Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File:                     API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier:          xFpPtAUzf3qEhBD6UtbQQf6eXxSB8tI2S0p1SgefvMs=
Subject key identifier:   3F:AE:4D:99:81:D7:FC:35:A1:E9:3D:A7:A8:01:E6:F5:74:B5:39:AF
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer:       /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial:       01904152CD59742262C73FA280F6EED366B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number:          02F2
Signing time:             Sat 22 Jun 2024 19:01:03 +0000
Manifest this update:     Sat 22 Jun 2024 19:01:03 +0000
Manifest next update:     Sun 23 Jun 2024 19:01:03 +0000
Files and hashes:         1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: iawpDEIB1O5vyGwlsP4jYHpO3mGP5Vr0qJGFTYU7N2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:cd:59:74:22:62:c7:3f:a2:80:f6:ee:d3:66:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
        Validity
            Not Before: Jun 22 19:01:03 2024 GMT
            Not After : Jun 23 19:01:03 2024 GMT
        Subject: CN=3fae4d9981d7fc35a1e93da7a801e6f574b539af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4a:3a:6a:30:7a:1c:0f:17:71:c4:eb:04:02:
                    b4:9c:85:6c:d0:41:c7:02:07:6b:80:ee:17:bd:ec:
                    5d:59:3a:a5:6b:46:ad:18:92:4a:bf:ed:15:82:f9:
                    bd:48:32:de:03:32:52:69:34:51:a5:13:86:13:c7:
                    37:c5:55:cf:cb:0b:26:12:58:f6:26:d4:eb:58:cd:
                    57:b4:e2:aa:31:95:d4:b3:62:2f:c7:00:c7:72:74:
                    7b:ae:62:13:e7:03:39:b5:ba:8e:5f:66:0f:fe:f2:
                    be:dc:44:f3:34:9b:7f:75:62:1d:73:e9:89:59:84:
                    83:5e:ff:b3:7c:19:89:cc:73:c9:9a:11:ba:13:2c:
                    c8:e9:29:9c:d8:a8:2f:36:ac:44:65:3d:9e:90:ea:
                    ea:b6:be:5c:5e:c8:0b:0a:38:37:5f:92:69:3d:fc:
                    2d:08:3d:16:aa:26:1a:d4:11:5f:5d:51:fd:3d:99:
                    b5:f7:80:5f:a4:2e:45:4d:d1:89:7e:2b:96:b1:90:
                    5c:46:0d:57:6c:0d:b4:0c:cc:00:a6:f7:51:79:dd:
                    a6:9e:13:dc:e1:3a:6b:d3:73:ce:03:04:f7:42:c4:
                    e9:ce:df:63:e4:0f:a8:2f:fe:53:26:ac:f9:b6:24:
                    80:cb:63:7a:c5:42:1c:a0:11:d2:d2:47:20:42:4d:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AE:4D:99:81:D7:FC:35:A1:E9:3D:A7:A8:01:E6:F5:74:B5:39:AF
            X509v3 Authority Key Identifier:
                keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:f3:7d:92:bf:a5:41:6f:73:7e:cd:0d:18:ff:d4:64:48:
         bd:78:bc:4f:6a:65:5e:73:90:6b:24:3b:93:3b:aa:df:ab:0e:
         be:61:e2:72:f7:6c:f4:96:11:f6:d5:d5:f4:af:fe:63:ae:c5:
         7f:64:a0:29:80:50:70:13:ab:91:a9:f7:82:0a:23:75:75:c3:
         60:5f:ee:2b:5b:9a:8f:f2:98:ec:bf:90:bb:2b:f4:18:06:8b:
         4d:63:f8:78:fd:fa:fe:be:34:c6:69:26:21:64:be:f8:59:8d:
         29:b5:49:ec:b1:bd:8a:35:4c:2e:4d:80:54:62:08:57:fa:38:
         1d:9c:cf:9b:67:5f:c8:be:ff:4a:84:0f:4b:ad:95:ed:96:49:
         8f:ec:4a:4d:5f:f0:c1:5b:dc:14:b4:09:0d:7c:94:d8:b2:fa:
         d5:44:1f:6d:5e:0a:07:ff:57:c0:47:fa:e8:36:a6:cf:42:c4:
         35:c0:2f:ac:fb:d8:38:e2:2e:ad:34:95:72:04:66:e2:8b:4c:
         89:62:ab:e2:da:15:5b:44:81:97:84:63:6b:55:8f:24:a3:d6:
         60:95:15:a9:68:62:0c:88:92:2a:13:e2:e8:93:3e:6f:b4:f0:
         d3:31:6b:f3:5f:8c:29:2c:b8:7e:a6:7f:c2:ed:d2:ce:9a:87:
         c9:1e:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:55 2024 by rpki-client on console-fra.rpki-client.org