Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          56ifFzdGhE5XldrF/Riu8iiTsYFI3Fon/XqM/xUfZ2U=
Subject key identifier:   C7:60:9B:CF:3A:73:C4:FE:2A:16:EF:9C:F9:4E:0D:B3:46:40:18:F1
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       019048676FBBF29A2F86B2F23585D0398DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          11D8
Signing time:             Mon 24 Jun 2024 04:00:56 +0000
Manifest this update:     Mon 24 Jun 2024 04:00:56 +0000
Manifest next update:     Tue 25 Jun 2024 04:00:56 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: N22s5oXazj93yxFuYJKHQl/UhsHNDdsExRq82eYaWPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:67:6f:bb:f2:9a:2f:86:b2:f2:35:85:d0:39:8d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Jun 24 04:00:56 2024 GMT
            Not After : Jun 25 04:00:56 2024 GMT
        Subject: CN=c7609bcf3a73c4fe2a16ef9cf94e0db3464018f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:79:5f:18:d3:e7:f7:0d:f5:33:8f:31:c4:
                    2e:8c:77:c8:cc:e0:98:c0:9e:1d:34:83:d1:1a:02:
                    ef:c0:50:2c:98:d1:f6:e8:89:fd:db:13:02:5d:c7:
                    d3:03:44:10:c6:18:6d:63:68:3d:f4:f2:a9:45:0c:
                    b2:e7:cb:40:eb:ee:58:50:ec:73:58:97:86:c6:38:
                    3c:1d:c4:3e:12:37:e9:52:fd:6e:29:17:2e:fc:08:
                    54:a1:92:09:7d:26:07:a8:df:c5:14:46:54:7d:8e:
                    42:16:28:40:2e:40:0a:73:e7:ad:4c:8a:24:85:46:
                    81:4f:fc:31:fb:56:1a:32:7b:4a:dd:5c:11:d3:94:
                    1b:dc:ed:a0:c5:89:15:a6:c3:e8:e7:08:9d:81:26:
                    94:3d:6d:3c:b1:c0:2a:32:9b:f5:08:f8:c5:48:8c:
                    09:9e:da:2a:d2:5a:2d:c0:22:6e:87:27:0a:11:7f:
                    b2:fa:f0:0a:7f:2e:05:1b:b7:3b:9d:11:53:08:62:
                    84:78:ee:7e:30:29:a8:03:32:5a:8c:2e:ce:3c:28:
                    45:11:5a:cd:59:22:74:e0:11:3b:84:bd:80:ef:5b:
                    cb:22:0c:2a:1e:c4:59:78:8c:2e:ef:91:f5:5e:9c:
                    c7:5a:53:0e:6f:69:4f:5f:3d:66:40:09:80:bb:38:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:9B:CF:3A:73:C4:FE:2A:16:EF:9C:F9:4E:0D:B3:46:40:18:F1
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:4b:c7:31:9d:48:24:07:d0:dd:6f:8f:04:58:9e:8b:5b:
         30:9d:69:34:12:1b:c1:df:32:71:79:91:68:96:c4:56:11:ac:
         c5:90:4a:02:21:e2:a0:0f:36:a6:ee:96:e3:ab:04:14:2f:3e:
         d2:b8:39:3f:8a:1f:a8:1b:ef:6b:b3:60:81:a3:81:3f:3f:74:
         bb:29:9e:c5:c0:d7:d8:ac:d4:db:c3:ec:42:05:5e:17:65:59:
         2d:ab:51:27:2e:9a:c6:12:06:92:dc:fb:43:23:8c:55:bd:af:
         96:b6:38:f1:a0:c3:a6:ca:2b:27:56:14:d9:4b:04:a3:91:30:
         9d:c5:a2:19:18:2a:4b:7c:96:88:7a:8e:f3:13:8d:02:5e:db:
         2f:2e:6b:0b:b7:8a:65:a2:46:fd:a5:40:29:dd:fc:cd:98:9b:
         77:c1:a0:51:14:36:ed:07:4f:cb:d8:25:28:f4:f1:eb:0b:dd:
         6e:0b:d5:d7:50:e4:3f:08:d9:bf:fd:26:49:73:8f:d2:98:20:
         2a:57:d8:63:e7:30:2d:f5:a2:37:5c:f3:52:c8:aa:d0:60:00:
         6b:e5:65:c7:15:db:fa:e3:99:43:4c:29:1f:66:24:43:d6:0b:
         5c:08:cb:d8:75:e8:84:bb:8f:21:01:ee:3b:ac:c8:ee:8b:cd:
         bb:36:1d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:23:53 2024 by rpki-client on console-fra.rpki-client.org