Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File:                     PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier:          1gjBiP8FQyDVWdSUqMWAt9n7HoEG35rAYStXsYj9Avo=
Subject key identifier:   9A:DE:9C:BD:37:42:3F:E3:5D:25:25:5D:FF:9C:1D:AC:F7:B5:36:7B
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer:       /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial:       01904869EE936D30E3361088C9CCDAF1ED0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number:          0D6A
Signing time:             Mon 24 Jun 2024 04:03:40 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:40 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:40 +0000
Files and hashes:         1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: 4aOHuL7ixcPRdT8BgmsU+y/K7PwIee/C/zK1UJJ0GgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:ee:93:6d:30:e3:36:10:88:c9:cc:da:f1:ed:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
        Validity
            Not Before: Jun 24 04:03:40 2024 GMT
            Not After : Jun 25 04:03:40 2024 GMT
        Subject: CN=9ade9cbd37423fe35d25255dff9c1dacf7b5367b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:9d:b3:01:31:b4:09:f5:75:8f:a3:7c:66:
                    2c:ee:a6:43:4c:d3:5b:88:48:f6:65:c5:da:6b:e0:
                    2d:d5:dd:dd:c8:7b:5f:32:ba:0e:c8:a0:bd:14:96:
                    2f:5f:40:47:c1:79:ae:2b:ad:53:0d:d1:0f:ed:20:
                    e9:a7:63:26:b6:9c:39:06:ab:b0:ca:80:15:32:23:
                    74:88:b0:ef:fa:52:a1:37:8d:8b:06:e5:d5:6d:de:
                    91:38:7f:ef:1e:01:58:61:53:7f:3e:36:34:c1:65:
                    cf:1a:1c:ae:dd:5d:1a:15:50:4f:de:ad:10:b6:9d:
                    19:38:94:f7:46:a2:80:a1:54:58:67:7b:f3:50:27:
                    2f:47:94:1b:4d:9d:73:29:bd:fe:f2:80:20:e7:d5:
                    e0:b0:c8:23:db:de:2b:ab:28:19:36:83:55:1a:cc:
                    1e:72:8a:47:28:f5:ac:e4:8c:46:0c:97:41:de:1d:
                    75:6a:e0:b0:2b:87:bb:6d:ee:7d:cf:82:0a:26:c7:
                    40:74:7f:81:76:cd:ba:27:e4:0c:7f:0d:a7:d0:09:
                    74:e3:35:9c:d9:2a:42:cf:8e:93:21:23:7a:38:62:
                    37:d5:e1:7e:75:fe:9a:83:40:9d:9d:99:86:03:67:
                    0a:77:d2:fb:8c:c3:49:aa:af:ee:3f:ab:b1:c6:b9:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DE:9C:BD:37:42:3F:E3:5D:25:25:5D:FF:9C:1D:AC:F7:B5:36:7B
            X509v3 Authority Key Identifier:
                keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b3:9b:5a:0c:81:2c:78:fc:79:08:9e:ec:ff:7d:10:e0:67:
         44:fb:10:6c:be:18:a4:5e:42:2a:ab:41:cc:32:7a:48:4f:7b:
         3b:34:9a:08:b8:53:c5:4a:e5:81:fb:91:30:a8:05:0f:ee:98:
         2b:c0:7d:a6:99:e9:50:31:ed:8b:bf:fe:63:a1:bf:ad:64:1b:
         0d:2e:00:00:48:eb:86:6e:a2:23:46:13:d8:45:cb:30:82:92:
         69:d5:10:a0:d5:92:36:0e:00:29:16:4f:2a:0f:02:48:cc:9e:
         66:8c:48:69:d3:f6:3e:f0:5e:75:93:0f:9a:94:62:a8:d3:92:
         e8:8a:a9:4c:7f:4a:86:4d:a4:14:fd:82:58:d1:ea:08:24:ed:
         4f:1d:73:f8:1a:46:4e:08:98:f9:a2:70:36:e8:26:97:e5:56:
         3e:41:45:b0:a5:ce:5c:f7:e3:fe:65:70:67:bc:8f:ad:19:7c:
         cb:97:91:be:01:1b:65:05:00:5b:32:2e:28:4a:20:e3:7f:2b:
         8b:86:ad:1d:8a:0c:09:39:cd:7b:03:ac:2f:1b:e6:bf:87:b8:
         ee:c4:fe:e1:b6:3f:3e:3c:49:1e:6e:d9:37:80:36:4b:4f:34:
         ba:f8:75:80:47:c4:0a:b8:2e:c7:e8:7b:00:f7:79:52:79:8e:
         f3:71:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----