Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          bDIHNb/f2bMuIhHcXE211jkmYEzVmbslz5EWx5cPBrE=
Subject key identifier:   02:43:6E:3A:F4:C7:11:91:98:7F:7D:3B:CB:3F:96:80:3B:94:4C:12
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       018F3DE9512C0FF9438C64BFD2E361831B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          0D67
Signing time:             Fri 03 May 2024 10:04:11 +0000
Manifest this update:     Fri 03 May 2024 10:04:11 +0000
Manifest next update:     Sat 04 May 2024 10:04:11 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: bMvGw0paIJNEynIcVHaW/fPx6aZRmkEEXW0MPergMVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e9:51:2c:0f:f9:43:8c:64:bf:d2:e3:61:83:1b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: May  3 10:04:11 2024 GMT
            Not After : May  4 10:04:11 2024 GMT
        Subject: CN=02436e3af4c71191987f7d3bcb3f96803b944c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:70:ef:8a:c3:56:a7:a9:55:27:56:a9:14:
                    c3:b2:cc:2f:e7:52:be:a2:08:86:f5:d1:54:10:85:
                    30:c8:0f:c3:7f:d4:6b:c5:35:72:7f:42:f1:16:b3:
                    51:c8:d0:d6:e2:20:85:a2:fa:75:52:ca:ef:ff:4a:
                    9c:49:90:d9:e6:92:86:03:94:75:80:16:fc:4b:62:
                    33:db:52:71:e4:20:41:62:23:79:dd:ae:bb:47:f5:
                    40:f3:cf:db:72:59:06:ff:a7:00:6d:c3:e3:5e:15:
                    9c:63:34:b4:30:de:9d:2a:f5:77:e3:6c:5b:19:70:
                    93:d2:cd:b8:bd:1c:2d:ea:90:66:29:70:46:47:56:
                    f2:ac:e4:1f:44:f8:f0:e9:07:f7:1f:e4:54:1a:3c:
                    a1:c5:6b:7f:61:ec:d5:85:c3:f2:bc:99:ac:5d:c2:
                    37:61:c9:d1:68:02:e6:c3:87:89:e6:fa:91:3e:83:
                    1f:2b:26:7c:e1:d9:50:1f:ba:1f:72:66:56:0d:85:
                    a6:ef:ee:87:82:08:52:2d:7a:c0:1e:9b:b4:c0:67:
                    da:85:2e:ae:f8:60:5e:77:e3:f4:11:e9:2c:a9:d3:
                    57:48:91:a7:e5:88:33:83:05:3c:d4:98:5e:f8:c5:
                    1d:b1:f6:4d:e3:22:ab:ac:d3:ce:06:20:2f:ec:72:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:43:6E:3A:F4:C7:11:91:98:7F:7D:3B:CB:3F:96:80:3B:94:4C:12
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:e6:06:37:c0:eb:f1:b8:5b:9a:59:fc:cc:84:44:a6:d0:
         33:f9:5f:5e:da:31:d9:f3:05:f4:8e:ae:bf:54:fb:a7:2d:47:
         f3:18:29:d9:d5:59:4b:83:74:a8:d5:80:b7:50:8e:4b:44:6c:
         de:b9:f4:f4:52:ad:0f:aa:33:b8:6c:92:d0:24:c6:be:bb:5d:
         0f:2a:4e:4d:ca:98:2e:3b:83:8c:a4:76:92:c4:2c:07:2b:ff:
         91:df:70:78:27:ac:d2:79:e6:91:b1:10:3a:f0:4d:c0:7c:a3:
         22:d9:a9:2c:40:77:30:e3:b9:38:a1:be:73:5e:3f:66:56:a4:
         3b:f1:ff:36:b6:19:75:a7:9d:23:9a:32:17:e8:9c:29:c9:22:
         c5:00:ff:98:1d:ec:ed:73:5b:fb:77:34:6c:fa:46:07:3d:1c:
         eb:72:19:76:14:ff:da:bc:33:45:c1:c8:8e:c3:4b:0a:4a:90:
         fd:37:0d:d1:20:72:3f:be:a4:9a:1a:73:10:f0:b5:10:16:bf:
         07:5a:10:99:5f:51:02:25:d1:28:26:57:f5:53:72:8e:dd:a8:
         0e:74:3e:3f:94:7f:0f:4a:00:ab:81:ee:29:ff:bb:01:3a:e3:
         0b:35:aa:07:5a:7b:50:14:f8:39:db:67:b8:38:ac:28:2a:c0:
         69:49:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:06:58 2024 by rpki-client on console-ams.rpki-client.org