a:09:
                    8b:4c:d0:c4:ff:7a:a0:db:5c:33:0a:3a:67:ca:87:
                    92:4d:da:48:ca:30:75:6a:4f:a3:90:70:de:de:46:
                    5e:aa:5c:57:00:1a:ff:44:50:1f:23:27:34:03:d2:
                    4b:a5:7a:72:50:1a:32:f3:44:63:04:36:3c:70:95:
                    78:c8:e7:85:7d:ef:7b:4e:56:60:06:66:f3:3c:15:
                    02:ff:ef:22:5e:2b:59:9b:74:40:57:5d:a1:1e:fe:
                    91:ed:33:e1:2e:bc:48:f8:0a:bf:60:76:79:b7:17:
                    ec:38:7d:73:31:73:29:05:f0:56:a1:bf:57:f4:b8:
                    35:00:90:e8:7a:7e:b1:b8:a0:96:20:d7:fc:84:15:
                    fd:70:e1:cd:c3:e9:34:19:3c:ee:88:23:cf:40:ed:
                    ba:41:5f:86:5a:5f:ec:e9:0c:1f:6f:d8:d0:48:f9:
                    4d:aa:2d:e0:ec:38:3d:31:bf:64:96:da:23:f7:ac:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F7:40:08:49:5F:6F:B4:EA:AF:B2:D6:A8:67:90:03:89:B2:79:03
            X509v3 Authority Key Identifier:
                keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:2d:1b:53:ff:bd:6d:fe:12:b8:90:92:f4:68:58:6c:30:
         e0:6e:74:13:c5:56:fe:42:9c:66:3e:ef:7b:fe:8e:01:38:a4:
         e2:6b:dc:82:1c:2a:51:86:f7:3a:18:aa:66:a6:a5:87:e3:f6:
         32:a6:ea:72:dc:be:83:a7:ee:83:56:29:81:ab:d9:85:8a:0f:
         60:e0:d0:29:57:11:49:6d:49:b5:3f:2d:eb:2d:a8:84:f2:01:
         7a:91:83:90:a0:9b:39:2e:8e:d7:54:40:95:1c:6c:8c:a5:ac:
         6d:b6:84:70:4d:6e:4c:b0:4c:0e:59:d9:7d:0f:fa:ff:bc:fd:
         c3:f3:f1:ba:42:61:b3:4f:25:04:60:b9:06:db:06:85:45:25:
         c3:39:6b:c9:1f:45:ec:79:45:c7:b6:8c:f2:35:52:d0:32:78:
         35:0f:40:aa:13:f4:e7:14:d1:eb:13:a1:f5:97:79:6b:5b:6a:
         86:1f:95:55:51:06:c9:fc:ef:53:a2:10:5e:14:61:ca:6c:97:
         82:5e:cf:80:92:dd:3e:9b:d7:74:f6:57:51:b8:7a:0b:6e:c3:
         0f:6f:95:da:f0:24:57:5e:c5:3b:cf:9b:71:85:47:54:14:c0:
         71:3d:cb:62:a2:16:0b:d4:63:3d:8c:aa:c4:75:ff:9c:f3:64:
         3c:a8:46:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:39 2024 by rpki-client on console-ams.rpki-client.org