Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
File:                     fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json)
Hash identifier:          p7n4n9S/I57yFcw3qhadQwIWGKbX1f18BVo213iEdgQ=
Subject key identifier:   E7:3A:60:E0:32:A7:4A:60:F3:EC:94:67:D4:3B:21:D8:D8:FB:F5:7E
Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Certificate issuer:       /CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Certificate serial:       01901F34AE873D6F8CFE856421C1ADF9ACB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
Manifest number:          0430
Signing time:             Sun 16 Jun 2024 04:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:04 +0000
Files and hashes:         1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: pDC09sJe+rVoVuaLVym4nCDduI3zL17nz439FBTEABA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:ae:87:3d:6f:8c:fe:85:64:21:c1:ad:f9:ac:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
        Validity
            Not Before: Jun 16 04:01:04 2024 GMT
            Not After : Jun 17 04:01:04 2024 GMT
        Subject: CN=e73a60e032a74a60f3ec9467d43b21d8d8fbf57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:56:1d:0d:4f:7e:f9:b2:11:cc:1f:3c:a4:
                    41:ce:2a:9c:db:72:29:f2:ec:3e:8f:07:4c:58:ec:
                    49:c9:e3:00:1c:35:4b:69:d6:04:44:ef:e8:89:15:
                    65:dd:4a:f0:19:a8:74:35:95:a9:7a:71:90:ab:89:
                    f4:b8:0b:37:9a:14:80:f5:b5:ab:3a:e0:d9:e9:f4:
                    a8:1b:1d:1e:5f:76:c4:13:a4:c4:df:57:bf:a4:f5:
                    4c:a2:ad:14:bc:6e:fd:51:01:9c:ad:3c:50:ea:71:
                    64:cf:ae:7d:34:00:d6:4f:35:4c:81:a8:2b:42:7b:
                    47:71:ba:60:bf:83:cc:ab:f1:d4:63:77:8a:35:34:
                    69:85:11:22:f8:5f:d7:f7:77:ed:6a:6b:6a:2a:8e:
                    42:e8:f4:bc:6a:ac:a5:32:e9:7c:07:54:5c:8d:e2:
                    a5:11:56:ac:8d:a3:53:3d:ed:1e:b1:63:f5:20:11:
                    a9:cf:3b:c6:66:4a:29:f0:85:99:6a:67:97:cc:51:
                    dc:47:40:af:f8:30:51:3e:fc:be:f5:1a:7d:27:f1:
                    ca:b7:69:73:dd:4a:0e:33:4a:35:10:ff:ec:25:d2:
                    33:10:cb:21:89:9f:ce:d4:33:ef:fd:46:43:95:25:
                    6a:fd:7e:37:4c:b2:75:9f:fd:09:da:d7:ba:b9:d1:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3A:60:E0:32:A7:4A:60:F3:EC:94:67:D4:3B:21:D8:D8:FB:F5:7E
            X509v3 Authority Key Identifier:
                keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:8d:d7:26:ca:ac:88:f6:a1:20:e6:e9:5c:83:1d:cf:ec:
         61:95:31:8a:c3:12:66:4c:75:89:c5:e3:04:d5:b2:69:56:b8:
         50:88:bf:be:b6:d1:58:0a:66:2d:4d:b5:cb:ad:f1:1b:7a:24:
         96:87:4a:22:85:c5:d5:be:15:30:72:7f:5b:89:04:46:d4:42:
         31:c2:c5:2c:b7:4d:8b:3a:aa:cf:55:d2:a9:f5:22:05:fe:d3:
         12:31:1a:f0:19:17:38:bb:64:e1:7f:44:19:32:77:92:ba:48:
         a7:b2:4a:81:43:24:b2:be:12:d3:9c:bc:8f:50:ac:98:8c:6a:
         79:3b:ae:da:74:26:26:cb:5c:76:d6:0d:42:e0:db:c4:b7:49:
         e2:e4:df:3e:a9:e1:97:6d:7b:cb:03:cf:d6:f0:ad:61:40:f2:
         68:9a:5b:0e:1c:28:fa:a9:20:8a:ad:1c:42:e3:73:a9:e1:9e:
         0a:c9:ae:d9:f3:2d:e7:5a:ce:a7:96:ce:0a:91:a7:73:98:a3:
         91:ad:59:88:34:7f:96:0d:84:cb:16:dc:4f:1e:1e:4e:41:1d:
         c1:bf:a7:01:03:6a:ce:ec:4c:77:3c:e1:b0:fe:e7:77:b6:12:
         70:39:11:53:03:20:43:aa:e5:f5:0d:29:a0:b7:e8:06:aa:b0:
         66:57:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:46 2024 by rpki-client on console-fra.rpki-client.org