Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.mft
File:                     fqb261IgGBAWg9qKQW1Umj4qTlU.mft (raw, json)
Hash identifier:          vYd0O4KUC4yBvGfLIGdvMTK5rXBvHthPWT+6IeMzH2k=
Subject key identifier:   38:D4:7F:90:DE:7F:5D:B1:47:46:A8:C3:87:C9:E0:E5:D8:93:D2:69
Authority key identifier: 7E:A6:F6:EB:52:20:18:10:16:83:DA:8A:41:6D:54:9A:3E:2A:4E:55
Certificate issuer:       /CN=7ea6f6eb522018101683da8a416d549a3e2a4e55
Certificate serial:       01909F4F4F331E4B00DB44B60B64D2ADDD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqb261IgGBAWg9qKQW1Umj4qTlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.mft
Manifest number:          D1
Signing time:             Thu 11 Jul 2024 01:01:33 +0000
Manifest this update:     Thu 11 Jul 2024 01:01:33 +0000
Manifest next update:     Fri 12 Jul 2024 01:01:33 +0000
Files and hashes:         1: fqb261IgGBAWg9qKQW1Umj4qTlU.crl (hash: 6wFTKrcO4+KqD0OaAuDOWkRHRbVsSmeOMxwmbH/vTgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqb261IgGBAWg9qKQW1Umj4qTlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Jul 2024 20:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9f:4f:4f:33:1e:4b:00:db:44:b6:0b:64:d2:ad:dd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea6f6eb522018101683da8a416d549a3e2a4e55
        Validity
            Not Before: Jul 11 01:01:33 2024 GMT
            Not After : Jul 12 01:01:33 2024 GMT
        Subject: CN=38d47f90de7f5db14746a8c387c9e0e5d893d269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:e1:7a:00:ce:ed:6f:cb:62:9b:74:1a:86:
                    59:6c:45:fd:e9:92:68:2f:0a:de:81:3a:67:d9:7a:
                    f3:85:aa:84:c8:8f:75:9a:79:d1:1a:ce:58:e8:b1:
                    16:91:16:a5:5d:ee:24:20:2b:f8:a9:1f:b7:ed:87:
                    1c:50:a1:cf:2f:3a:4f:b2:0b:c5:e9:9b:0f:23:16:
                    87:23:ef:a2:c0:ae:e6:7c:28:97:08:1d:c7:a1:79:
                    2e:34:14:dc:89:96:05:e5:f0:1c:f6:5a:7f:78:ea:
                    91:af:30:87:9c:04:a1:bc:bc:5a:d6:0d:06:6d:91:
                    c1:36:24:83:e1:cc:99:31:30:d0:9b:63:62:72:e5:
                    7e:31:ec:c7:28:ce:e7:7d:f6:3f:59:80:70:01:74:
                    9d:63:2e:f1:be:00:d8:39:f7:8b:4a:d2:0b:91:f8:
                    7e:32:15:e4:5d:95:f1:cc:71:e5:ca:fa:56:ab:16:
                    f7:10:52:bc:29:48:7f:c2:4a:68:9e:38:96:62:2f:
                    c5:3c:05:4d:cc:93:dc:19:8a:e5:9b:04:9a:16:7f:
                    ee:e5:25:93:63:45:da:f3:e4:ae:26:f8:7c:5e:6c:
                    ec:bb:6d:b6:d8:6f:df:8d:07:c5:bd:f1:76:92:7d:
                    16:f7:ca:fa:18:a5:3c:47:23:fe:d7:3f:68:6f:3e:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D4:7F:90:DE:7F:5D:B1:47:46:A8:C3:87:C9:E0:E5:D8:93:D2:69
            X509v3 Authority Key Identifier:
                keyid:7E:A6:F6:EB:52:20:18:10:16:83:DA:8A:41:6D:54:9A:3E:2A:4E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqb261IgGBAWg9qKQW1Umj4qTlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4299a2-97e0-46fa-bb9a-7ca636521818/1/fqb261IgGBAWg9qKQW1Umj4qTlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:fb:53:cf:4c:00:ad:6d:c6:96:d5:d0:4e:56:5f:7a:92:a1:
         a1:12:ae:74:54:a1:48:1d:76:09:5b:4b:46:16:df:2d:61:a1:
         d8:c4:0f:18:bc:99:f5:f5:ee:34:22:db:56:5f:a5:17:ca:3c:
         f5:19:b0:e9:a2:db:fd:0d:06:1f:ce:9e:5e:aa:a4:1d:76:02:
         d3:4d:75:a7:d7:df:50:c0:d4:59:bb:6e:48:6e:e7:9f:d4:21:
         06:6f:8d:b8:60:67:03:f3:a5:a8:7d:02:41:3d:0f:40:52:a1:
         44:46:9c:93:cc:eb:1d:c4:9b:f1:23:4c:e1:37:c9:8c:fd:f8:
         b4:ce:16:4b:69:8d:20:76:e6:3f:fb:db:2c:3f:08:c9:03:a4:
         0c:64:88:74:e1:b3:74:b3:fc:46:a1:1c:00:71:f7:03:53:2b:
         19:05:74:cb:3a:0f:14:f8:f0:ed:01:03:fb:0c:cb:9b:5d:af:
         7f:e0:ed:ef:85:0e:84:c0:e9:ee:f0:d0:85:54:cc:27:7f:5c:
         2a:11:39:39:7b:7f:f0:65:d1:1b:eb:08:88:93:ad:c2:df:8c:
         da:3c:bd:df:53:27:fc:32:3d:8e:54:77:7f:64:59:07:66:4a:
         e1:1c:cb:d7:2f:49:4c:48:c1:5c:10:a6:78:0a:ed:ab:c7:3a:
         1c:ff:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 06:16:53 2024 by rpki-client on console.sobornost.net