Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft
File:                     ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft (raw, json)
Hash identifier:          pTkV6CQ16alN1bO0RJr1kLumcRNreIBma+QAdtmfNng=
Subject key identifier:   54:3E:D3:34:86:D3:4B:B2:22:35:20:46:5F:31:99:D5:F1:51:8E:76
Authority key identifier: A3:1E:D7:9F:DC:31:6B:93:D4:BF:59:BF:24:A9:56:24:EA:61:AD:3E
Certificate issuer:       /CN=a31ed79fdc316b93d4bf59bf24a95624ea61ad3e
Certificate serial:       019096B994A2228743FDE04F03F1B589EB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ox7Xn9wxa5PUv1m_JKlWJOphrT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft
Manifest number:          0E
Signing time:             Tue 09 Jul 2024 09:01:02 +0000
Manifest this update:     Tue 09 Jul 2024 09:01:02 +0000
Manifest next update:     Wed 10 Jul 2024 09:01:02 +0000
Files and hashes:         1: ox7Xn9wxa5PUv1m_JKlWJOphrT4.crl (hash: U/Udnaq5kMiSQFg/6xnlHf+j9jwvtIUte53+XBkXL44=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ox7Xn9wxa5PUv1m_JKlWJOphrT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 08:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:96:b9:94:a2:22:87:43:fd:e0:4f:03:f1:b5:89:eb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a31ed79fdc316b93d4bf59bf24a95624ea61ad3e
        Validity
            Not Before: Jul  9 09:01:02 2024 GMT
            Not After : Jul 10 09:01:02 2024 GMT
        Subject: CN=543ed33486d34bb2223520465f3199d5f1518e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:26:18:d7:59:b9:3c:3c:0a:79:c2:7b:26:66:
                    3f:ef:1b:4a:6f:0f:f0:01:68:4b:12:10:67:fe:6b:
                    3e:ec:0d:17:4d:a3:92:57:e2:7d:89:d2:50:db:3d:
                    f2:a9:f0:c9:e5:84:9b:f4:8d:b2:5b:5d:5a:d2:6f:
                    61:c0:21:13:fd:1d:27:46:05:04:62:d9:e4:ca:96:
                    74:b3:7b:0c:f6:06:91:0a:68:9b:f7:1d:dc:44:65:
                    6b:65:10:b3:1c:38:9d:22:d7:ff:37:90:6f:c0:25:
                    98:95:ba:e5:0d:da:c4:6e:87:f2:94:78:b7:e7:84:
                    2b:12:92:9e:27:2d:3a:81:dc:b1:d9:31:e9:58:28:
                    c2:2c:7d:2a:15:5b:7e:85:3b:92:16:59:37:7c:da:
                    0a:93:59:b4:09:5d:91:28:44:10:1e:98:13:c1:90:
                    ad:f6:e9:47:f3:8b:0f:64:f4:a2:f1:5c:3f:57:dc:
                    71:98:a2:35:91:f8:df:89:1f:b4:bc:cf:97:3a:4a:
                    9a:85:37:d4:c7:0b:cc:0b:5e:9c:57:1d:15:a3:a4:
                    32:7c:0b:8d:4b:c6:50:16:6a:1a:a5:fc:b9:07:39:
                    2b:70:9c:c9:12:4d:aa:bb:b0:90:e2:77:5f:c1:d8:
                    b0:94:94:48:66:60:22:2d:83:41:eb:90:01:aa:e8:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3E:D3:34:86:D3:4B:B2:22:35:20:46:5F:31:99:D5:F1:51:8E:76
            X509v3 Authority Key Identifier:
                keyid:A3:1E:D7:9F:DC:31:6B:93:D4:BF:59:BF:24:A9:56:24:EA:61:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ox7Xn9wxa5PUv1m_JKlWJOphrT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a9:bb:6d:d7:3a:52:4b:f8:3b:bc:18:e4:fe:06:6e:e9:a7:
         5a:27:ac:02:a2:f7:84:d3:e5:1b:96:e3:e9:f3:93:df:eb:90:
         70:7d:02:7b:57:9e:ec:92:60:e1:e9:22:29:43:b1:2b:33:32:
         15:ea:ac:6f:d0:18:a2:2a:55:f5:e0:f3:2d:1c:5f:f5:58:3f:
         49:6d:90:30:88:e4:89:9f:04:67:04:25:ff:98:cc:da:86:2b:
         07:1f:1b:e8:ee:b6:5e:10:fb:39:a6:4c:da:8c:9e:3c:6c:5b:
         44:ce:5b:65:21:57:2d:be:27:8a:e1:e3:b5:5a:4b:6a:1b:8a:
         1c:d8:e9:8c:19:84:03:73:70:f8:24:dc:b6:c8:c9:58:e1:3b:
         d0:88:b4:f1:57:4e:08:3b:2f:15:b1:6c:07:c9:4f:d5:9c:f1:
         00:28:2a:fd:1f:79:44:ff:a0:1c:ab:ed:e0:76:4e:95:d6:f1:
         ed:5c:1b:7d:f5:f4:54:f6:40:1c:a3:4f:3a:69:4b:e6:4e:e6:
         97:de:01:9b:de:92:fc:ed:a4:a7:9e:7a:79:be:f9:70:85:1c:
         83:38:17:8b:9c:d2:27:10:01:1a:f1:b5:99:cc:4d:0a:ba:65:
         60:34:4f:7e:87:2b:87:c3:b8:03:0f:d7:d7:da:82:7d:58:a0:
         1f:bf:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:30:18 2024 by rpki-client on console.sobornost.net