Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.mft
File:                     1Dv9KsNqC7cUOwIDCetsEftIm4w.mft (raw, json)
Hash identifier:          oOrtiGVwCtjkU+TAAHUadOPTTQy/ryXJQVp40Md2W1k=
Subject key identifier:   48:F7:44:EA:7D:9B:AC:5C:1F:05:74:B6:40:DE:FD:9B:EF:CC:A7:1B
Authority key identifier: D4:3B:FD:2A:C3:6A:0B:B7:14:3B:02:03:09:EB:6C:11:FB:48:9B:8C
Certificate issuer:       /CN=d43bfd2ac36a0bb7143b020309eb6c11fb489b8c
Certificate serial:       01906B2BFAB6E6FC4CDF5A0EC83100222FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Dv9KsNqC7cUOwIDCetsEftIm4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.mft
Manifest number:          07B8
Signing time:             Sun 30 Jun 2024 22:02:42 +0000
Manifest this update:     Sun 30 Jun 2024 22:02:42 +0000
Manifest next update:     Mon 01 Jul 2024 22:02:42 +0000
Files and hashes:         1: 1Dv9KsNqC7cUOwIDCetsEftIm4w.crl (hash: V53X0osZSgtVilbtMK82bmzDv79ppVgUeNkneBvKKwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Dv9KsNqC7cUOwIDCetsEftIm4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2b:fa:b6:e6:fc:4c:df:5a:0e:c8:31:00:22:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43bfd2ac36a0bb7143b020309eb6c11fb489b8c
        Validity
            Not Before: Jun 30 22:02:42 2024 GMT
            Not After : Jul  1 22:02:42 2024 GMT
        Subject: CN=48f744ea7d9bac5c1f0574b640defd9befcca71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:a4:71:94:94:0e:cb:c1:9d:e0:43:b7:35:
                    a8:06:ff:f6:7c:d8:43:81:bf:bd:af:e1:65:5c:a1:
                    59:4d:8b:ad:42:a7:37:d8:d5:05:7e:d7:fc:c0:a9:
                    6a:c3:7c:9e:2f:ce:4e:89:31:52:aa:65:38:03:42:
                    6f:e1:5e:67:a1:d3:0d:31:7e:6d:e5:72:6c:b3:41:
                    d1:60:ed:7e:b6:83:01:64:22:b2:59:e2:da:bf:5a:
                    af:01:c7:5b:2d:66:07:7c:be:ef:18:51:90:fc:20:
                    31:4d:a3:1d:8e:77:0f:75:c6:f7:5b:52:56:73:d9:
                    e0:36:1d:fd:56:96:ef:97:9d:43:4f:dd:32:00:fd:
                    b0:c3:f6:b9:7a:ab:9e:d9:e2:0e:37:28:b9:67:26:
                    82:4e:62:7e:db:61:73:50:f7:96:e2:67:fa:c8:d3:
                    15:2f:e6:95:20:4c:7c:5f:91:70:16:1a:3b:f7:c1:
                    6b:b7:9e:2d:51:37:2e:a4:4a:54:29:21:23:e7:b2:
                    9a:ec:9b:f4:bf:8d:45:c0:a8:ee:e1:7c:ac:38:99:
                    f8:a2:bc:9d:6a:ac:9c:69:3b:66:6a:e1:00:73:4d:
                    d9:ae:89:da:51:9e:a2:2f:5e:e7:0a:9d:67:69:87:
                    eb:90:e7:11:3e:6b:55:05:e6:b5:3c:13:ed:d4:26:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:44:EA:7D:9B:AC:5C:1F:05:74:B6:40:DE:FD:9B:EF:CC:A7:1B
            X509v3 Authority Key Identifier:
                keyid:D4:3B:FD:2A:C3:6A:0B:B7:14:3B:02:03:09:EB:6C:11:FB:48:9B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Dv9KsNqC7cUOwIDCetsEftIm4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fc050a-984e-4428-8e8e-0a4fe5336bee/1/1Dv9KsNqC7cUOwIDCetsEftIm4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:67:5e:97:82:05:94:bd:35:54:ef:40:66:de:42:39:6b:
         ee:92:ba:1f:a2:94:f4:10:51:d5:a1:b1:b8:81:87:66:6b:aa:
         92:3d:a9:19:64:ad:1a:05:a8:68:8d:7b:59:d0:db:b5:9e:76:
         c0:e6:0e:b6:e7:17:55:2e:5f:3d:c3:52:ce:eb:da:9d:ac:86:
         1e:bf:28:e4:8f:f8:62:bd:a7:ab:00:cc:73:33:df:7d:0d:e1:
         5d:0a:3a:33:a8:c9:cb:ec:bd:a2:f4:14:95:6d:59:a3:22:3e:
         86:7e:f0:20:f8:ed:03:ef:0d:f3:96:a9:24:0c:d1:8d:ab:7e:
         17:e6:f8:f8:33:55:34:36:54:8d:ee:73:bf:8c:e9:53:3d:7e:
         28:07:e5:10:74:81:a3:b9:cd:41:8a:28:e5:61:b5:d2:fb:f4:
         23:38:8b:b1:5b:d9:46:19:e1:a7:7f:96:d8:74:b0:44:fa:73:
         d2:05:f8:b6:f7:fe:8c:f5:f5:b5:3e:7a:ad:95:b8:91:7f:32:
         34:c2:85:96:e0:39:c7:fc:33:65:01:d4:cf:0f:be:b1:33:21:
         f6:29:1d:25:7f:03:79:14:5c:83:02:75:af:85:b5:4a:42:26:
         27:dd:9d:63:2f:87:fe:dd:57:49:8a:4f:e5:4f:1d:f1:8e:38:
         20:a3:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 08:11:27 2024 by rpki-client on console.sobornost.net