Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File:                     1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier:          Q2i408OaoWl9GIYJOoJg1Iht8f2O0pAYziTn2mdv7wk=
Subject key identifier:   B8:61:CE:33:80:84:62:00:BE:9B:23:17:A3:8D:B9:33:DF:29:50:13
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer:       /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial:       01901DECB1ADB67160DAD6FD20E325118E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number:          0302
Signing time:             Sat 15 Jun 2024 22:02:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:49 +0000
Files and hashes:         1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: V58XubcA2bLUGpMDnwjp6/NB9dl+w6D996Hjkft2nTM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:b1:ad:b6:71:60:da:d6:fd:20:e3:25:11:8e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
        Validity
            Not Before: Jun 15 22:02:49 2024 GMT
            Not After : Jun 16 22:02:49 2024 GMT
        Subject: CN=b861ce3380846200be9b2317a38db933df295013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0e:3a:d8:75:24:fc:2f:2d:99:7d:88:a1:f5:
                    b4:28:d0:2d:84:f8:00:71:f3:34:57:9c:48:b5:0c:
                    0e:0d:06:2a:07:96:8f:5a:b7:1b:81:d2:8f:47:8e:
                    e4:70:b4:1c:f5:75:7a:df:04:b0:1d:81:88:0e:c1:
                    a0:3f:9a:c4:62:73:72:ff:e6:26:1a:f7:c6:de:be:
                    c0:b6:00:30:b6:c4:f4:d6:a4:e5:c6:6e:a1:54:68:
                    56:ac:26:c7:d2:21:51:1a:42:4a:a4:24:ec:07:6f:
                    44:fb:ef:5a:e1:a2:93:7d:62:51:8e:92:5b:34:f1:
                    d9:6f:78:95:45:61:a2:3a:0f:3f:31:ee:7c:d1:78:
                    a3:b0:65:0b:f8:9f:fb:3f:bf:b4:dc:db:0d:fe:5e:
                    80:df:35:95:9d:fc:7b:fb:a0:da:ea:eb:ef:14:fd:
                    1e:de:43:07:de:f1:b8:7f:41:87:01:47:d5:05:a6:
                    62:49:89:2f:c7:00:8b:3c:23:b2:df:cf:dd:3d:e3:
                    ef:28:b8:81:1a:a4:67:35:80:9f:a3:49:b3:d1:0f:
                    f4:ff:93:4a:e0:ce:fa:67:84:2a:15:e6:02:b8:8f:
                    81:73:69:da:2a:58:4d:f4:b3:df:ca:9c:f7:a3:a5:
                    c7:cf:30:55:94:87:72:92:03:a4:35:dd:76:4a:59:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:CE:33:80:84:62:00:BE:9B:23:17:A3:8D:B9:33:DF:29:50:13
            X509v3 Authority Key Identifier:
                keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5b:ca:9c:77:4a:f7:55:13:80:b5:23:98:bb:91:57:96:f1:
         66:c5:a6:82:be:92:62:b7:16:03:26:02:3e:70:2e:90:08:52:
         e6:a6:8b:ab:75:3a:1c:e5:0b:f8:74:f6:f2:22:b0:cf:ea:71:
         d1:d7:0d:49:c6:6a:ee:d1:cc:ce:e9:17:ba:d2:9c:d1:a0:30:
         bc:06:1f:17:51:e6:7b:18:31:2b:b0:12:20:d4:a7:ae:16:13:
         34:8f:2a:08:1a:97:40:cd:16:26:11:ec:99:26:4d:dd:ef:d0:
         99:81:71:bf:c0:77:8f:80:14:9a:75:00:44:b1:f1:ae:68:91:
         42:12:df:08:c0:8f:28:02:8c:25:30:f1:40:5c:30:09:16:c0:
         7a:84:1a:a9:e9:ca:d7:1c:ca:9c:f9:1f:95:0e:48:c9:62:cc:
         84:f2:8f:a0:4b:85:a8:4c:f4:4b:26:72:08:de:c9:f6:ca:3b:
         18:73:d9:78:63:a6:54:40:98:ba:50:b6:72:a8:03:10:8e:f8:
         36:be:a7:bb:d4:04:ba:0f:35:84:bb:8f:46:54:12:15:28:af:
         26:ed:01:33:e0:70:5d:1e:3d:1f:08:a7:9f:98:4a:77:23:18:
         4f:77:88:07:3e:d3:0c:ea:40:8b:11:08:e3:47:f2:df:2d:31:
         5e:e5:13:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:04 2024 by rpki-client on console-ams.rpki-client.org