Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
File:                     P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json)
Hash identifier:          66BpEYjcz8fhB/ohWeazijkgOsjuXh9KKVp1qnEGeTE=
Subject key identifier:   E9:5B:BC:22:52:94:71:40:AC:73:50:86:6B:79:74:3B:55:A5:82:21
Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
Certificate issuer:       /CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Certificate serial:       019238142A5FEE42C48A0828139661F472BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
Manifest number:          0E5B
Signing time:             Sat 28 Sep 2024 10:01:38 +0000
Manifest this update:     Sat 28 Sep 2024 10:01:38 +0000
Manifest next update:     Sun 29 Sep 2024 10:01:38 +0000
Files and hashes:         1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: ni17lhrgm5fxBX8yr6s1S+/hLDx0b++DzWD8b4SoaqE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:14:2a:5f:ee:42:c4:8a:08:28:13:96:61:f4:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606
        Validity
            Not Before: Sep 28 10:01:38 2024 GMT
            Not After : Sep 29 10:01:38 2024 GMT
        Subject: CN=e95bbc2252947140ac7350866b79743b55a58221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:15:20:1b:6d:3c:56:1a:88:71:62:bc:a8:32:
                    3a:dd:57:91:f8:12:29:65:50:eb:bc:0f:bc:b7:fc:
                    66:6a:6a:da:33:97:45:b9:0c:2c:20:a4:e2:0a:87:
                    7a:af:6e:8f:8a:fe:54:7e:d2:d6:a6:6c:8c:77:7d:
                    a4:c0:4c:07:fe:df:09:e8:e2:72:d3:1c:39:de:9c:
                    e3:d3:d1:bb:1c:9e:fe:41:73:1d:ca:4f:5d:39:ae:
                    f4:53:8a:f9:7e:5c:ae:b3:74:9f:3a:fb:40:65:1e:
                    35:7c:ab:1b:1b:87:47:55:0c:d1:c4:98:2e:0e:b3:
                    f4:86:3f:95:57:59:fb:48:5d:b6:88:c3:1c:18:96:
                    30:35:7e:ad:3e:b1:77:a1:fb:8f:c1:9c:0c:53:97:
                    98:6a:a6:01:c5:0e:d1:3e:0e:5b:22:5a:1c:2a:97:
                    79:68:f3:9f:52:02:cb:90:69:c3:23:d1:38:4e:1a:
                    60:8f:b4:04:87:58:49:e3:b6:15:57:dc:ac:b4:f0:
                    cc:63:e8:8a:6f:b7:3c:22:50:f4:3f:77:86:f9:21:
                    33:36:f4:01:1b:0d:b5:d5:e7:58:77:ff:e9:de:e6:
                    d9:26:30:ca:7e:d6:19:ee:aa:d3:6a:89:74:03:b9:
                    57:0e:e8:71:10:c6:95:d9:9d:df:d0:09:c3:62:47:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5B:BC:22:52:94:71:40:AC:73:50:86:6B:79:74:3B:55:A5:82:21
            X509v3 Authority Key Identifier:
                keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:70:38:a8:35:d0:06:ec:3a:52:ce:22:3d:75:8c:31:1b:
         39:db:ee:60:8b:28:f9:77:0c:2c:40:14:52:e5:8d:98:50:6b:
         7d:62:54:4c:a7:3c:3d:9f:c0:6c:cb:b5:2c:63:d8:30:65:73:
         dd:c2:6c:9f:40:b7:79:d0:aa:16:29:e8:01:54:21:12:98:74:
         d5:b3:21:a0:4d:fb:00:06:82:5e:d0:f2:13:e2:58:2c:44:e7:
         43:53:e1:5e:e9:f5:16:5a:a0:7d:61:69:9d:d5:6d:91:9f:af:
         da:55:f1:14:1e:b6:09:a6:9a:8f:4b:54:ca:3b:a6:24:da:38:
         56:bd:f9:60:b5:d6:8e:c6:06:a8:5c:75:81:96:2a:b4:20:a1:
         36:b9:23:47:83:0e:e5:68:43:ad:a9:6a:38:90:98:d9:fc:34:
         a9:91:20:b7:b1:ff:81:f2:02:ee:3d:89:ea:99:f5:b3:5d:af:
         28:f8:30:a1:53:5a:8c:cd:d0:b0:20:69:5c:9a:d4:48:00:79:
         e7:ec:e1:e7:42:f1:92:5d:63:38:54:7c:3b:89:71:78:35:b2:
         a0:c6:f9:b7:b0:dd:7e:54:29:f2:dd:03:35:48:44:d0:e6:d5:
         8b:0d:98:39:09:c1:49:62:ea:b5:11:01:f9:3a:50:da:54:03:
         99:a9:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:01:18 2024 by rpki-client on console-fra.rpki-client.org