Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File:                     pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier:          QxyZNwavG+1YThX7/eCI7SeCmd7F9voUEvDqXJL8TSY=
Subject key identifier:   A4:96:B8:30:18:99:EB:6F:E6:3A:56:90:9C:07:F2:BA:C9:40:E5:9B
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer:       /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial:       01935764BE168D9ADDAC0208C80372623C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number:          0245
Signing time:             Sat 23 Nov 2024 05:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:40 +0000
Files and hashes:         1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: IXBxAPwYQOwHkqoJlf84dz5SvwecIdnPkGHyK8NMyfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:be:16:8d:9a:dd:ac:02:08:c8:03:72:62:3c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
        Validity
            Not Before: Nov 23 05:00:40 2024 GMT
            Not After : Nov 24 05:00:40 2024 GMT
        Subject: CN=a496b8301899eb6fe63a56909c07f2bac940e59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:d3:0c:1a:c7:c6:1a:95:11:d4:ef:16:79:
                    77:8f:aa:ae:67:3d:a5:3d:d6:3c:fd:df:8b:27:dc:
                    16:05:8d:50:25:21:35:e2:d7:dd:0c:01:92:b2:c1:
                    10:96:6a:f1:fa:8f:af:36:0b:40:28:5d:5d:5c:5a:
                    ed:4c:07:16:01:90:71:4f:92:8b:25:45:d2:a7:1c:
                    0c:1c:f5:5a:d3:c5:12:e9:a5:55:bd:b2:6e:0c:38:
                    51:fe:c6:91:af:75:1d:70:db:c1:a5:50:6c:8e:d5:
                    89:43:6f:f8:81:0b:2d:b9:ea:b9:75:90:46:48:2d:
                    09:2f:94:7e:db:02:dd:01:48:83:c5:41:cb:5b:d7:
                    b8:0e:44:f9:d2:43:da:b8:99:ae:51:7a:a8:c4:da:
                    10:bb:3e:d9:d1:c9:7a:6a:c9:d3:fc:a6:df:ca:46:
                    35:34:c7:ef:4c:98:fb:92:0d:90:9f:56:25:8d:5c:
                    51:31:31:70:15:2e:32:e2:1b:c1:ac:10:95:a7:a7:
                    23:73:74:44:32:9f:86:d6:ba:5d:72:87:81:c5:60:
                    4d:d9:1b:ce:f1:2b:96:4e:a3:8b:2b:32:40:5b:ba:
                    3f:bb:b6:39:d6:d7:02:92:38:40:b2:d3:39:24:45:
                    c5:2e:da:16:74:20:a3:14:2b:28:52:61:1c:38:e9:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:96:B8:30:18:99:EB:6F:E6:3A:56:90:9C:07:F2:BA:C9:40:E5:9B
            X509v3 Authority Key Identifier:
                keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:53:07:0b:95:b0:b1:21:01:c2:87:38:e0:01:3c:d4:26:
         03:c3:af:af:da:49:d6:f9:04:17:10:71:24:a2:7f:52:a2:86:
         d0:0b:00:5e:1f:07:dc:83:c4:92:97:5b:a5:f6:a0:22:f0:d2:
         fc:d1:d5:68:09:e5:66:d2:4d:60:32:2a:8f:72:52:de:52:7e:
         a7:d2:6b:2e:f1:81:15:ba:8b:4b:37:b7:13:d9:f2:ee:4c:6b:
         9e:1a:d5:6e:dd:73:13:a1:1a:47:5e:cd:42:50:fb:95:93:ed:
         6b:91:23:74:cd:9d:eb:1e:ed:52:90:f2:33:93:58:b5:b4:f5:
         bb:92:4e:56:b2:18:3a:d6:78:c7:d9:92:9e:30:a1:fb:8d:2b:
         62:3e:60:05:fd:4d:24:a3:b3:b0:34:40:d5:e6:8e:f4:e4:e2:
         c6:79:ee:ec:31:e0:0a:1f:ee:3b:b7:d1:57:83:37:14:ca:be:
         5d:4f:54:c2:9e:00:60:26:e5:d7:58:eb:2b:bd:8f:cd:d0:a7:
         69:e9:3b:a2:8a:c4:e1:9f:6e:30:44:d0:b8:c2:81:79:ea:be:
         86:a9:91:c6:16:02:6c:5f:c2:8c:10:f5:b0:c2:66:ef:79:8e:
         84:64:ee:8b:a7:d8:df:1f:76:c5:da:ff:16:65:94:61:6d:36:
         ba:6b:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:02 2024 by rpki-client on console-ams.rpki-client.org