Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
File:                     AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json)
Hash identifier:          O+Ow4mTa635FsGv+yAxmN5FYZFyRvTbytIp6KnURzL4=
Subject key identifier:   EF:B2:69:51:62:5D:57:ED:AF:4E:A9:08:1F:82:50:FA:8C:AE:AD:32
Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Certificate issuer:       /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Certificate serial:       018F1FDBB9B446878805051DD0C39AA12941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
Manifest number:          06C3
Signing time:             Sat 27 Apr 2024 14:00:44 +0000
Manifest this update:     Sat 27 Apr 2024 14:00:44 +0000
Manifest next update:     Sun 28 Apr 2024 14:00:44 +0000
Files and hashes:         1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: Yqb7sKraqGXNt1PIvKL8W9pptdxlIOQyRSlIWkgpccM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:db:b9:b4:46:87:88:05:05:1d:d0:c3:9a:a1:29:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
        Validity
            Not Before: Apr 27 14:00:44 2024 GMT
            Not After : Apr 28 14:00:44 2024 GMT
        Subject: CN=efb26951625d57edaf4ea9081f8250fa8caead32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:75:12:29:e5:a3:ed:53:3e:00:b3:14:1a:
                    6b:db:fa:d6:d9:db:4f:f7:ba:8e:97:24:48:58:38:
                    c5:35:5f:b1:f2:14:dc:09:3c:bf:2d:48:bb:1f:27:
                    5b:7b:85:39:da:4f:c6:c9:7e:62:bc:0b:7f:db:c6:
                    3b:8f:2e:6a:10:31:d2:a6:cb:85:d7:54:3a:63:f4:
                    7f:29:96:61:26:43:55:bd:43:f2:01:53:92:79:0a:
                    eb:36:85:e4:ad:41:d2:f9:b6:5c:b0:08:78:2a:d2:
                    8c:8f:4d:a3:24:11:6c:65:a9:ff:67:51:96:f0:ba:
                    05:ef:97:80:9f:7b:28:fa:62:cc:f3:35:b1:23:0f:
                    f7:d3:7d:9e:a1:03:ca:e3:c4:79:29:7b:84:83:60:
                    eb:5d:3f:e3:a5:2a:d3:94:2e:18:d1:c6:78:30:c5:
                    d0:1a:ef:57:7f:56:5e:9a:17:46:b1:36:33:0e:a1:
                    e8:2e:94:55:72:dc:a0:ed:eb:38:9b:0e:79:0e:78:
                    01:5e:68:64:bc:ba:82:f0:88:0c:2d:f7:67:3c:bf:
                    ed:80:e2:45:3c:7f:12:6c:0b:2e:7d:78:05:1e:b0:
                    8a:6b:b1:c2:1a:e2:f2:49:87:f3:35:ba:40:18:47:
                    82:7b:41:cc:0f:78:48:f4:5b:b1:8e:da:3a:ba:6e:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:69:51:62:5D:57:ED:AF:4E:A9:08:1F:82:50:FA:8C:AE:AD:32
            X509v3 Authority Key Identifier:
                keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:c2:ec:55:6c:9b:f6:2c:6b:2e:32:a0:c0:61:01:ec:90:
         93:f6:f9:68:60:88:0e:21:8b:19:31:b7:d3:63:e3:fb:93:b2:
         63:78:03:2c:f2:05:bf:00:08:73:03:e1:cb:9c:92:a0:d4:89:
         91:db:0f:b2:7b:2e:5d:df:80:48:9e:d2:78:3a:7e:cd:9c:96:
         8f:4d:7f:51:a6:b6:1f:ca:be:1a:6c:b5:a2:50:96:62:24:a0:
         2e:8b:2c:1c:01:be:f2:a0:1e:72:da:9d:7c:2c:ad:f8:f4:83:
         4f:f7:26:bd:1e:5d:33:a9:e1:d0:b5:c5:7a:dc:fb:b7:1f:d7:
         aa:9d:f2:53:fb:c7:4f:a6:06:a4:b5:ec:cb:fa:b6:ab:52:c7:
         89:8a:8e:d6:87:b1:4e:a9:20:c7:1f:d2:3c:71:77:21:5b:eb:
         34:f6:06:97:66:24:ca:8f:ef:36:b7:a2:1b:b3:19:ce:65:f0:
         87:3f:b9:d2:0d:fa:20:d9:ec:fc:e6:8f:d4:82:02:70:b7:a8:
         6f:b7:72:04:d3:7f:64:88:8e:7b:32:84:1b:20:a0:78:be:6a:
         19:02:f2:30:5e:3f:7a:cd:fe:ab:fb:b9:dc:80:c0:b0:85:b2:
         3f:79:74:1e:2f:25:24:65:af:61:13:31:eb:4c:10:ff:ed:66:
         85:86:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:50:53 2024 by rpki-client on console-ams.rpki-client.org