Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File:                     PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier:          3fkDxiT6Y/krYkNVD4S+oP5rT7cjauKnXCntAtM+pPQ=
Subject key identifier:   8A:C2:00:3B:5A:11:00:C9:DC:91:CD:36:D6:AD:8D:AF:BF:3E:00:2D
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer:       /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial:       01938B1B3C82553AE5CE414188FC100F83A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number:          1389
Signing time:             Tue 03 Dec 2024 06:00:38 +0000
Manifest this update:     Tue 03 Dec 2024 06:00:38 +0000
Manifest next update:     Wed 04 Dec 2024 06:00:38 +0000
Files and hashes:         1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: DVkBzwxTRz5fnPPjoLboiyUUxsaSS1O1fLbkUWiF9xg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:1b:3c:82:55:3a:e5:ce:41:41:88:fc:10:0f:83:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
        Validity
            Not Before: Dec  3 06:00:38 2024 GMT
            Not After : Dec  4 06:00:38 2024 GMT
        Subject: CN=8ac2003b5a1100c9dc91cd36d6ad8dafbf3e002d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:62:91:55:d7:92:c1:4a:32:a9:b1:e8:df:
                    11:0a:91:aa:b5:a0:20:c2:a6:fd:be:04:ce:24:f0:
                    23:63:2e:1e:96:4e:b6:bd:38:3f:47:71:46:1d:51:
                    7d:e7:a0:29:00:35:57:be:2a:6e:ad:d2:74:90:81:
                    b7:a4:0b:10:68:77:70:dd:27:2b:91:7f:ce:0d:a2:
                    04:49:cc:34:6c:db:7a:1a:0d:80:b8:5b:65:f5:c2:
                    6c:eb:c4:c6:71:c9:85:68:d6:e9:01:da:57:44:76:
                    a7:b5:58:6a:70:7a:dc:37:b5:5a:d6:20:ee:8c:32:
                    0e:11:cc:43:23:4a:ec:e5:74:7b:a5:3b:f2:be:f8:
                    0a:e5:fb:55:b7:66:b3:26:08:7b:64:0e:4d:1e:56:
                    44:c7:26:9b:86:34:48:78:3a:cb:f0:4b:9e:85:dc:
                    d7:8c:e3:fd:f6:69:10:c7:89:3b:14:c0:5b:cb:c4:
                    79:58:0b:ab:bb:dd:2e:c2:84:e8:97:5c:a2:71:93:
                    a7:ad:77:79:68:68:97:82:d2:b0:1d:16:32:9d:bc:
                    f8:1a:af:bd:55:45:a7:38:c4:da:c1:09:4e:7c:d3:
                    c6:68:5f:26:88:60:bd:23:5c:e4:09:46:9b:20:26:
                    1f:1f:e9:4a:ec:08:35:95:0f:5b:4a:e0:8b:05:e3:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C2:00:3B:5A:11:00:C9:DC:91:CD:36:D6:AD:8D:AF:BF:3E:00:2D
            X509v3 Authority Key Identifier:
                keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:2b:e2:42:d4:3d:07:48:87:36:ce:4e:0b:56:ad:5e:e6:
         b8:96:f5:de:63:cf:54:8f:0e:e0:47:f8:4f:d1:b8:38:a6:98:
         4a:ff:75:f2:80:9b:44:36:ee:77:c4:9b:72:21:25:4c:81:28:
         c6:7f:39:c7:a8:f5:9a:2d:60:a6:a6:39:40:c8:ea:4c:63:5f:
         17:f7:14:5f:06:a3:32:61:16:cb:a5:42:d7:fe:fe:48:61:78:
         7a:fb:64:1f:25:f2:c9:a1:01:d1:05:31:d6:32:3d:1e:b2:85:
         62:e1:3c:f0:e9:ca:7f:67:9f:42:98:55:62:45:9c:ff:c6:76:
         b2:9f:79:98:a6:63:ae:83:fa:09:fb:ec:eb:89:71:c7:d7:cf:
         9a:ff:86:50:f5:81:2c:02:dd:80:7e:2d:b2:0d:03:08:87:43:
         d8:fb:a2:fb:6f:53:97:ff:64:de:b0:4c:26:24:97:98:14:f5:
         74:b0:b1:1f:b1:ea:be:55:87:fe:84:32:c0:60:6c:7f:d1:0d:
         26:92:7d:42:5a:de:74:12:56:6c:23:dc:05:93:fc:77:6f:5d:
         b2:da:db:87:2d:fb:a9:d1:65:20:6a:88:2b:ed:c0:9b:53:35:
         b1:07:4a:3e:39:bf:34:9e:96:3f:a7:50:4d:f6:98:19:d4:9e:
         68:50:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:49:51 2024 by rpki-client on console-ams.rpki-client.org