Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e069b6-1a2f-4f79-a363-1c64f927147d/1/PRPkRp6VXWeSRxMN4rOspSZdzuw.mft
File:                     PRPkRp6VXWeSRxMN4rOspSZdzuw.mft (raw, json)
Hash identifier:          HdjfdwQlc7k54D5EGvtyZpib6UQoybPPUEdC5s8QFDg=
Subject key identifier:   12:19:0D:00:75:C1:C2:6C:38:4B:DF:46:06:96:4A:C6:62:C4:D7:99
Authority key identifier: 3D:13:E4:46:9E:95:5D:67:92:47:13:0D:E2:B3:AC:A5:26:5D:CE:EC
Certificate issuer:       /CN=3d13e4469e955d679247130de2b3aca5265dceec
Certificate serial:       018F994F2F70A6223055951445B384911F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRPkRp6VXWeSRxMN4rOspSZdzuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e069b6-1a2f-4f79-a363-1c64f927147d/1/PRPkRp6VXWeSRxMN4rOspSZdzuw.mft
Manifest number:          117D
Signing time:             Tue 21 May 2024 04:00:54 +0000
Manifest this update:     Tue 21 May 2024 04:00:54 +0000
Manifest next update:     Wed 22 May 2024 04:00:54 +0000
Files and hashes:         1: PRPkRp6VXWeSRxMN4rOspSZdzuw.crl (hash: igIu5x53ERl75iNzUGapny99+1TQX5qeNpSvExefbps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e069b6-1a2f-4f79-a363-1c64f927147d/1/PRPkRp6VXWeSRxMN4rOspSZdzuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e069b6-1a2f-4f79-a363-1c64f927147d/1/PRPkRp6VXWeSRxMN4rOspSZdzuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRPkRp6VXWeSRxMN4rOspSZdzuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:99:4f:2f:70:a6:22:30:55:95:14:45:b3:84:91:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d13e4469e955d679247130de2b3aca5265dceec
        Validity
            Not Before: May 21 04:00:54 2024 GMT
            Not After : May 22 04:00:54 2024 GMT
        Subject: CN=12190d0075c1c26c384bdf4606964ac662c4d799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:58:ae:3e:14:0a:51:93:6a:22:77:9f:50:
                    fc:06:b7:a2:79:eb:d6:4b:34:7f:57:76:ea:2f:e2:
                    2a:54:f0:6b:a8:cc:22:e6:ec:ac:c2:75:ce:f3:b7:
                    af:93:23:03:50:c4:19:fc:b3:b8:c5:5a:aa:d1:bd:
                    86:68:07:9f:bf:07:9a:ec:fa:71:70:23:ec:fc:78:
                    a6:33:23:21:3c:b2:dd:76:6c:a5:99:cc:0f:bb:6d:
                    de:d7:80:c6:de:4d:ff:81:64:94:5f:02:b3:1b:f2:
                    01:ac:ce:9e:d8:e6:59:14:6b:1c:2e:cc:d3:5a:c9:
                    88:7f:14:d8:1d:b1:94:fb:32:f9:0a:11:3d:4d:0e:
                    43:6a:f8:64:eb:8c:4a:d1:c0:98:a6:d4:96:0b:22:
                    59:2a:88:49:16:9e:63:39:82:8e:f2:24:f6:05:48:
                    33:1f:1c:05:f6:85:dc:e9:cf:16:c7:55:77:4f:31:
                    77:5e:b9:e5:8e:f7:80:12:ad:7a:d0:b8:39:f0:2a:
                    cc:ee:5e:08:a4:0f:d2:82:a4:fb:9b:f6:99:2d:57:
                    4b:39:d6:64:2a:0d:5b:53:46:27:e7:98:80:7e:c2:
                    9e:7d:61:35:38:93:6c:56:9d:df:90:c7:01:21:fb:
                    5e:09:bd:fe:fe:01:12:9b:12:bd:20:4f:cf:23:6f:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:0D:00:75:C1:C2:6C:38:4B:DF:46:06:96:4A:C6:62:C4:D7:99
            X509v3 Authority Key Identifier:
                keyid:3D:13:E4:46:9E:95:5D:67:92:47:13:0D:E2:B3:AC:A5:26:5D:CE:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRPkRp6VXWeSRxMN4rOspSZdzuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e069b6-1a2f-4f79-a363-1c64f927147d/1/PRPkRp6VXWeSRxMN4rOspSZdzuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e069b6-1a2f-4f79-a363-1c64f927147d/1/PRPkRp6VXWeSRxMN4rOspSZdzuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:8b:d3:75:43:7c:19:2e:7d:fd:09:1c:50:cf:84:5b:0d:
         25:8f:4c:55:b6:b4:67:69:01:ea:2d:92:22:3f:92:4f:0a:89:
         99:5f:58:00:22:3d:63:22:61:63:ce:a1:db:00:71:fd:26:df:
         81:06:5c:e1:01:9b:ef:4d:e4:7b:b0:d1:6f:23:c4:2f:f0:77:
         99:02:a1:95:f8:a6:b7:5e:bc:f8:05:64:6d:c3:d3:05:2c:44:
         6a:db:72:67:33:93:72:7d:35:4c:06:f7:50:0d:d0:a1:6a:de:
         bf:e8:fd:47:d7:f6:6b:8e:52:45:d5:bb:cc:57:6b:bc:99:dc:
         e7:ee:88:a4:47:83:1f:65:64:fc:1f:74:70:ab:5a:b3:5a:00:
         26:18:4e:42:79:de:71:45:8a:9e:96:2c:9f:37:6f:3e:ba:d2:
         7c:45:3c:3d:f0:ca:15:51:f3:e6:37:08:40:a8:fe:1c:42:f4:
         aa:22:d7:ff:05:17:6b:77:b2:53:aa:f4:49:cc:21:25:ca:d6:
         e3:4f:5a:28:18:41:84:02:ee:dc:65:75:f0:b3:1e:76:e7:fe:
         ce:7e:28:03:4d:a9:ad:6a:d8:e6:d7:ea:66:f8:92:35:0d:5c:
         d7:34:1c:e1:47:fb:10:10:ab:94:18:ca:0e:fc:f3:5e:2a:7d:
         a8:f1:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 04:46:38 2024 by rpki-client on console-fra.rpki-client.org