Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
File:                     psP-xo0utonX0ElSISvQrWOdkA8.mft (raw, json)
Hash identifier:          c/CVa89OHJRjX3AD48sycoJGHErb8gemHYtiBvNZCPI=
Subject key identifier:   26:90:40:43:63:60:1A:FA:CD:8D:61:5A:27:15:A1:7D:50:D5:03:37
Authority key identifier: A6:C3:FE:C6:8D:2E:B6:89:D7:D0:49:52:21:2B:D0:AD:63:9D:90:0F
Certificate issuer:       /CN=a6c3fec68d2eb689d7d04952212bd0ad639d900f
Certificate serial:       019510C7C0E1E450591B354316B0C6DE09EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
Manifest number:          0285
Signing time:             Sun 16 Feb 2025 22:01:21 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:21 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:21 +0000
Files and hashes:         1: psP-xo0utonX0ElSISvQrWOdkA8.crl (hash: qMsLAH6VjNqn7TcdI6LsvmLR7lotpBJOabGRihiuX44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:c0:e1:e4:50:59:1b:35:43:16:b0:c6:de:09:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c3fec68d2eb689d7d04952212bd0ad639d900f
        Validity
            Not Before: Feb 16 22:01:21 2025 GMT
            Not After : Feb 17 22:01:21 2025 GMT
        Subject: CN=2690404363601afacd8d615a2715a17d50d50337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:4a:86:61:03:81:6b:22:a9:65:bd:97:e5:
                    9f:35:21:08:a9:86:1a:d9:a3:91:76:19:42:43:48:
                    4a:6d:a6:78:e3:4c:8b:d8:a4:be:fd:c2:ef:82:69:
                    2c:1a:ea:d9:34:40:b0:bc:ba:4f:a0:71:fb:1b:60:
                    b0:6f:16:34:44:3f:b3:4f:5b:22:cb:d5:8a:0f:d4:
                    5a:cb:b0:23:bc:23:10:58:8a:80:07:da:e6:45:54:
                    cc:5d:7f:60:d0:31:b4:ee:00:80:b5:9c:48:cb:8e:
                    16:6b:b9:a7:71:27:89:85:ab:88:3f:a8:f8:b8:5b:
                    46:64:4f:0a:4a:a9:ca:32:d4:f5:08:d1:64:11:44:
                    fc:3a:42:53:7e:c6:fe:40:34:f2:eb:a0:04:40:2b:
                    eb:28:26:97:8f:40:61:69:55:cf:6f:82:fd:e4:2d:
                    0e:17:72:a7:0d:8c:73:81:07:e9:56:1c:e3:e8:20:
                    3a:81:f2:23:54:a5:95:d6:81:54:fd:0f:55:34:ff:
                    7c:09:1b:26:93:d0:1d:35:ba:10:b0:3c:cf:3e:ae:
                    5a:bc:96:c5:b7:53:91:3b:63:16:86:5f:21:ab:7a:
                    80:a4:32:61:8c:5b:b1:6a:e5:15:b0:c1:59:ce:af:
                    3b:c6:e9:6d:04:07:83:2e:df:57:04:a9:8c:46:f5:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:90:40:43:63:60:1A:FA:CD:8D:61:5A:27:15:A1:7D:50:D5:03:37
            X509v3 Authority Key Identifier:
                keyid:A6:C3:FE:C6:8D:2E:B6:89:D7:D0:49:52:21:2B:D0:AD:63:9D:90:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:73:06:e4:70:65:25:c4:7b:64:d1:0f:52:8a:59:19:f9:11:
         d7:0e:97:39:31:a7:1a:8b:e6:c3:86:1d:f5:cd:1d:d4:55:d4:
         07:3a:13:95:2b:24:7b:1b:68:3a:c5:14:12:e2:2b:f7:59:0c:
         52:c5:b0:8e:5f:c1:9c:44:a0:c3:52:0c:5f:07:99:8b:df:84:
         2d:67:62:a8:fe:53:db:ef:e4:a9:86:39:98:08:5f:ae:65:cb:
         9e:14:98:bc:7a:c9:46:c3:73:37:c3:ac:49:01:bd:2b:12:fa:
         77:d4:c6:ed:72:d2:d9:13:99:99:08:96:3a:29:31:53:df:99:
         44:af:32:d8:b8:e1:a1:54:18:f3:be:0a:f4:d6:ac:80:60:eb:
         e1:b0:0c:38:8d:8e:08:2b:9f:20:78:5b:6f:1a:4e:5c:f4:26:
         ff:68:a3:fc:57:e9:2b:32:2a:9c:db:62:0a:05:8c:ec:43:33:
         fc:f4:66:b3:49:d9:92:bc:42:ac:a6:75:a8:1a:79:e8:63:43:
         8d:4f:1d:24:fb:34:33:ce:7d:12:f4:37:60:0d:21:b1:7d:f0:
         6e:34:0a:1d:f0:f2:59:18:7d:39:56:b4:6e:75:e1:50:1f:cd:
         8b:ec:aa:6d:0a:6d:15:97:e5:fe:e7:43:04:04:73:5e:df:d3:
         21:22:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:16 2025 by rpki-client