Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.mft
File:                     01tMezFSfoecI9BBBZtymGhrSG4.mft (raw, json)
Hash identifier:          +ip4x7toYDDGo9Km5xcE7tKFizUNm5wV27cwg3lziwk=
Subject key identifier:   3F:1C:6B:B5:5B:16:BB:DC:DC:10:C0:6D:4C:CF:96:DA:40:88:7F:99
Authority key identifier: D3:5B:4C:7B:31:52:7E:87:9C:23:D0:41:05:9B:72:98:68:6B:48:6E
Certificate issuer:       /CN=d35b4c7b31527e879c23d041059b7298686b486e
Certificate serial:       01901E903CE9B24074392839BF945AE9D5E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01tMezFSfoecI9BBBZtymGhrSG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.mft
Manifest number:          021D
Signing time:             Sun 16 Jun 2024 01:01:27 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:27 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:27 +0000
Files and hashes:         1: 01tMezFSfoecI9BBBZtymGhrSG4.crl (hash: J/WaEJU0OyoQHBhTceg7VRgUpUNXMTuWRqb32ic8J1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01tMezFSfoecI9BBBZtymGhrSG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:3c:e9:b2:40:74:39:28:39:bf:94:5a:e9:d5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d35b4c7b31527e879c23d041059b7298686b486e
        Validity
            Not Before: Jun 16 01:01:27 2024 GMT
            Not After : Jun 17 01:01:27 2024 GMT
        Subject: CN=3f1c6bb55b16bbdcdc10c06d4ccf96da40887f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:65:cd:44:c8:64:3f:88:47:e4:87:98:41:
                    db:9a:35:bf:11:db:79:3a:98:fc:4a:00:01:7a:78:
                    4e:30:0b:fc:28:d3:fa:bb:71:6e:fc:8a:e1:97:dc:
                    3e:39:98:4c:25:7b:9a:c4:72:c9:20:cc:8c:8c:2f:
                    28:11:e0:79:7b:3f:8c:9c:a1:91:ef:e4:d7:8b:ad:
                    ad:ce:d0:a6:dc:d8:bc:0d:cb:47:05:5b:ef:d5:b6:
                    64:57:a1:86:18:d8:3f:cb:99:2e:91:1d:8b:79:a3:
                    9c:04:a8:33:44:05:23:9f:21:95:c7:f7:90:20:54:
                    19:79:76:c8:fe:a0:fe:78:55:e6:65:aa:c2:2f:dc:
                    ac:e3:b3:36:90:50:87:db:1e:26:87:ac:f5:1d:e3:
                    7f:26:29:7b:71:34:78:69:4a:b2:b3:b3:ee:48:1f:
                    44:4b:a3:89:13:9e:43:c7:2b:05:fb:fd:32:7a:03:
                    0c:d1:84:d9:41:80:fd:db:d4:62:e8:7e:dc:82:70:
                    3d:15:f2:b6:3b:10:e4:92:45:fc:a3:c6:67:e7:6c:
                    0a:86:92:57:d1:64:f3:f2:5a:f5:81:2f:46:8f:4a:
                    c0:b3:6a:d5:91:23:ab:02:4d:ca:91:5e:fb:94:82:
                    90:a2:32:73:e8:05:02:ee:44:28:4c:48:90:03:d6:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1C:6B:B5:5B:16:BB:DC:DC:10:C0:6D:4C:CF:96:DA:40:88:7F:99
            X509v3 Authority Key Identifier:
                keyid:D3:5B:4C:7B:31:52:7E:87:9C:23:D0:41:05:9B:72:98:68:6B:48:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01tMezFSfoecI9BBBZtymGhrSG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c82620-c176-44a5-8f07-5906cadf653c/1/01tMezFSfoecI9BBBZtymGhrSG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0f:c6:cb:a7:f2:d0:e9:6c:30:d1:df:5c:9c:99:ef:a1:29:
         fd:fe:3e:66:e7:31:f5:e7:c3:6a:9b:f2:01:64:c7:a7:0d:86:
         8a:e3:3c:dc:93:80:88:87:18:b2:92:3c:15:c3:9c:da:d0:64:
         30:3e:78:17:7a:0e:68:96:d0:27:57:c2:69:1b:00:97:02:11:
         74:8b:14:c1:92:ab:e5:24:cc:94:84:4c:02:8e:bc:3d:a8:f8:
         7e:1b:dd:23:65:76:f5:31:55:83:a1:fd:e4:98:12:b5:ca:db:
         39:a4:db:76:dd:25:80:16:3a:60:58:bb:de:b9:7c:64:91:b2:
         2a:21:e2:e5:70:a8:ba:34:9e:13:ec:36:7f:a2:c3:70:e5:b1:
         a9:c7:c8:9d:c2:56:5c:c9:6f:ad:c9:fc:e8:a2:e9:48:75:64:
         86:de:b7:32:eb:bc:2f:78:45:c2:6a:d1:1e:3b:a4:5e:b7:2b:
         8b:ab:1f:9f:c4:91:5b:8f:38:a0:5f:ae:6b:cb:18:3b:62:99:
         2c:ea:82:f6:43:7b:25:20:70:6e:72:5e:11:68:e9:87:c8:57:
         6e:d1:36:77:fb:31:cc:d4:b0:43:35:7c:ea:08:57:2a:cc:18:
         78:e6:f1:8f:e3:4a:0d:d1:73:29:2a:47:59:bf:44:a3:d0:fe:
         98:61:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:32:15 2024 by rpki-client on console-ams.rpki-client.org