Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
File:                     PpPoAxz911eQjNyf-ZJLfEukR48.mft (raw, json)
Hash identifier:          3OgKGajI1KcGKD+uQdltDOldYsrvrIavm4uwCjUVvXg=
Subject key identifier:   07:00:2F:4D:91:15:17:9F:48:4B:04:EE:C7:E7:3E:89:D8:2F:A9:C3
Authority key identifier: 3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
Certificate issuer:       /CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
Certificate serial:       01901EFDE85B1F00B8AAC40C1CC53762AC6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
Manifest number:          02D3
Signing time:             Sun 16 Jun 2024 03:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:14 +0000
Files and hashes:         1: PpPoAxz911eQjNyf-ZJLfEukR48.crl (hash: 5bogI+jgLoFgWaV8qZWbXydRK8RJbguPBsdMPmlfVyI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:e8:5b:1f:00:b8:aa:c4:0c:1c:c5:37:62:ac:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
        Validity
            Not Before: Jun 16 03:01:14 2024 GMT
            Not After : Jun 17 03:01:14 2024 GMT
        Subject: CN=07002f4d9115179f484b04eec7e73e89d82fa9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:71:ac:c9:0b:2f:34:0d:d5:27:81:2e:86:
                    7d:f6:dd:fe:20:7e:31:9b:b1:40:7f:fd:4a:89:4e:
                    0c:c4:d4:cc:e7:21:b9:54:df:fb:ca:5c:62:ab:4d:
                    f6:7c:71:3f:2e:7f:f5:29:61:8d:99:85:07:2d:52:
                    2a:56:25:2e:d2:f3:a3:3f:65:4f:4e:e4:f1:54:ae:
                    f7:f3:01:f2:50:39:b1:e0:32:42:bd:3f:ec:09:06:
                    66:85:94:cc:03:1e:1a:e4:22:66:08:0c:2d:2e:a2:
                    9e:5f:48:8d:3c:8e:73:4d:13:72:ea:76:7c:e7:5d:
                    b2:79:d9:f3:46:96:4d:ed:96:ad:ce:43:d8:08:c8:
                    93:74:90:0b:c3:8f:d6:bd:3c:71:a6:78:ca:33:ec:
                    96:2f:70:32:04:9d:2b:90:2a:2a:ef:12:13:43:06:
                    db:3a:64:49:d7:09:e1:e1:35:27:0b:1c:a2:a9:fc:
                    f0:06:32:02:c5:2b:20:08:23:50:00:11:da:c9:d4:
                    5d:73:af:99:51:f1:04:4c:cd:c5:26:3d:7b:72:c6:
                    62:3c:53:ca:8a:74:c9:63:d3:75:05:35:f4:d9:a4:
                    64:e2:df:de:92:7b:24:0a:e0:c9:4c:93:42:0f:01:
                    fc:eb:3a:80:ae:b0:ec:0e:cc:c7:f4:eb:21:65:8e:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:00:2F:4D:91:15:17:9F:48:4B:04:EE:C7:E7:3E:89:D8:2F:A9:C3
            X509v3 Authority Key Identifier:
                keyid:3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:b2:8c:e3:99:00:da:e1:8a:cf:f5:4a:d1:49:03:58:f4:
         2f:2b:5e:a2:cd:31:75:f5:3b:80:23:c1:7f:c4:16:b2:ab:70:
         43:0d:0f:6d:cf:bd:3e:a9:c2:8f:73:9d:2c:f4:25:73:5c:35:
         8f:bb:1a:3e:9a:d1:b1:b0:6a:84:a5:c2:12:50:32:6c:d2:b6:
         05:7e:f0:5f:1c:65:2e:e3:08:13:fd:6f:86:65:5f:bd:11:24:
         e7:a4:90:2e:69:ff:77:60:8b:a3:68:8a:16:ca:87:0c:93:9c:
         ea:4f:64:c6:28:b6:12:e6:d9:39:7d:c5:3a:b9:a0:28:83:4f:
         e6:b3:81:fd:65:5f:fb:72:ac:11:83:3a:ee:70:5a:be:16:e1:
         ca:0c:9b:60:71:a9:ec:85:88:c5:96:04:2c:8a:64:d0:ab:2a:
         95:e2:b3:4d:79:3c:c9:00:c2:f5:3e:38:3e:60:1e:49:c0:da:
         bd:77:05:c5:62:ab:23:e5:e5:26:10:cf:e7:42:be:64:6c:99:
         f5:6d:ed:e5:59:36:8c:48:a0:5f:f4:cb:37:12:d4:34:2d:cb:
         98:fd:37:f8:1d:f7:bf:61:06:29:18:24:a2:cc:c4:c7:eb:68:
         64:8f:9f:99:6a:03:89:c8:6f:b6:55:43:05:b1:54:0d:c3:c6:
         a4:1b:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:44:43 2024 by rpki-client on console-fra.rpki-client.org