Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.mft
File:                     g3t5wzf1FFChNtMFExd-h7yUfkY.mft (raw, json)
Hash identifier:          pdK5vebtz6Cz/BSvAEYIl1u858UKqq8lQx76hyKVJYk=
Subject key identifier:   AB:4A:81:28:D0:75:0D:49:EA:3B:04:A6:16:55:A2:05:B7:6A:AC:ED
Authority key identifier: 83:7B:79:C3:37:F5:14:50:A1:36:D3:05:13:17:7E:87:BC:94:7E:46
Certificate issuer:       /CN=837b79c337f51450a136d30513177e87bc947e46
Certificate serial:       01906B2C21E02A4EDAD61B04AF425C1DE76E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g3t5wzf1FFChNtMFExd-h7yUfkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.mft
Manifest number:          11ED
Signing time:             Sun 30 Jun 2024 22:02:52 +0000
Manifest this update:     Sun 30 Jun 2024 22:02:52 +0000
Manifest next update:     Mon 01 Jul 2024 22:02:52 +0000
Files and hashes:         1: g3t5wzf1FFChNtMFExd-h7yUfkY.crl (hash: FBUmD9LHSQxNwhS5VYYpXNi0RatZM7qnbMvL+Td8RXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g3t5wzf1FFChNtMFExd-h7yUfkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2c:21:e0:2a:4e:da:d6:1b:04:af:42:5c:1d:e7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837b79c337f51450a136d30513177e87bc947e46
        Validity
            Not Before: Jun 30 22:02:52 2024 GMT
            Not After : Jul  1 22:02:52 2024 GMT
        Subject: CN=ab4a8128d0750d49ea3b04a61655a205b76aaced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1c:e1:3a:52:55:e5:c4:63:8d:b1:db:6b:e8:
                    20:23:57:4d:05:81:34:8c:ff:78:d5:85:4a:24:0c:
                    e9:3e:bd:16:15:d3:72:5c:52:be:81:87:41:e6:4a:
                    da:12:dc:16:60:01:2c:e5:15:3e:ce:e2:74:df:9f:
                    d1:22:f7:71:db:69:9d:22:34:3a:2a:5c:26:f3:93:
                    32:aa:70:67:bd:0c:c1:62:24:8a:d4:bf:cb:e3:a7:
                    b9:a1:35:6d:1b:81:0a:b0:ae:dd:af:db:c5:31:14:
                    ac:37:79:46:cc:3b:6b:e3:c3:dc:4b:d9:69:ce:08:
                    59:d3:f8:69:85:78:b0:21:fa:5a:68:f8:2f:3c:f4:
                    fc:7b:9f:50:9e:59:6b:62:8f:44:24:14:9b:72:03:
                    5b:45:b9:71:3f:24:d1:0c:f3:9c:bb:26:5c:93:39:
                    46:7f:0a:56:4a:4d:56:30:b9:6e:be:fe:b4:fe:90:
                    f5:cb:af:21:1a:5d:cc:a8:a0:b6:a1:5b:08:fb:1b:
                    70:26:2a:e6:05:43:b2:4e:a3:49:2d:59:23:93:63:
                    33:e1:3e:da:d3:00:43:d8:de:3f:ef:9a:92:07:a2:
                    eb:49:4e:f2:0e:42:c1:62:1a:7c:c7:fa:33:89:0e:
                    18:a4:a9:42:d7:01:9c:ee:7f:e5:48:bc:63:64:a4:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4A:81:28:D0:75:0D:49:EA:3B:04:A6:16:55:A2:05:B7:6A:AC:ED
            X509v3 Authority Key Identifier:
                keyid:83:7B:79:C3:37:F5:14:50:A1:36:D3:05:13:17:7E:87:BC:94:7E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3t5wzf1FFChNtMFExd-h7yUfkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/65fef8-8483-4cf1-b0bf-feeca92ac3d6/1/g3t5wzf1FFChNtMFExd-h7yUfkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:49:55:40:d3:d7:e8:a3:44:29:c0:41:43:28:b4:83:d8:b7:
         ee:b5:ab:25:7f:97:5e:64:03:7f:cf:32:d6:15:49:e4:d8:d6:
         12:70:49:f2:14:0a:e3:75:f1:4c:fe:9a:bb:bd:65:80:0e:12:
         b7:9e:06:4e:04:28:9c:d9:17:9a:b9:a4:28:3e:4a:b5:d3:2e:
         96:34:d6:ff:d5:ae:0c:05:24:4b:ff:2c:01:5e:f4:94:28:77:
         c6:55:b3:b5:5e:79:2a:7b:0a:74:ab:86:8a:ac:83:45:fd:56:
         2b:b8:32:8c:45:9e:08:56:02:4c:bb:a3:0d:10:a9:9e:7a:04:
         1d:d1:99:db:d9:0b:d4:e0:af:d4:64:05:ed:1c:ac:51:90:eb:
         1a:30:7f:05:ad:41:3b:e1:bc:fd:a2:ab:be:88:32:1b:c3:e6:
         91:71:37:70:26:6f:7f:46:88:8a:fa:59:81:4d:5d:57:77:58:
         60:a2:c6:a5:ec:2b:0c:22:b9:94:41:30:2d:15:d6:8f:5e:2f:
         dd:12:36:54:6a:b5:2b:51:a6:ad:7c:87:e0:6b:fe:e1:3b:a5:
         e8:d9:7a:49:15:0d:5f:65:7f:2a:f8:09:74:3a:ff:f0:f7:dc:
         9b:a1:06:d9:be:10:58:50:e9:df:b8:3c:3b:79:ce:ad:79:b2:
         bc:b9:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 08:02:19 2024 by rpki-client on console.sobornost.net