Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File:                     Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier:          91i+KxfS+hLFnNUNigoZRp6in5reoDvNQXZS8GKo0eI=
Subject key identifier:   17:2A:5D:BB:90:88:5A:B8:25:1E:3A:DC:08:C6:D6:B1:35:55:6E:C0
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer:       /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial:       018F87ED22B9CA03BAF9DBC7BA090709C54E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number:          0194
Signing time:             Fri 17 May 2024 19:00:15 +0000
Manifest this update:     Fri 17 May 2024 19:00:15 +0000
Manifest next update:     Sat 18 May 2024 19:00:15 +0000
Files and hashes:         1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: qLA5EBOYUVUsVgbSPyowMz9LGNymptVGRTHJslY0ziA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:22:b9:ca:03:ba:f9:db:c7:ba:09:07:09:c5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
        Validity
            Not Before: May 17 19:00:15 2024 GMT
            Not After : May 18 19:00:15 2024 GMT
        Subject: CN=172a5dbb90885ab8251e3adc08c6d6b135556ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:8d:ae:1d:3d:bd:bd:77:6b:50:9a:f1:c7:
                    7b:66:95:f3:98:68:2f:b1:b0:ec:90:ca:1a:d9:5b:
                    9f:a6:12:38:d5:1a:97:a1:70:48:7c:ab:bf:01:be:
                    da:ca:74:68:34:ae:42:93:24:d0:a4:c3:02:9d:76:
                    3e:0e:b3:2a:68:9f:00:df:ac:be:7d:44:5a:11:80:
                    c3:b9:ea:a5:53:23:86:bb:db:82:86:a1:7e:7c:94:
                    d6:bd:f8:f0:a1:ad:84:b3:c5:bd:d2:1e:b0:f4:a0:
                    8e:b5:9d:2b:70:b5:2f:5d:17:4d:c1:5c:bc:d9:42:
                    28:b5:5b:cf:6c:5b:a9:68:ee:97:50:03:44:65:80:
                    23:a7:a7:53:11:55:19:ac:71:42:6b:96:9b:a3:90:
                    c6:94:5e:4b:79:5e:eb:c3:67:24:ce:5a:21:f1:bd:
                    03:51:65:4d:59:77:03:c7:11:44:c9:c0:bb:5c:28:
                    f8:36:f9:ef:cf:66:9b:a8:1f:df:6a:3f:86:b9:7a:
                    59:fd:e4:ce:91:67:5f:04:7c:c4:07:01:c3:a7:be:
                    14:b9:87:86:61:01:de:df:a5:d6:90:ca:7b:f9:02:
                    6f:6c:33:94:81:28:34:e2:b3:8e:b6:5c:92:b2:05:
                    ac:d2:9d:84:02:8c:6b:b7:3a:0a:5f:74:08:9d:aa:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2A:5D:BB:90:88:5A:B8:25:1E:3A:DC:08:C6:D6:B1:35:55:6E:C0
            X509v3 Authority Key Identifier:
                keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:22:e9:39:fd:09:37:37:47:67:48:84:0b:29:98:0e:8d:98:
         63:af:70:20:7d:bd:8e:e3:f1:ab:41:aa:da:fd:06:a4:92:b5:
         2a:da:96:d0:b5:d1:b6:f5:72:c4:01:76:57:74:f1:69:f0:c9:
         65:82:e0:d5:8a:5d:af:64:9b:fa:50:63:26:ee:4e:51:9b:ac:
         29:56:a9:42:2d:12:05:6e:a1:c4:8f:b5:65:d8:71:07:93:fb:
         99:d9:45:c5:1f:e8:57:34:f2:39:b9:90:e4:8f:21:70:b3:74:
         cb:75:f6:be:74:ff:b0:a3:04:db:a1:ce:dd:4d:c3:70:72:6c:
         41:b7:2c:f9:53:f1:a8:ea:ec:d7:99:e5:85:c4:88:dc:1e:8f:
         6f:d0:f5:5e:1e:bc:37:b4:c3:3e:13:08:f9:96:b0:09:7c:78:
         3e:1e:f3:11:f0:67:01:fa:bf:34:09:ee:aa:8a:35:fb:ca:b7:
         4c:44:43:37:cd:1a:fb:0f:a5:31:3b:ff:b3:b6:8a:7d:8b:19:
         35:cf:57:28:4b:ce:4c:44:da:a2:ce:f9:9c:f9:fd:43:21:88:
         aa:76:58:8a:de:a3:22:42:d1:1e:9d:51:5b:3d:fc:8d:0e:4f:
         c2:4a:95:56:36:59:96:bf:b4:ce:5e:15:bf:c8:9f:f0:60:ec:
         c5:48:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:57:53 2024 by rpki-client on console-fra.rpki-client.org