Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File:                     vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier:          IUTdGiJ1XGiyQP7FGLpWwqrkM3S0fR4y7PsT9V3KVL4=
Subject key identifier:   C7:FC:81:99:81:6E:A3:BE:A4:34:EB:1D:30:13:F5:CD:1F:9A:7D:E5
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer:       /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial:       01901D468A19D7B394B26D90342E450288C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number:          101C
Signing time:             Sat 15 Jun 2024 19:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:19 +0000
Files and hashes:         1: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: nY9cJoph5xhwHA041q5/hLwhP2PdyAZ0AQAZ09X9LNE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:8a:19:d7:b3:94:b2:6d:90:34:2e:45:02:88:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
        Validity
            Not Before: Jun 15 19:01:19 2024 GMT
            Not After : Jun 16 19:01:19 2024 GMT
        Subject: CN=c7fc8199816ea3bea434eb1d3013f5cd1f9a7de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:52:cf:02:34:95:9d:43:26:83:84:a9:de:
                    34:f8:00:18:cf:2b:fe:3c:05:4e:3a:93:27:02:cc:
                    1e:46:88:68:28:c3:bd:7a:6b:b3:7a:a0:ed:d3:cb:
                    14:ee:a5:8f:aa:ca:76:98:fe:97:5c:5b:67:e5:96:
                    77:ff:5d:0e:87:6a:a7:89:d5:6e:cb:80:65:10:7d:
                    c8:67:3e:62:1a:87:1c:d7:a9:ab:e4:a5:28:8e:97:
                    9c:6b:ae:68:d2:c4:4c:1b:8c:43:56:7e:b6:a3:80:
                    9e:05:b5:ed:af:d9:45:5d:62:70:d9:73:22:89:90:
                    0b:a7:e0:6a:c2:e9:05:e1:cb:ab:22:d8:fb:c9:38:
                    6f:7c:30:29:55:84:d6:d2:c3:81:e2:0e:22:66:12:
                    e7:2a:e1:14:7e:8a:4a:d4:b0:56:43:9c:ae:c2:3c:
                    43:87:6f:40:c1:66:d5:6e:70:ec:3a:ad:2c:6d:c1:
                    d7:fd:00:ae:5e:7c:e5:45:21:5b:33:ef:20:23:7a:
                    f4:57:d0:64:ce:66:67:5b:04:30:38:87:4e:6d:12:
                    aa:fe:6d:06:bc:a6:b0:93:a8:53:7c:29:f6:76:81:
                    28:bd:0a:71:e0:83:9a:04:e3:1a:fd:4e:37:a2:7b:
                    20:0d:11:6e:37:76:cb:5f:b4:9f:3e:43:6a:b7:bc:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:81:99:81:6E:A3:BE:A4:34:EB:1D:30:13:F5:CD:1F:9A:7D:E5
            X509v3 Authority Key Identifier:
                keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f9:ef:c2:38:2c:d3:5c:92:90:4c:ba:f3:fe:78:87:37:27:
         fa:b8:98:33:d9:4c:05:69:7f:79:ac:00:f9:b7:48:58:93:a0:
         38:03:53:95:50:91:16:5d:70:a2:97:aa:a1:fd:f0:06:db:16:
         c5:03:e4:90:46:4d:17:46:87:f6:22:db:78:f7:62:93:c4:44:
         9a:31:eb:40:18:a3:06:dd:4f:fe:1a:48:4b:43:ae:34:50:bf:
         73:c2:a3:b6:8f:43:22:4a:51:72:99:65:38:39:2e:d9:1e:e1:
         15:47:71:25:d9:a7:fa:b4:c7:1b:77:75:2e:ef:40:e0:5a:97:
         a4:71:cd:48:8b:16:be:22:ba:79:32:8b:ba:45:50:61:44:94:
         ea:3f:25:5a:fa:84:cd:58:76:01:f9:38:5d:27:60:c3:2d:05:
         50:9e:4f:cf:5a:bf:1f:a9:bf:c3:ce:69:29:56:f0:f1:15:db:
         03:79:d7:54:d3:df:5a:13:19:ef:49:cb:2a:13:13:45:86:8a:
         4f:19:ad:e8:41:fa:84:17:b0:89:fe:a4:c1:71:44:33:9a:51:
         2b:87:df:37:d9:2d:0f:92:23:3e:86:ba:b5:2d:bb:fe:64:34:
         99:fa:ab:fc:b4:93:09:6e:56:7b:d6:72:68:04:ba:25:a4:85:
         ee:0a:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:43 2024 by rpki-client on console-fra.rpki-client.org