Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
File:                     PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json)
Hash identifier:          g1uLMlf2Vdoy/M+h+1xUjU59Cq3paPh/ruOaNJsrqgQ=
Subject key identifier:   36:87:AA:B0:20:1E:69:7F:85:48:B8:16:25:FF:75:71:9E:09:2A:A8
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Certificate issuer:       /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial:       01903BF5687D54C76DE87807B878FDD02ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
Manifest number:          11E9
Signing time:             Fri 21 Jun 2024 18:00:57 +0000
Manifest this update:     Fri 21 Jun 2024 18:00:57 +0000
Manifest next update:     Sat 22 Jun 2024 18:00:57 +0000
Files and hashes:         1: A-ujoD5NPwWHG0e8BKRkbhpsS3A.roa (hash: 8lazZeKnUFy3TR988YiNgOss+i34oelgUwLhPAcabr0=)
                          2: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: K/lYPXlJN0KJ1WLXO0D8TvcSr1efzF+Crt235bKU6Wo=)
                          3: QzpM-pNAImjjzyaU7YXzta6Hv3U.roa (hash: jv/wZHrutuOEJxexoBMtFm0NbpRFA034+NoYb84eXv4=)
                          4: qY4j8hGFAyiZnG2zLBDjD0zlHeM.roa (hash: o7WalC0e2z6WhGsY/iUvDaOHeqQFiY3xsXtk8zuIMYk=)
                          5: qqax0ZTNG9tSfdV7qUPWsgclcq0.roa (hash: unUMSF4KnqgjuYsW9QglGkCYb3OEQlBYydqSyLWqdkQ=)
                          6: v7A-yy-0BrPcxKuAIpjWBW-abVI.roa (hash: dj1VH+yfvThr778BAUIr1UsS/zPthITub6MOAcRxCaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:f5:68:7d:54:c7:6d:e8:78:07:b8:78:fd:d0:2a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
        Validity
            Not Before: Jun 21 18:00:57 2024 GMT
            Not After : Jun 22 18:00:57 2024 GMT
        Subject: CN=3687aab0201e697f8548b81625ff75719e092aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:29:fb:40:29:27:1a:08:a1:ec:a7:bf:57:
                    8b:95:5b:48:61:2f:1c:be:9f:10:df:5c:99:b0:51:
                    ea:c2:94:a4:0b:84:e7:e4:35:8e:a4:91:64:e1:97:
                    2c:7a:a8:a8:12:87:dd:f9:a5:91:61:3f:cd:a2:8b:
                    9d:19:c0:4d:4d:83:b9:64:57:85:4e:11:8e:64:80:
                    28:1b:d9:9f:63:13:16:53:70:59:24:79:35:d3:82:
                    65:39:53:82:51:d9:46:20:7a:c3:78:c7:75:10:c4:
                    fb:83:09:2d:56:22:43:53:7a:1b:95:87:e4:be:ae:
                    a0:ab:dd:ae:0d:1d:11:60:3a:1a:a1:2b:99:b4:fd:
                    46:0b:e5:8c:fa:6f:a7:68:f2:39:58:87:0a:c1:26:
                    02:0b:b0:76:e7:61:11:c3:f3:49:d6:5f:68:83:9c:
                    a9:4a:b0:db:01:3b:09:b9:18:19:eb:c3:9a:20:37:
                    dd:58:9d:1c:f8:28:f7:05:f6:d4:4b:fe:c0:f0:b4:
                    a6:45:84:df:b8:79:76:2c:e3:fc:cc:f2:ab:d7:8d:
                    07:f4:d1:bb:8e:b4:df:6a:dc:5b:de:2b:10:e1:99:
                    b3:24:00:4f:b5:17:2d:ae:31:9f:55:bd:00:e0:a2:
                    72:0a:75:35:59:21:33:0f:1e:82:30:79:b8:12:30:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:87:AA:B0:20:1E:69:7F:85:48:B8:16:25:FF:75:71:9E:09:2A:A8
            X509v3 Authority Key Identifier:
                keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ab:e6:83:69:72:5b:39:28:4c:ca:a9:30:59:2f:31:51:8e:
         db:46:4d:c6:a5:c9:1d:37:48:70:94:1b:ff:da:50:02:a3:9f:
         36:3b:c7:6b:c5:f3:a9:e5:13:e6:d9:00:07:0a:c3:b4:77:93:
         eb:75:3e:1a:2e:02:b1:f0:26:10:c0:ea:e2:fc:b0:f8:88:19:
         9e:07:34:43:96:4f:6d:b2:4e:9b:64:ba:04:09:17:4a:38:d0:
         22:a8:38:d8:ac:96:27:ef:e4:a4:89:1d:55:94:e1:64:48:22:
         6e:61:fa:3d:d2:7d:7d:4b:85:9c:b9:64:76:e7:f2:25:c8:2d:
         7d:73:72:a6:ee:19:22:10:bb:ae:7b:cb:90:f5:51:58:98:35:
         82:23:9a:fc:9d:2e:2d:ca:67:38:d2:e6:45:1c:38:5b:cb:46:
         b5:73:2d:88:b3:94:29:45:f4:5e:c2:0d:c9:7f:7b:3d:42:4c:
         8e:e3:1d:6d:ee:60:35:7d:88:e2:38:5b:fb:27:a3:fc:9c:dd:
         23:07:3a:a7:0e:d5:2f:32:d5:35:e7:fd:03:08:dd:9c:e9:69:
         ac:5e:d4:3b:ef:d4:fe:96:04:7f:78:34:d0:29:80:28:f8:fe:
         fe:53:6d:9c:65:4f:12:7c:aa:03:33:57:22:1e:ac:fa:76:ec:
         19:61:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:06:33 2024 by rpki-client on console-fra.rpki-client.org