Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
File:                     PSHzZqInwy5a81ik_fegqUhjgVA.mft (raw, json)
Hash identifier:          oAo5T4Di7G8r23GOnrCJ+8qMpFtMooCNC4Jh5sSIM4Y=
Subject key identifier:   86:36:8A:D6:B6:4F:28:A8:18:36:74:10:C2:01:9F:E6:42:BE:50:68
Authority key identifier: 3D:21:F3:66:A2:27:C3:2E:5A:F3:58:A4:FD:F7:A0:A9:48:63:81:50
Certificate issuer:       /CN=3d21f366a227c32e5af358a4fdf7a0a948638150
Certificate serial:       01901D463B9413F6CAF12862729BED0EF38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSHzZqInwy5a81ik_fegqUhjgVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
Manifest number:          0427
Signing time:             Sat 15 Jun 2024 19:01:00 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:00 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:00 +0000
Files and hashes:         1: PSHzZqInwy5a81ik_fegqUhjgVA.crl (hash: b/BFEy0n7df3Ocglt4JdYJMpmU+016wAP+H6dzW81us=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSHzZqInwy5a81ik_fegqUhjgVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:3b:94:13:f6:ca:f1:28:62:72:9b:ed:0e:f3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d21f366a227c32e5af358a4fdf7a0a948638150
        Validity
            Not Before: Jun 15 19:01:00 2024 GMT
            Not After : Jun 16 19:01:00 2024 GMT
        Subject: CN=86368ad6b64f28a818367410c2019fe642be5068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:58:f5:df:19:dd:e3:94:ba:91:51:bb:4e:
                    92:cf:ec:3c:b6:ef:53:5a:36:8f:ce:73:27:ee:b2:
                    2a:9b:2e:44:52:4f:e2:55:dc:ea:36:91:54:02:49:
                    0c:46:f6:a2:b3:f9:86:33:44:01:b5:2a:7d:5a:37:
                    b3:0c:f5:d7:d7:28:a5:bb:24:ed:00:b8:33:cf:a8:
                    58:59:03:b5:9b:d2:a9:75:6e:ef:00:12:a6:eb:7c:
                    19:05:25:b7:6c:34:bf:c6:92:88:de:f7:10:14:8d:
                    b2:97:79:dc:3d:87:96:ab:75:6b:4e:8b:26:5b:a3:
                    96:2a:28:41:34:1d:b8:b0:bf:0c:c5:57:8b:8b:fd:
                    26:b8:6b:99:e0:c6:68:fa:60:10:7f:70:08:65:62:
                    59:3d:44:77:45:e6:68:68:24:f6:17:43:85:6e:1f:
                    e4:06:0d:c8:ea:d5:a0:96:03:1d:6d:9a:bc:c9:d8:
                    83:5f:79:8c:28:ac:e1:14:a5:2f:57:8f:bf:81:d6:
                    65:97:f4:44:58:44:25:4b:8d:c9:13:b3:17:10:05:
                    42:f8:55:0c:de:ac:b6:67:30:f6:51:5f:3d:95:02:
                    39:e2:11:30:e2:6d:07:ab:bf:f5:ab:c7:29:9e:f3:
                    1b:64:6c:fe:52:22:80:0b:ae:e6:96:14:45:ff:96:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:36:8A:D6:B6:4F:28:A8:18:36:74:10:C2:01:9F:E6:42:BE:50:68
            X509v3 Authority Key Identifier:
                keyid:3D:21:F3:66:A2:27:C3:2E:5A:F3:58:A4:FD:F7:A0:A9:48:63:81:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSHzZqInwy5a81ik_fegqUhjgVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:34:8d:31:3b:ca:95:1c:e7:a5:0d:fe:6e:d1:48:33:04:18:
         19:df:11:13:c1:c8:80:db:8b:fe:63:d2:e8:dd:f3:1c:72:56:
         9c:a6:ba:10:a1:bd:22:9d:0d:3e:c5:83:44:5b:3d:b3:dd:af:
         78:52:f0:66:bf:78:fe:aa:9c:0c:3d:70:9b:41:64:2c:1e:e7:
         f1:59:f3:98:eb:4d:52:90:b8:2c:90:ff:12:3e:b6:b8:d4:5f:
         e1:23:99:d7:80:c7:2d:8f:2e:ac:c4:68:ba:f9:bf:15:30:ad:
         94:cc:4c:ae:61:f0:33:04:67:db:59:ca:cf:4d:0d:f5:78:b7:
         e2:e0:22:07:43:9a:3b:55:e2:1f:fd:f0:dc:66:c6:17:22:e0:
         71:b6:d3:ec:0f:89:bd:99:ed:e2:bd:56:68:87:e3:8c:7f:af:
         76:6a:7f:e8:1f:4d:41:92:9e:ad:d7:51:c0:74:e8:33:eb:fb:
         74:84:52:93:da:70:be:3d:f4:98:6e:85:1a:39:db:54:2c:bf:
         1d:b3:27:dd:8f:0b:82:66:b9:53:bf:d2:f9:35:9a:bf:7a:d0:
         19:43:73:1b:ec:4f:d0:30:7a:29:0f:de:e0:21:f6:84:04:5a:
         3a:c0:15:50:f2:25:39:81:87:97:55:32:30:c8:89:83:d9:6a:
         a5:d4:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:56:17 2024 by rpki-client on console-fra.rpki-client.org