Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
File:                     PZlE6PVlGxvS8KngBoZfOmuB62E.mft (raw, json)
Hash identifier:          HuAYPz/Tazd83Akso+jr0pNK3lW//xw/ierytP2Q4ps=
Subject key identifier:   5A:31:D9:18:30:FA:76:F7:A9:1D:ED:78:E5:7D:84:6C:36:E2:3B:50
Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
Certificate issuer:       /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Certificate serial:       01901D461A4157A85EE4F9B3073C60848CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 19:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:51 +0000
Files and hashes:         1: PZlE6PVlGxvS8KngBoZfOmuB62E.crl (hash: ADVkFTMt0lNC8j81XnRMjdZeOBxOKiv2cQhNYl9dOKM=)
                          2: lzgQA6tumGrtl1J3R_5L-rMo5IA.roa (hash: Rb5Dy+J3N7pxZEpcXafgYOYnpaHQnT4moddED/LjesI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:1a:41:57:a8:5e:e4:f9:b3:07:3c:60:84:8c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
        Validity
            Not Before: Jun 15 19:00:51 2024 GMT
            Not After : Jun 16 19:00:51 2024 GMT
        Subject: CN=5a31d91830fa76f7a91ded78e57d846c36e23b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3d:36:1a:5c:bb:44:8d:d1:2c:1e:3a:d0:36:
                    44:9a:ce:84:cb:2f:58:be:ed:28:24:30:e6:a3:cd:
                    dd:9f:75:8c:8e:44:21:23:c5:67:8b:37:77:dd:6b:
                    bc:69:80:fb:27:b3:d9:85:e0:ca:d2:9b:ee:3c:0c:
                    01:ff:fc:7e:66:64:6f:7a:dc:70:1b:1d:a7:01:cf:
                    bd:c5:49:b0:88:79:3c:4b:e9:13:9d:e6:8a:01:3e:
                    59:c6:21:bd:40:0d:86:18:c1:75:4f:1f:61:74:f6:
                    4e:e0:08:d6:c9:db:02:9d:dd:66:20:8c:e4:c9:90:
                    b7:75:e9:e8:03:a3:83:6c:6e:43:85:aa:c1:25:2c:
                    a6:b1:89:be:bc:bc:ca:00:0c:42:b7:d9:0a:eb:17:
                    ed:39:32:c8:13:5d:dc:c3:f3:a5:13:7e:0c:f9:59:
                    a9:cf:e9:72:e6:01:b7:b1:31:08:f7:eb:b8:8c:ff:
                    92:08:bb:41:0e:4b:bf:42:00:a6:32:81:2d:fe:bc:
                    2f:7f:15:04:ab:54:1e:b1:e5:e1:b5:8c:15:6b:9c:
                    8d:ec:2d:93:07:92:f5:a1:b3:6d:64:ce:d9:2d:f8:
                    64:84:29:e9:95:6a:be:0f:f0:f1:2f:7d:2d:da:de:
                    6b:7e:20:29:7c:6f:82:71:ab:1f:28:b9:d9:df:93:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:31:D9:18:30:FA:76:F7:A9:1D:ED:78:E5:7D:84:6C:36:E2:3B:50
            X509v3 Authority Key Identifier:
                keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:da:19:c3:79:2b:72:61:0d:26:28:7f:1d:0b:0d:fe:a7:3d:
         4d:6b:bf:43:5c:5e:e9:d1:73:92:e0:ed:4f:c7:fc:82:8d:75:
         43:2a:ad:71:70:26:2e:d3:89:69:1e:31:7b:f6:2f:4f:a1:6e:
         8d:2f:9e:3a:06:6d:f3:a8:21:0b:e4:7b:5a:31:0b:d9:15:1b:
         88:df:39:be:56:e9:86:dd:88:db:25:6f:6e:98:0a:6d:f2:3f:
         ac:cd:5f:0c:c5:f7:56:38:cc:98:6a:0c:28:6d:57:f9:9d:a5:
         2a:09:2c:d6:9d:70:70:af:4e:f5:9e:60:ae:b4:8b:f5:6c:b1:
         17:25:16:70:47:42:80:ad:28:bd:05:24:ec:d5:1d:6b:7b:fe:
         af:e2:64:90:e7:bf:5f:5c:d1:8f:d9:29:e9:4e:30:f4:c3:82:
         c3:02:8e:ec:9c:e9:10:aa:4e:29:80:4c:42:30:97:32:b9:47:
         ef:1f:ac:06:49:04:09:99:e3:49:07:f4:47:25:60:4a:58:bf:
         ce:bf:37:5b:c4:b7:a9:7f:32:f8:31:f4:fc:1b:5f:71:1e:2f:
         fc:69:4f:fc:6d:e9:fd:00:bb:2a:40:ec:b9:15:2c:8c:bc:c6:
         a2:e4:a5:f2:a7:d2:d9:de:6e:2e:28:e2:dc:7b:17:25:52:70:
         55:2d:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:05 2024 by rpki-client on console-ams.rpki-client.org