Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File:                     PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier:          DktOnRIQQ9byyfGh7cuNwNgq0yfY8/uxOpa1Q1zRRwg=
Subject key identifier:   06:E1:98:65:50:C7:61:36:0A:70:20:75:CF:92:D8:57:D1:68:50:82
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer:       /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial:       018F8748FF22402082334F9E3B72B36D485A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number:          08A1
Signing time:             Fri 17 May 2024 16:00:58 +0000
Manifest this update:     Fri 17 May 2024 16:00:58 +0000
Manifest next update:     Sat 18 May 2024 16:00:58 +0000
Files and hashes:         1: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: Y8FOkKvUO6sTKQ5nXqYggUi3O7HbOswqS0U/O4bfX0s=)
                          2: l6G-2Fb5f-w65YWqMuY7cw5Sj-k.roa (hash: f+JLEUJfaRblQ+HSdtlX2l6J7EYvWGtAdssRfIzGpE8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ff:22:40:20:82:33:4f:9e:3b:72:b3:6d:48:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
        Validity
            Not Before: May 17 16:00:58 2024 GMT
            Not After : May 18 16:00:58 2024 GMT
        Subject: CN=06e1986550c761360a702075cf92d857d1685082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:0b:60:c3:fe:7e:e8:88:21:c9:06:57:9b:
                    44:fb:da:a5:c6:68:1c:c7:4c:2c:0b:74:e2:5f:49:
                    7a:de:ad:0d:f7:78:57:ef:46:4a:ef:be:de:54:5d:
                    1a:d6:9b:40:c2:1c:73:2c:3b:eb:68:43:90:a9:a8:
                    58:36:72:f8:47:7f:f1:20:6a:04:bb:15:62:df:e9:
                    e7:e8:3f:a6:11:81:5f:7e:f1:59:db:1f:b8:87:7f:
                    11:26:dd:28:e1:bb:aa:91:83:88:6f:58:c5:1b:03:
                    2d:34:cf:b6:8c:ee:e6:c8:47:d4:4c:3c:6e:22:fc:
                    11:f8:7c:22:b5:be:74:b0:9d:99:bb:43:84:26:2f:
                    dc:4f:c2:dd:86:5d:1f:80:aa:74:38:33:21:ae:5b:
                    8e:86:7b:f4:49:fc:81:fe:dd:1f:e5:09:71:ce:0f:
                    c4:91:9e:60:64:de:49:cb:32:89:77:95:c0:a6:14:
                    56:ba:86:7f:bf:57:fd:11:dd:27:6e:79:23:b7:1e:
                    c2:57:07:f7:a0:e1:9c:ca:85:83:24:b6:c0:f2:fa:
                    24:05:40:f5:8e:b4:29:cb:00:30:6a:65:71:6a:79:
                    5a:89:4f:db:f2:33:72:b4:ce:17:57:8e:43:d6:c8:
                    02:00:6d:73:22:9d:fb:43:66:8c:f1:6d:f6:96:44:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E1:98:65:50:C7:61:36:0A:70:20:75:CF:92:D8:57:D1:68:50:82
            X509v3 Authority Key Identifier:
                keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:0e:6c:a1:45:a5:a4:72:90:7b:5c:c6:9b:04:05:7f:c6:
         86:38:37:1a:21:c6:4b:12:03:b3:79:71:5a:d5:59:3d:a2:1c:
         2e:ec:4c:d0:76:f2:2f:82:88:7f:49:c7:42:29:ce:56:d3:66:
         5c:03:c7:f4:fa:1e:4e:30:fd:e7:41:e3:de:2c:32:9b:3a:c0:
         6e:1c:52:fd:3e:f4:17:1b:c6:fc:bb:fb:74:9c:ea:e0:86:49:
         e4:0d:be:56:a2:88:fc:f1:25:83:0a:0e:b1:3e:23:7b:65:36:
         9a:bd:81:63:8f:86:1d:12:96:65:51:eb:6a:d1:e8:0b:ae:73:
         b3:f3:da:36:bc:4a:f6:1d:0f:92:8e:99:fa:19:64:41:44:97:
         58:5a:c1:a5:e7:34:84:e2:e2:68:fd:cd:9f:65:a0:6e:af:87:
         42:bb:07:15:f8:d9:1d:c3:97:2d:9f:a7:dc:b4:c2:e3:bb:8b:
         42:cf:90:ab:fe:98:a4:71:ee:b2:66:1e:8c:0e:5f:4e:e2:96:
         39:5b:4f:0f:9b:74:8e:84:eb:65:ad:d9:d8:47:0a:09:b0:9b:
         d1:46:3a:72:a2:a3:42:07:1a:76:a2:4c:21:86:ea:a2:6f:6a:
         7f:f4:ae:f5:11:4d:1f:eb:ab:b0:3e:68:f2:a5:6b:66:70:a1:
         08:56:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:15 2024 by rpki-client on console-ams.rpki-client.org