Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File:                     v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier:          HmZWoTSQs7BEXa6RsGa7BKh2F5WrgDSqzJKS1YdF79o=
Subject key identifier:   9E:30:B5:72:BC:74:16:82:D3:F2:14:3D:61:77:E2:73:01:03:3E:F1
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer:       /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial:       019071D0EDF9A4A378546919066E4EA9E8FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number:          0FFC
Signing time:             Tue 02 Jul 2024 05:00:36 +0000
Manifest this update:     Tue 02 Jul 2024 05:00:36 +0000
Manifest next update:     Wed 03 Jul 2024 05:00:36 +0000
Files and hashes:         1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: bknHhgyzIj3Nn2EMn7FRHFWDIcZYZ9ci08+WrQMX4ww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:71:d0:ed:f9:a4:a3:78:54:69:19:06:6e:4e:a9:e8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
        Validity
            Not Before: Jul  2 05:00:36 2024 GMT
            Not After : Jul  3 05:00:36 2024 GMT
        Subject: CN=9e30b572bc741682d3f2143d6177e27301033ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:e5:bf:04:ce:60:73:44:e2:03:92:d8:ca:
                    c3:97:3e:ce:6d:de:5d:83:08:04:4a:30:2b:93:d4:
                    6a:1b:7b:eb:af:92:f6:42:c0:80:b1:8f:95:54:5b:
                    56:f1:cc:5b:3a:89:ec:a6:9a:55:3f:33:9e:e5:10:
                    fd:e2:14:2c:b6:c1:de:1e:9a:1d:fe:67:4b:98:af:
                    95:c9:87:c6:5d:19:69:9a:09:f9:6c:20:dd:57:81:
                    4f:dd:f2:28:b6:b0:21:b1:f4:cb:9b:6f:ba:5c:02:
                    c7:d4:c9:02:92:2b:b6:56:76:15:57:51:e7:51:19:
                    ca:48:e4:e4:c9:69:27:3b:3a:6b:a8:8a:1a:c1:c8:
                    62:b8:ae:60:63:fe:4e:3c:7f:27:d4:2c:6a:3f:74:
                    6d:73:c8:a8:ab:81:ef:a9:3a:1c:48:14:eb:60:66:
                    3b:b2:88:9a:b5:e1:26:74:ef:38:1b:a6:38:61:8d:
                    fa:27:74:87:5b:2e:ca:40:9a:dc:e4:78:d8:5f:e5:
                    fa:84:fc:39:83:c6:21:85:ef:fd:0b:1d:fa:ea:f7:
                    ae:4c:3a:98:42:e7:8c:e0:0d:87:f9:ca:b6:5e:92:
                    79:cb:bf:3b:68:2a:54:b5:cf:47:78:04:66:0b:57:
                    f4:28:41:cf:c0:c0:88:d0:54:36:93:22:0f:5f:af:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:30:B5:72:BC:74:16:82:D3:F2:14:3D:61:77:E2:73:01:03:3E:F1
            X509v3 Authority Key Identifier:
                keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:6c:60:0c:0c:bc:d7:f2:bd:ba:5b:07:d6:c1:cb:ea:17:
         b9:ca:e6:04:de:0f:9c:8b:e0:8e:84:68:45:b9:3a:e5:12:7c:
         8f:1c:c5:af:f9:d0:67:ef:67:43:82:59:bf:ab:c6:8a:e9:61:
         a6:f3:14:a5:37:80:cd:a3:8b:94:c3:47:0b:13:f8:f4:43:2d:
         c2:b3:76:01:89:d8:fc:ea:26:0c:b6:37:53:b8:5a:a3:02:8a:
         09:09:0d:4f:e6:7a:1a:60:ad:f8:98:ef:c6:6d:e5:15:9f:fd:
         db:77:c0:43:f2:c3:af:ed:e7:0e:58:02:89:41:9b:28:63:23:
         bd:45:c8:b1:3c:da:00:f6:e9:40:64:a9:19:81:7f:73:62:b8:
         5c:77:52:5f:e5:46:b1:2b:f1:08:4e:e9:7c:ab:50:7e:fd:8c:
         1c:36:7c:f5:6f:2e:76:0f:07:0f:50:1d:a4:0f:61:ae:54:2f:
         e4:d5:cd:b1:7f:7b:5f:e7:9d:01:9c:2c:85:f4:c1:cf:c7:fc:
         33:02:3c:13:89:eb:1b:30:50:c1:35:7d:11:1e:75:33:76:bb:
         06:9e:47:c5:6b:95:dd:3d:3d:d4:3b:01:ba:57:15:08:ef:76:
         89:af:5d:34:f1:b9:c0:1d:d3:18:4d:d5:2c:a3:6c:50:b1:54:
         2e:36:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:48:36 2024 by rpki-client on console-ams.rpki-client.org