Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File:                     PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier:          WrMIWmIVppecFw/H5wDFPwzn1TTQy4Ot8RGrKux1V+Y=
Subject key identifier:   EF:7F:96:23:B1:D3:06:51:4E:EE:BF:67:28:2F:AD:B0:E1:72:A2:A0
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer:       /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial:       01901DEC55A41CEBC21B24669DD394D1128E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number:          0CF1
Signing time:             Sat 15 Jun 2024 22:02:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:25 +0000
Files and hashes:         1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: nChhM7sPFeUk9p/KJ9npE0hNLfR0bVURroMiGJXhApU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:55:a4:1c:eb:c2:1b:24:66:9d:d3:94:d1:12:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
        Validity
            Not Before: Jun 15 22:02:25 2024 GMT
            Not After : Jun 16 22:02:25 2024 GMT
        Subject: CN=ef7f9623b1d306514eeebf67282fadb0e172a2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:ea:5d:78:4b:ff:1d:f3:70:60:83:99:db:
                    15:b5:65:f0:20:29:f7:f5:b6:e9:d7:1d:e3:04:92:
                    4a:43:b0:70:5c:ec:62:3c:db:b9:ae:e3:18:a7:79:
                    f6:24:ac:d8:e5:ea:3d:d8:ff:3c:a2:f4:4f:fb:a3:
                    ef:94:93:c1:a4:f7:63:da:e8:5d:11:6b:9d:d0:a4:
                    b5:0f:89:0a:97:da:ed:04:c9:30:88:e6:00:4e:fe:
                    d9:29:a0:eb:b8:e8:15:ff:97:2e:3b:9a:e3:fe:94:
                    95:b9:bd:ac:f6:a4:f7:38:c9:39:40:7e:42:68:1d:
                    c8:d2:ec:81:53:6e:bc:60:eb:72:13:43:1e:a7:ea:
                    fe:ef:21:30:17:5b:75:fb:d3:7a:2b:ac:63:d3:2f:
                    2c:76:fa:4c:c6:f9:ad:74:f3:cc:a3:53:6c:c2:3a:
                    12:6f:63:4e:46:e8:71:5f:1d:5c:3b:21:c8:4b:a9:
                    b1:30:16:83:16:50:66:a7:64:27:8f:b8:1d:87:dc:
                    2b:c6:f9:19:89:22:21:a8:c8:08:bb:7d:82:83:69:
                    01:85:f0:07:5d:ad:cd:ad:7c:47:e2:1a:46:9f:a6:
                    f7:e4:3f:f3:ef:b4:95:21:f3:b8:a7:4a:41:3b:ff:
                    c7:06:95:3f:5c:25:7c:10:6f:b1:bd:64:5d:6d:ff:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:96:23:B1:D3:06:51:4E:EE:BF:67:28:2F:AD:B0:E1:72:A2:A0
            X509v3 Authority Key Identifier:
                keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:7f:17:19:0c:39:8c:e8:36:eb:7c:ae:31:c5:0b:ea:c9:
         e2:a4:e1:dd:5f:54:33:96:62:a5:2a:6d:35:e7:c8:eb:7f:a4:
         26:80:a4:13:bf:d3:99:5d:86:e0:22:43:80:10:7d:7c:07:ff:
         2c:51:94:4b:eb:1e:71:c1:7a:36:dc:27:3d:95:b2:13:b1:7b:
         b8:fe:92:b4:dd:1b:2d:33:65:a6:a3:74:58:c5:81:c6:bd:38:
         ff:b5:4b:68:9e:3c:fe:ea:54:b3:25:3d:15:16:d5:cc:0f:71:
         1a:47:a5:1b:ca:7e:ca:1e:0c:49:cb:25:1c:ed:31:7f:59:99:
         09:e0:1f:f1:24:e0:85:2b:38:95:d9:f2:20:90:a0:7c:a2:38:
         1e:ed:6f:8b:78:e9:dd:03:6b:4b:d8:72:65:b6:ed:51:c5:4a:
         0e:b6:4b:c8:ea:c0:3f:49:be:50:15:f8:e3:59:79:42:00:a9:
         ba:f8:4e:27:8a:15:4b:c8:23:ec:d9:f7:1e:cb:a2:07:58:51:
         09:e2:72:8b:ba:22:6b:6c:e0:fb:8b:c8:1e:23:32:ff:ff:54:
         f8:6f:43:ca:b6:5d:d8:3e:98:8e:fc:40:42:6b:f4:63:12:7e:
         2c:94:55:59:85:94:88:77:c0:ee:7d:85:0f:cd:dc:79:58:be:
         80:b1:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:37 2024 by rpki-client on console-fra.rpki-client.org