Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File:                     pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier:          AndT6DfJKPP9uyMPRLn2mM2OB+468/Kfk07GsIG6Mw0=
Subject key identifier:   81:47:D8:E3:B6:F5:D9:B8:FB:4E:92:42:22:B4:B5:2D:40:22:BF:01
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer:       /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial:       01901B5777B70454F2DC4D5E81D56FEDE18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number:          10FD
Signing time:             Sat 15 Jun 2024 10:00:35 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:35 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:35 +0000
Files and hashes:         1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: 7xi4EjWgMwsHq4iTCvWjYx8N7OgLQAgF3iQAFzSSBps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:77:b7:04:54:f2:dc:4d:5e:81:d5:6f:ed:e1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
        Validity
            Not Before: Jun 15 10:00:35 2024 GMT
            Not After : Jun 16 10:00:35 2024 GMT
        Subject: CN=8147d8e3b6f5d9b8fb4e924222b4b52d4022bf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:8b:1f:a0:b4:d7:49:ad:9e:d5:96:73:be:
                    d8:56:ae:57:42:49:b8:27:af:35:83:34:9f:ca:af:
                    7b:73:c5:c8:e0:97:2c:e1:47:3d:be:84:2e:47:a3:
                    ed:ca:4e:1d:c7:4e:8c:58:0f:73:bf:66:72:f1:d2:
                    b4:2d:03:74:af:98:e2:a8:08:35:3f:70:d8:04:28:
                    13:be:26:15:a9:3f:e3:58:c0:1d:90:ff:40:61:82:
                    08:2e:6b:24:9c:fc:5c:6e:f7:e1:b5:e3:e3:f3:f8:
                    d4:27:2c:4d:88:28:eb:2d:8c:6a:15:1b:f8:61:cb:
                    7b:78:f6:d3:04:3c:12:4b:ee:9e:5a:56:13:36:74:
                    22:30:ec:1c:ac:e1:44:3c:cb:80:c7:05:8e:d1:c2:
                    a7:bd:31:cf:1c:f1:be:f1:e0:a2:fb:2a:d5:2b:28:
                    41:21:c3:e8:70:fc:7e:2a:14:97:3a:62:50:00:5e:
                    ba:ae:c3:b7:97:e3:79:0f:b5:06:54:57:9d:97:df:
                    05:58:57:11:18:ef:22:41:e6:09:06:40:d6:38:1d:
                    59:8c:61:5b:aa:c2:b5:92:70:67:50:dd:ed:01:20:
                    35:3e:f3:9f:6b:15:8a:73:2d:6c:4a:00:5d:ed:7d:
                    c6:2a:98:eb:5e:01:20:08:78:d7:d6:ff:f0:32:9e:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:47:D8:E3:B6:F5:D9:B8:FB:4E:92:42:22:B4:B5:2D:40:22:BF:01
            X509v3 Authority Key Identifier:
                keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:80:7b:2c:97:3c:04:af:f0:52:c4:4b:a5:54:d6:ce:84:61:
         dc:e6:23:4a:9d:cd:91:a5:03:e3:e6:f2:86:17:17:dd:c9:67:
         7f:5b:dc:51:f4:93:c2:98:ea:7f:a2:52:b3:b0:c1:27:97:0a:
         79:29:23:a9:89:32:d7:9f:06:bf:c2:cf:1f:6b:8c:ab:af:53:
         d7:7d:3c:c3:04:bf:d7:58:42:dc:82:3c:b9:57:6f:f2:52:12:
         ca:00:a0:a4:be:ee:ff:35:31:75:4d:d8:75:b6:80:dd:a5:63:
         bb:89:be:4f:54:87:61:06:37:ef:8e:1e:5a:90:cb:25:84:75:
         86:39:13:79:7a:78:48:d3:58:0a:b8:67:7b:00:ac:21:cb:8b:
         58:7d:b9:83:e8:67:57:8b:2f:71:03:98:65:51:e3:90:ab:75:
         73:bf:bd:3a:47:07:de:b3:64:ab:2f:c5:fc:67:dc:70:ea:61:
         87:bc:96:33:05:04:8a:a4:9b:f3:e2:ad:71:51:e8:b0:08:78:
         cb:b4:9f:8f:5a:90:3a:66:15:64:1f:69:96:46:52:37:4f:18:
         77:da:41:a1:b2:e2:3e:1f:c8:38:e7:70:09:cc:8a:eb:57:51:
         7e:62:90:a8:b4:d9:12:56:c4:75:d1:98:2d:76:33:9b:76:3c:
         a5:4d:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:14:20 2024 by rpki-client on console-ams.rpki-client.org