Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File:                     PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier:          K6XU3maRZtLmGkGKAtCCLueyobVb3TxjSkSgdih8F7k=
Subject key identifier:   96:42:52:F9:F9:99:CC:48:87:54:86:51:CD:31:36:F7:B5:FD:91:12
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer:       /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial:       019356F6928FBA332510ABBD57CC3BF4C950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number:          0F46
Signing time:             Sat 23 Nov 2024 03:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:19 +0000
Files and hashes:         1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: TPKK3kSwkNQ8Z6N4tI1McqycipbNCXz9XOFneb82za8=)
                          2: xjlvGVJLbh-pvMFZWPDJhCh2598.roa (hash: djVtZ5WxrEshsM4bxYIIPqQuSqG78TxDVF0bYMpVX2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:92:8f:ba:33:25:10:ab:bd:57:cc:3b:f4:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
        Validity
            Not Before: Nov 23 03:00:19 2024 GMT
            Not After : Nov 24 03:00:19 2024 GMT
        Subject: CN=964252f9f999cc4887548651cd3136f7b5fd9112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:6a:1d:c8:f7:b4:ca:c9:82:d3:47:e3:27:
                    bb:05:e1:d5:1d:f0:84:e9:7e:07:51:29:4c:f9:20:
                    d5:a7:e0:08:f7:be:d8:e3:14:05:74:4a:5a:97:a3:
                    f6:6a:e6:24:a7:08:2d:84:ad:75:f7:14:a1:cc:cb:
                    74:77:d4:e2:b1:95:d5:1b:f5:f8:ca:ac:4e:89:23:
                    3a:a8:ed:88:29:63:7d:be:5f:da:09:bc:4e:18:05:
                    27:47:3e:d1:80:23:99:3b:dc:95:64:aa:b5:b9:1c:
                    c3:d5:88:3b:b5:ca:35:c6:5f:e4:c6:d2:aa:51:85:
                    a0:24:8a:1c:af:a8:b8:8a:a2:82:a8:37:16:98:c7:
                    fd:80:4e:95:19:0d:3f:9a:a6:d1:56:b1:ef:51:de:
                    eb:84:e6:ad:53:f1:39:69:e0:b0:fb:8f:b2:46:16:
                    ec:b6:81:b6:92:16:7d:4e:3d:9a:88:05:2e:01:0c:
                    7f:25:8e:83:9b:49:8e:a8:ee:b6:a6:81:97:d6:49:
                    be:1b:22:36:28:00:85:a5:a0:cd:46:75:ba:7b:b0:
                    ac:48:15:02:0b:31:93:66:d7:52:87:df:38:22:47:
                    8c:ea:f1:7e:22:0d:e8:56:71:73:91:a7:a6:89:db:
                    03:77:4f:66:28:87:9b:8b:5d:ed:95:fd:95:0e:2d:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:42:52:F9:F9:99:CC:48:87:54:86:51:CD:31:36:F7:B5:FD:91:12
            X509v3 Authority Key Identifier:
                keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:c8:50:f5:97:3e:7f:a2:6d:f1:f5:09:3e:0d:0a:25:42:
         b1:76:dc:29:5e:a4:6f:79:08:59:22:a5:84:09:29:f1:dc:64:
         a8:03:20:2f:e8:89:e6:18:9c:5a:31:ef:54:04:bc:fd:d5:10:
         89:82:f6:49:cb:84:b3:14:f6:70:4c:6f:ee:68:7c:04:b4:03:
         0a:56:5f:26:28:2c:c8:41:5c:a2:d6:e1:c2:3b:00:b2:65:84:
         9c:e7:04:27:f7:a1:8b:72:27:47:5a:08:3d:37:d8:5e:f7:31:
         73:aa:9b:1c:b8:86:32:bc:d5:fb:1c:45:42:34:2d:5b:56:7b:
         45:da:e5:c2:3b:32:7e:13:9a:8e:b9:7a:a4:0d:ad:11:42:4e:
         98:5d:79:81:ce:ce:bb:17:47:f3:02:57:1c:b4:7a:00:dc:6f:
         97:8e:7e:17:63:75:57:7a:c8:66:67:0e:5d:5a:9e:c4:b6:fe:
         fa:90:23:c4:e1:0e:52:a5:73:86:66:97:cd:cd:06:ca:08:1e:
         92:c7:cd:62:da:12:4e:70:c4:ce:a6:a6:03:dc:e2:7d:31:90:
         13:b9:41:c0:55:ad:83:51:83:ee:45:33:60:5d:43:21:ca:2a:
         f3:e5:81:41:8f:b7:d4:82:d5:2e:3f:40:ca:9a:24:66:01:6c:
         97:f6:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:54 2024 by rpki-client on console-ams.rpki-client.org