Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File:                     P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier:          FTFFwONXM3pJxZXZ3NcxY9h5LurDKDOGlzCedsf5+MA=
Subject key identifier:   89:57:F4:EC:B4:DD:76:3C:E4:59:7E:BA:9C:24:56:87:62:1E:55:8B
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer:       /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial:       01901DEBB7C6755E259DEA1CE2E46155FA69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number:          05BF
Signing time:             Sat 15 Jun 2024 22:01:45 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:45 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:45 +0000
Files and hashes:         1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: iDowywT6i21gHMZsVFalxRSlMxQVBUy6YdnxTVXkYk0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:b7:c6:75:5e:25:9d:ea:1c:e2:e4:61:55:fa:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
        Validity
            Not Before: Jun 15 22:01:45 2024 GMT
            Not After : Jun 16 22:01:45 2024 GMT
        Subject: CN=8957f4ecb4dd763ce4597eba9c245687621e558b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:5e:98:b7:cd:c1:ad:3e:92:a4:8c:67:c3:
                    9f:d7:fb:b6:14:29:9d:1d:91:29:ee:8e:8a:8c:51:
                    5e:6c:55:5d:95:72:09:2d:16:51:77:50:d7:0b:54:
                    76:88:54:a0:44:b5:ce:45:0a:78:c8:3f:3f:4a:69:
                    21:c7:de:52:96:57:a6:6a:ab:e7:29:55:d0:c9:3d:
                    5e:d9:ec:1e:3c:88:46:3c:cf:c5:a8:0b:a7:c5:27:
                    3e:a7:c9:fe:bc:58:d0:f1:9e:93:de:6c:4a:06:0c:
                    6c:29:33:22:aa:38:fd:bd:ae:b1:94:b8:d5:36:07:
                    f6:74:3d:cd:f0:82:43:3b:96:3f:c9:65:e2:33:2d:
                    a8:cb:c8:b7:83:64:4d:c1:2e:4f:19:06:8f:28:f8:
                    d6:97:6e:03:15:f8:ac:97:cf:7a:65:ff:d9:4c:cc:
                    0c:9d:35:30:17:a6:8c:04:1a:07:e0:55:5e:3d:40:
                    71:28:5b:8a:76:15:0e:39:ca:db:ed:93:65:4a:e6:
                    28:0b:4b:4f:26:70:14:ef:f8:ed:30:5b:49:68:69:
                    05:ba:35:e1:c1:a3:66:59:ab:e2:53:11:5f:2e:40:
                    eb:3f:34:a1:be:c8:49:6f:15:50:bc:d5:77:ce:d9:
                    2a:88:79:17:92:31:cf:2e:e5:a4:da:72:29:49:65:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:F4:EC:B4:DD:76:3C:E4:59:7E:BA:9C:24:56:87:62:1E:55:8B
            X509v3 Authority Key Identifier:
                keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d7:3f:ef:65:03:b6:cf:49:54:96:50:8e:58:ce:17:5b:eb:
         9a:e7:29:59:01:31:d2:45:0c:5f:9e:8c:f4:03:ad:30:98:ec:
         d7:67:69:d9:48:0f:3e:2f:93:99:4f:cf:62:c6:ee:48:fe:c3:
         a7:a0:3d:c7:35:b6:6f:bb:61:e5:af:39:93:5e:8b:ec:72:ad:
         96:47:dd:97:9a:2e:2f:0a:f6:46:d4:ef:b2:d2:8b:ed:33:aa:
         fd:bf:39:14:42:e9:65:30:32:09:16:1a:cb:1f:04:65:76:8f:
         3a:ff:9b:4b:ed:3a:d6:17:53:4e:ed:29:68:32:48:40:62:cf:
         9a:43:1e:87:05:ac:7a:35:a5:4a:b2:08:f1:c3:34:3d:a9:d2:
         6e:be:de:86:87:03:c3:e8:1a:4d:71:8f:1f:7a:e4:4b:7f:97:
         d6:79:ef:3c:5c:52:b8:a9:1c:ad:6a:59:ae:0e:e0:cb:17:a5:
         02:84:59:05:41:79:5f:ec:1b:21:28:60:cd:23:ee:ae:e8:23:
         2b:07:bc:04:57:3a:04:e3:36:63:4f:68:36:5f:0f:33:48:c9:
         8d:f0:a8:c9:06:94:cc:f0:18:40:4e:d8:c4:88:7b:14:f1:19:
         55:4a:79:27:53:aa:06:8f:4c:a6:97:ab:cd:b1:26:58:83:c2:
         0d:d6:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:54 2024 by rpki-client on console-fra.rpki-client.org