Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
File:                     PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json)
Hash identifier:          zkI84IJuUYe/8r8jKKju0iLe9Nl+6X22DztpKitpz0w=
Subject key identifier:   F6:B3:50:EC:E8:9D:2C:01:32:15:A1:CC:9B:CE:CD:AB:10:37:A1:D1
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Certificate issuer:       /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial:       01901D0F385FB5167E734949940D3994B7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
Manifest number:          11D9
Signing time:             Sat 15 Jun 2024 18:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:54 +0000
Files and hashes:         1: A-ujoD5NPwWHG0e8BKRkbhpsS3A.roa (hash: 8lazZeKnUFy3TR988YiNgOss+i34oelgUwLhPAcabr0=)
                          2: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: kEVyHj7hOYsJpgsR6as16JIgEO7nXhTdDzx0DxWXA1s=)
                          3: QzpM-pNAImjjzyaU7YXzta6Hv3U.roa (hash: jv/wZHrutuOEJxexoBMtFm0NbpRFA034+NoYb84eXv4=)
                          4: qY4j8hGFAyiZnG2zLBDjD0zlHeM.roa (hash: o7WalC0e2z6WhGsY/iUvDaOHeqQFiY3xsXtk8zuIMYk=)
                          5: qqax0ZTNG9tSfdV7qUPWsgclcq0.roa (hash: unUMSF4KnqgjuYsW9QglGkCYb3OEQlBYydqSyLWqdkQ=)
                          6: v7A-yy-0BrPcxKuAIpjWBW-abVI.roa (hash: dj1VH+yfvThr778BAUIr1UsS/zPthITub6MOAcRxCaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:38:5f:b5:16:7e:73:49:49:94:0d:39:94:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
        Validity
            Not Before: Jun 15 18:00:54 2024 GMT
            Not After : Jun 16 18:00:54 2024 GMT
        Subject: CN=f6b350ece89d2c013215a1cc9bcecdab1037a1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:f0:1a:b1:59:25:6c:9e:53:9a:48:30:29:
                    e6:c3:ca:ab:67:82:d3:ef:b7:56:96:5f:8a:84:87:
                    96:12:99:d2:5f:f8:a9:8a:40:d5:49:28:35:aa:ab:
                    12:5c:2e:04:97:78:0b:f0:b6:d1:fc:54:f7:b9:7c:
                    26:6e:81:c4:24:97:10:61:6b:1d:70:90:63:e2:62:
                    5f:e0:54:53:a2:12:20:c2:7f:1f:63:47:08:ff:f9:
                    2e:ba:34:57:04:0e:91:86:1f:d8:3c:cd:1a:c5:a9:
                    15:c6:08:38:be:83:c5:98:d5:0c:3a:ba:ad:c2:46:
                    fb:cf:4f:d3:02:db:0b:40:f6:0d:39:93:c9:bf:56:
                    a2:bd:1d:5e:e5:91:7e:f2:d8:a1:43:01:28:f4:31:
                    db:8a:98:7d:53:9c:d6:06:a0:0d:29:3e:46:50:7d:
                    67:63:4c:1e:e8:9f:91:ee:27:41:68:7a:00:56:0b:
                    4f:dc:0e:5b:ec:b6:e8:04:43:0c:04:20:11:cf:37:
                    da:ef:42:f6:88:5a:1e:c7:c6:3d:c2:9c:61:8a:87:
                    ea:2b:a7:0f:08:b5:b4:3d:7e:c5:5d:96:75:e6:82:
                    73:ac:48:4a:e3:21:a9:7f:cf:1d:a2:1c:bc:87:da:
                    a6:de:d6:7d:16:ad:5b:25:06:0f:e1:67:41:d1:c0:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:50:EC:E8:9D:2C:01:32:15:A1:CC:9B:CE:CD:AB:10:37:A1:D1
            X509v3 Authority Key Identifier:
                keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:a5:2e:be:23:f0:3f:af:7f:fb:8c:6e:8e:da:59:10:14:
         7b:93:44:04:59:6b:f7:c9:cf:c8:cc:64:ab:71:5b:4e:8d:0d:
         51:e3:66:b2:e3:f6:f4:d8:42:1a:54:a4:70:07:29:13:36:52:
         d6:8e:f3:15:6e:2b:bc:ef:c7:31:a1:1d:12:c8:bc:95:05:f9:
         b5:ab:9b:99:bf:b6:6c:0d:cc:8b:5a:02:40:f1:0e:99:1d:c6:
         9b:08:51:5e:18:14:d1:36:83:ac:a0:82:95:07:0d:ed:57:59:
         97:2e:4e:bc:1b:3c:e0:b1:42:09:a7:fb:fb:1d:a7:dd:7c:80:
         99:b7:2d:00:25:11:72:d4:b4:15:0a:91:70:8c:a8:1d:cb:2e:
         03:c5:d1:c7:e2:d5:40:43:ac:0e:b0:c9:07:7e:49:76:b7:0b:
         67:34:fc:c0:8d:f7:cf:21:f7:6a:d7:bc:ac:b3:82:63:95:74:
         1c:73:60:83:9c:ac:d4:f9:22:45:63:f4:61:7a:83:32:2d:8e:
         09:f4:ab:e4:b8:45:88:98:a1:42:0c:6d:bc:c3:d6:43:ce:6d:
         b9:d3:43:d9:91:9a:20:0d:f9:d2:e9:69:2f:d8:03:15:c8:3d:
         99:f0:d3:4b:84:9c:58:fa:d7:ef:14:4d:17:93:5b:8b:39:2f:
         b3:65:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:56:09 2024 by rpki-client on console-ams.rpki-client.org