Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.mft
File:                     rjRcTQnm4iTh2vRmV9PHEYewIjY.mft (raw, json)
Hash identifier:          9pmOZwV+O7Ri3iydzi8GqKu/EjiUwW/7WpYRugxhczQ=
Subject key identifier:   B5:65:0D:B0:9D:3B:BB:60:9A:59:D9:4F:8C:86:A5:F7:94:21:D1:B4
Authority key identifier: AE:34:5C:4D:09:E6:E2:24:E1:DA:F4:66:57:D3:C7:11:87:B0:22:36
Certificate issuer:       /CN=ae345c4d09e6e224e1daf46657d3c71187b02236
Certificate serial:       01906E2B2415E97D4C22D3AB26AA5E36BC68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjRcTQnm4iTh2vRmV9PHEYewIjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.mft
Manifest number:          0139
Signing time:             Mon 01 Jul 2024 12:00:39 +0000
Manifest this update:     Mon 01 Jul 2024 12:00:39 +0000
Manifest next update:     Tue 02 Jul 2024 12:00:39 +0000
Files and hashes:         1: rjRcTQnm4iTh2vRmV9PHEYewIjY.crl (hash: NoqPNxojFHzTK7HrmVhclT/Fy8iuFqvRJk057TL/odk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rjRcTQnm4iTh2vRmV9PHEYewIjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:2b:24:15:e9:7d:4c:22:d3:ab:26:aa:5e:36:bc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae345c4d09e6e224e1daf46657d3c71187b02236
        Validity
            Not Before: Jul  1 12:00:39 2024 GMT
            Not After : Jul  2 12:00:39 2024 GMT
        Subject: CN=b5650db09d3bbb609a59d94f8c86a5f79421d1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:d7:c1:90:6d:a8:11:19:51:9c:6a:e1:2c:
                    7f:e7:7a:aa:de:0c:bf:9c:7c:fb:12:01:02:04:0d:
                    4d:2d:78:4d:a7:e8:c0:2b:9e:38:28:df:c6:96:26:
                    84:29:87:d3:bb:b1:a2:78:ab:76:f7:18:f6:f4:0d:
                    83:29:ef:98:4b:63:c6:73:2b:dc:1e:46:21:28:81:
                    bb:41:e4:b2:c5:4a:f1:1c:d6:fe:c6:76:38:8f:0e:
                    05:ea:4f:53:a8:85:f8:dd:14:23:8f:52:d1:42:d5:
                    ad:7a:42:f1:41:48:e0:0b:4b:9d:25:7b:65:32:ca:
                    3e:95:36:a6:7a:f3:39:ca:e7:ff:9c:bb:07:48:de:
                    80:f6:f8:8c:b8:9b:07:7a:b2:a2:e2:61:d5:f3:53:
                    1b:1f:2a:b5:cc:67:fe:26:b8:9b:d0:16:cc:2c:f0:
                    8c:d8:80:d0:ef:01:e8:de:c9:ff:1d:f9:3f:11:88:
                    39:1c:8c:f7:ec:2e:b2:8e:ed:62:fb:c6:bd:10:a0:
                    05:e2:6e:1e:5a:69:ef:48:4b:c3:ba:e6:e0:86:da:
                    f6:d2:92:df:d5:89:69:a3:4b:7e:28:8a:3c:3f:08:
                    93:82:8b:85:4d:b6:f2:04:0e:0c:01:4b:77:60:42:
                    a1:c5:13:21:a6:da:0f:3a:20:8f:98:4b:86:26:fb:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:65:0D:B0:9D:3B:BB:60:9A:59:D9:4F:8C:86:A5:F7:94:21:D1:B4
            X509v3 Authority Key Identifier:
                keyid:AE:34:5C:4D:09:E6:E2:24:E1:DA:F4:66:57:D3:C7:11:87:B0:22:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjRcTQnm4iTh2vRmV9PHEYewIjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21a53c-63ef-4fc5-9549-3bf61779ddc7/1/rjRcTQnm4iTh2vRmV9PHEYewIjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1d:f4:be:80:64:ff:74:c4:d4:49:1f:24:d2:5f:2b:43:61:
         92:1b:ff:29:84:ad:fe:d2:e6:80:ec:5d:cb:73:9a:15:a5:11:
         88:a5:af:0d:1a:86:cd:99:93:b7:6d:61:7b:60:f7:e5:57:59:
         1e:51:37:c8:ce:e9:a8:0a:ba:cf:ff:12:3d:91:ff:c2:45:b1:
         83:69:e1:ff:c6:1c:68:48:9b:fc:6f:5c:ab:35:a8:32:a8:80:
         fc:b5:5c:a7:d0:87:b7:ff:5b:11:6f:93:42:12:3e:75:fc:97:
         61:d0:4b:e1:97:d4:4e:99:37:d4:f7:33:a4:6b:67:ab:67:00:
         f8:12:20:b8:e1:c3:62:56:85:40:88:83:48:0b:2f:0b:b2:e1:
         6e:21:e2:ad:4a:b6:f4:61:78:4d:1a:aa:ef:e5:fb:22:a3:49:
         5a:df:e8:b6:f8:40:91:a7:35:0a:39:b2:08:cc:d2:2e:02:8e:
         89:4b:1c:81:92:23:dc:d4:e5:9d:ab:49:6d:42:43:e1:9b:6f:
         d6:fe:e4:2b:5d:aa:ad:ec:08:f9:7c:11:aa:cd:67:1e:67:1e:
         08:15:44:71:e2:b5:d1:15:23:8b:48:08:23:cf:02:59:a9:18:
         e0:34:44:27:c9:c1:bc:b7:0b:79:87:03:7e:06:8c:53:ba:2a:
         bd:a6:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:16:04 2024 by rpki-client on console-ams.rpki-client.org