Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
File:                     PrOh--ecES1TfhORHCeAviHzFVA.mft (raw, json)
Hash identifier:          F0enogTdTXq7cQxfyx001UL8tW3mQeE06YKX0tA87Pg=
Subject key identifier:   3C:39:5D:50:6D:B6:99:22:FD:D9:F9:DF:85:B2:EF:3A:F9:56:A9:FC
Authority key identifier: 3E:B3:A1:FB:E7:9C:11:2D:53:7E:13:91:1C:27:80:BE:21:F3:15:50
Certificate issuer:       /CN=3eb3a1fbe79c112d537e13911c2780be21f31550
Certificate serial:       0190452FC184A072CF91630CC3245D773982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
Manifest number:          045C
Signing time:             Sun 23 Jun 2024 13:01:15 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:15 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:15 +0000
Files and hashes:         1: PrOh--ecES1TfhORHCeAviHzFVA.crl (hash: 4UJAZjBp55+eRqvQJXhq+9Hnao95aIMpgzL1AVUJ2DQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:c1:84:a0:72:cf:91:63:0c:c3:24:5d:77:39:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb3a1fbe79c112d537e13911c2780be21f31550
        Validity
            Not Before: Jun 23 13:01:15 2024 GMT
            Not After : Jun 24 13:01:15 2024 GMT
        Subject: CN=3c395d506db69922fdd9f9df85b2ef3af956a9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:e8:53:fd:0a:2f:3c:13:ee:6e:5f:fa:89:
                    2c:c3:84:10:2a:7d:d1:48:4f:8f:4c:86:a7:25:38:
                    9b:0e:80:fa:63:9c:6b:1f:e8:f1:e2:25:6c:a5:0a:
                    a8:9b:a1:1e:9d:04:b7:de:97:3f:2d:62:db:59:e8:
                    22:fc:21:00:f2:d2:43:67:93:ab:88:eb:4b:36:b7:
                    65:33:11:40:f0:4d:d7:85:a5:2c:ad:0f:f2:ec:84:
                    d7:77:8e:22:b1:a7:5f:13:9a:b6:6f:71:e7:dc:54:
                    42:a8:08:0e:0f:80:89:c4:04:39:1d:14:70:ae:ae:
                    3a:16:dd:43:ad:08:99:a4:5d:64:94:fd:a7:37:a8:
                    ba:79:db:6d:a8:22:f9:6a:1f:7f:54:14:7e:9e:79:
                    2c:0e:c3:71:7e:a6:68:2a:39:d1:28:86:b5:ac:0d:
                    32:4a:15:7e:c4:ac:d8:ba:8d:70:1b:52:48:79:1f:
                    3b:48:6a:77:f8:3e:c1:72:af:47:17:53:46:67:57:
                    51:52:1d:3e:bf:5a:7c:de:8a:ae:8a:13:86:01:aa:
                    e8:8d:df:a8:88:53:82:24:13:b7:66:66:4d:c0:a5:
                    c0:3c:fb:0b:78:1d:55:24:87:55:14:62:6b:8f:58:
                    92:a6:a5:81:d4:6b:38:a2:eb:e7:7e:a1:ed:11:86:
                    9e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:39:5D:50:6D:B6:99:22:FD:D9:F9:DF:85:B2:EF:3A:F9:56:A9:FC
            X509v3 Authority Key Identifier:
                keyid:3E:B3:A1:FB:E7:9C:11:2D:53:7E:13:91:1C:27:80:BE:21:F3:15:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:f7:1a:ca:6e:b7:83:d5:97:df:c2:aa:08:10:c5:3b:51:
         f0:25:aa:fc:2a:4f:a8:c6:8c:e3:d5:7a:8b:07:6a:ef:c9:8f:
         2c:e5:fb:82:3d:5d:8e:7d:5f:eb:38:d5:9e:53:b0:85:ac:1b:
         25:12:6b:2a:ce:49:39:f2:8a:5a:3d:26:9f:e3:1a:6f:2f:98:
         d8:a5:7f:dc:12:f9:c8:37:9a:f4:29:df:b0:11:9d:12:b1:59:
         50:08:80:ff:c2:67:db:f0:3e:ef:d3:0f:c5:f1:a3:d7:d8:97:
         cc:a8:53:8c:ce:89:a3:8c:c1:21:00:3f:aa:a4:23:64:74:85:
         c6:26:b0:bc:ca:59:d2:0a:e9:d3:7a:f2:41:0a:d8:9c:94:d2:
         50:55:20:9d:3e:87:49:a5:f3:7c:25:76:37:5f:39:22:55:89:
         b5:91:e6:29:5f:73:15:fa:53:ab:0a:49:f3:3b:61:64:4a:e9:
         ec:99:07:ac:c6:d0:70:3b:50:63:10:c4:f6:40:bb:10:09:11:
         f8:36:54:8c:b3:65:cf:41:9a:14:f7:01:72:af:d7:99:38:bc:
         04:a1:84:31:03:03:fc:4c:72:77:cc:db:fc:74:81:fc:d7:2f:
         87:c5:14:0d:ae:90:86:86:34:ca:52:da:19:b7:b1:d9:72:a3:
         48:ce:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:08:55 2024 by rpki-client on console-fra.rpki-client.org