Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File:                     pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier:          3n399YTSIcYzjT6apWkSsE+f3G/ooYtxGHlCVh0WwVQ=
Subject key identifier:   D4:1D:EE:05:CE:F6:B6:7B:64:9A:DD:A7:3F:FD:E6:D9:7A:D0:9B:87
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer:       /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial:       01901CD8104B3471EA465812967D5D0B2840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number:          0A0D
Signing time:             Sat 15 Jun 2024 17:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:40 +0000
Files and hashes:         1: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: V/NLiKnOD1pslvLtKQoLQzLZ+phe4MVo7x8loPWlNoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:10:4b:34:71:ea:46:58:12:96:7d:5d:0b:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
        Validity
            Not Before: Jun 15 17:00:40 2024 GMT
            Not After : Jun 16 17:00:40 2024 GMT
        Subject: CN=d41dee05cef6b67b649adda73ffde6d97ad09b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:7b:c3:38:ab:4b:28:03:f6:af:82:f2:73:
                    b2:e5:18:91:b3:97:61:ec:7e:b1:83:e8:1b:ff:45:
                    2c:1d:c8:57:75:0e:d2:68:28:27:23:a9:f2:d9:66:
                    ce:fd:41:5c:7e:ad:ce:24:04:e3:d7:d9:46:2c:5a:
                    99:a8:e3:81:c1:6f:3c:fc:d7:69:40:d8:80:04:38:
                    78:df:48:54:99:5b:02:d5:61:bd:28:f1:c2:3c:a8:
                    87:a1:73:af:f8:7a:f5:44:34:53:0a:0a:ab:80:51:
                    ac:9b:32:77:ca:86:0f:bc:61:73:88:28:e4:48:c1:
                    41:f2:1b:ae:eb:40:8b:01:2b:3d:4b:13:df:df:90:
                    3e:fe:c8:79:ef:d2:ae:70:00:52:99:76:50:24:ed:
                    7b:63:6d:77:82:ba:16:6a:45:4f:44:ca:c2:c5:cc:
                    31:f2:2a:f7:56:c1:a4:8e:1c:a6:67:ff:d8:d1:51:
                    34:bc:24:6b:05:ca:2f:51:04:d5:ca:13:36:13:c8:
                    aa:4c:39:83:74:b6:f6:3c:f3:4f:b4:f9:7a:61:93:
                    ec:44:cd:c3:72:ed:b8:14:72:87:8f:f0:54:ef:23:
                    8d:ea:f0:98:e7:5f:1b:37:0d:fb:59:18:21:64:18:
                    73:c5:e3:84:e3:14:8d:8f:eb:a1:76:50:0f:59:b5:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1D:EE:05:CE:F6:B6:7B:64:9A:DD:A7:3F:FD:E6:D9:7A:D0:9B:87
            X509v3 Authority Key Identifier:
                keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:02:d8:01:26:4b:8e:84:f5:64:01:c3:52:35:23:60:15:66:
         cc:54:8e:ad:55:55:99:9e:c9:a3:32:dc:78:47:8c:72:1d:85:
         fa:7e:19:f8:5c:e4:ac:81:61:d2:e2:63:48:ac:d8:7b:05:17:
         87:81:e9:58:c5:c2:40:49:d2:dd:11:1d:0d:f8:86:1b:c2:5c:
         cc:f2:e6:a8:cd:cf:af:83:af:f1:fe:30:1e:41:bb:eb:d3:3c:
         14:ea:66:fa:21:82:92:e9:e2:de:93:6e:0a:72:63:35:f6:73:
         22:97:5f:fd:95:f4:a7:cc:84:54:4d:be:bc:85:62:f1:92:b0:
         d7:d6:34:46:a8:66:59:96:d9:04:ab:e7:2a:b0:f4:ea:9b:24:
         47:a6:d4:37:ef:58:aa:39:88:6b:99:ee:6a:fe:dd:6e:02:05:
         09:eb:8c:1e:35:42:a7:88:81:dc:85:79:65:77:a4:0a:4b:d5:
         bc:8f:50:f6:a2:f6:c7:0e:51:77:db:95:d7:7f:40:11:7a:d6:
         16:83:37:b7:1b:99:42:a9:64:1c:b3:c1:04:c0:25:66:0b:74:
         cd:4e:eb:bf:1b:72:43:3a:05:6d:99:0e:a9:eb:58:87:c5:8a:
         fb:ac:69:5d:ed:47:b3:22:fe:2e:89:ce:b6:36:c1:8a:8a:88:
         3d:1d:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:40:17 2024 by rpki-client on console-fra.rpki-client.org