Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File:                     Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier:          QIcen4/tYbWKX6VCHCRueQUzDcTBGujwIGUnemeGc2w=
Subject key identifier:   6C:37:69:3D:CB:9A:95:F3:2F:16:0D:40:DC:95:50:8C:95:B9:85:6A
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer:       /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial:       01901CA18AB8EFC712BCD00D4B6713512DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number:          01E1
Signing time:             Sat 15 Jun 2024 16:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:07 +0000
Files and hashes:         1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: 1M4dEGLPTbCuHczi64dtwswjNqtzJ1zJk+7lSUxwESY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:8a:b8:ef:c7:12:bc:d0:0d:4b:67:13:51:2d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
        Validity
            Not Before: Jun 15 16:01:07 2024 GMT
            Not After : Jun 16 16:01:07 2024 GMT
        Subject: CN=6c37693dcb9a95f32f160d40dc95508c95b9856a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:35:ce:94:05:77:ce:1e:24:13:43:2f:3b:d5:
                    0a:16:c3:f7:5e:63:47:c5:96:c5:34:33:62:ac:25:
                    48:01:1b:57:61:54:6b:41:38:b8:50:93:5c:60:db:
                    7d:7e:4b:25:f7:24:ff:9d:04:37:96:ab:6d:84:de:
                    5c:91:0f:8c:37:d8:4d:ef:a6:54:88:44:0a:3d:57:
                    5d:33:63:8a:40:4a:83:3b:db:b3:31:28:9f:20:3b:
                    a3:a1:be:38:06:d6:4a:49:73:71:6e:4a:93:80:ab:
                    ca:07:9e:b9:b9:c7:12:02:d7:88:3b:f1:82:94:a9:
                    4d:4c:f9:72:c7:ae:cd:c3:21:bb:18:bd:ae:42:0a:
                    e5:d2:9d:9b:b4:fb:30:0d:3a:56:aa:26:66:9f:ae:
                    70:87:db:e0:a8:fc:ae:6a:bf:ca:6d:7c:d4:3d:82:
                    89:f7:b3:f0:1a:23:bb:61:de:25:60:37:c4:51:dd:
                    60:69:bd:fe:c6:1e:84:73:21:16:42:31:65:e2:88:
                    42:14:9a:61:52:46:ea:a8:82:f9:fd:d5:17:2c:6b:
                    32:03:50:de:51:c8:a5:93:f9:5b:8d:c6:e3:c7:d9:
                    af:32:17:71:ed:1f:d6:16:d5:8c:7d:e5:40:7d:e3:
                    c1:dc:73:72:e2:ee:c8:7a:c7:6e:3d:6b:65:72:86:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:37:69:3D:CB:9A:95:F3:2F:16:0D:40:DC:95:50:8C:95:B9:85:6A
            X509v3 Authority Key Identifier:
                keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:65:48:b0:7f:a0:eb:5d:0c:10:ea:9c:27:b1:77:f3:10:0f:
         05:c9:e7:3d:ae:84:6e:a5:c5:ac:5f:1d:95:6b:3b:38:88:1a:
         bb:39:87:47:ca:b9:36:52:ae:bc:2b:19:17:83:0c:25:f3:b4:
         7d:f1:c5:0f:e3:c5:01:33:42:bf:a6:d0:50:f8:8b:d3:59:2a:
         ef:13:fa:24:f3:fb:65:c1:97:c9:96:22:d4:1b:08:64:42:57:
         49:c6:2c:68:e2:93:58:c5:0c:5b:80:17:19:a1:3b:8b:e1:82:
         6e:06:bc:ca:a9:d4:bc:3c:5e:fa:00:7b:b5:9d:72:51:bc:aa:
         f8:1a:b2:2d:4b:d8:d5:3f:c8:15:52:6e:af:58:37:a3:ba:9f:
         86:dd:f1:29:db:11:fb:13:58:06:d8:fe:92:68:74:70:d5:70:
         25:bf:20:a4:d5:99:ed:cc:ed:d6:03:8e:cb:2f:db:b5:6b:ca:
         e9:19:95:c6:ff:1d:8e:98:2d:85:7c:c8:a9:2c:9e:1f:9f:cd:
         49:08:4b:03:f9:70:1f:41:23:92:ae:f4:2f:20:df:60:ee:9d:
         09:91:39:a3:bb:96:11:2d:2f:88:7e:b7:4c:35:b1:6f:43:9e:
         ed:cc:0a:e2:ac:e2:36:2a:0d:f1:36:da:7c:ed:00:d8:56:1f:
         38:62:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:57:55 2024 by rpki-client on console-fra.rpki-client.org