Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File:                     PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier:          gckRxPSOlhRknoShSqYisgNI7PphSZ221rIrynQJVV4=
Subject key identifier:   53:2D:BD:8B:AC:DB:0F:B2:5D:45:3B:02:CB:EF:00:FD:E8:AF:FE:5C
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer:       /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial:       01901EFD8449C6910E4A42CB0B672C13620A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number:          047C
Signing time:             Sun 16 Jun 2024 03:00:49 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:49 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:49 +0000
Files and hashes:         1: 2TQu2B1KDUZ7LuniDqd61gYbvB0.roa (hash: n2/n0KHxp8aCzUSC/R3/bUX9g8+zq4rI71O20/2F0qU=)
                          2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: A2ur1kMSb8jFEr2DI09Ymchu+wVgpc4IJmlJnbn8o+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:84:49:c6:91:0e:4a:42:cb:0b:67:2c:13:62:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
        Validity
            Not Before: Jun 16 03:00:49 2024 GMT
            Not After : Jun 17 03:00:49 2024 GMT
        Subject: CN=532dbd8bacdb0fb25d453b02cbef00fde8affe5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ca:62:0c:48:37:57:c3:b6:98:52:80:25:6d:
                    60:e4:c8:10:fb:9d:65:38:08:02:88:2f:d8:fc:33:
                    9d:f4:36:89:f7:83:cc:c7:3e:80:51:3f:40:ef:d2:
                    13:d4:bc:16:d1:35:a4:a5:12:83:cb:dd:db:9f:64:
                    a3:db:b9:0e:ab:2b:76:0f:70:77:09:c5:c8:ce:b9:
                    d6:e2:97:a9:46:7a:69:a2:9f:ee:d0:ae:90:18:11:
                    37:b0:05:62:04:64:98:6d:8c:88:11:f2:58:6c:5e:
                    ab:3d:17:c1:df:1b:c8:77:ed:93:2f:0b:0b:fc:22:
                    fd:2a:77:12:ce:2d:b2:70:ec:4f:65:23:b1:e1:19:
                    30:ec:5a:f0:a0:c5:2a:e6:40:8c:bb:53:8d:58:2e:
                    35:a4:cd:3f:23:f3:58:d6:50:03:97:07:50:1e:46:
                    71:ab:a9:d9:5d:04:48:da:8e:89:1c:03:b8:f1:78:
                    bc:db:66:ce:20:a8:bf:9b:88:7b:8b:1c:aa:e8:e1:
                    29:03:1c:bc:6a:e4:27:02:50:36:60:cb:9a:bc:d4:
                    83:7f:ac:91:37:ad:b7:81:5a:72:07:ae:8a:e7:5e:
                    86:a9:56:1c:33:bc:b0:83:74:93:01:d7:6e:84:5d:
                    04:96:0b:e3:f0:02:8d:75:79:73:38:72:ff:77:71:
                    03:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2D:BD:8B:AC:DB:0F:B2:5D:45:3B:02:CB:EF:00:FD:E8:AF:FE:5C
            X509v3 Authority Key Identifier:
                keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b0:08:a0:27:d8:43:1d:d9:26:82:c1:58:12:d0:a4:62:bd:
         54:7c:b0:97:e6:0d:cd:f0:ec:ba:95:74:f5:ac:14:3a:0a:55:
         8d:28:2c:56:bb:00:18:fa:d4:ef:4c:a2:1f:5c:aa:07:7d:1b:
         f0:ea:4e:d9:3d:80:c4:0a:a9:90:3b:2f:1e:2c:d3:77:0c:0e:
         82:63:cb:4a:7e:43:c6:63:a0:0a:ce:93:a8:a1:b1:c1:14:1e:
         f9:33:c6:4a:1a:c3:30:ba:54:0d:a7:ea:81:cc:71:25:2d:45:
         fb:8f:fd:af:11:83:89:20:65:ca:bf:25:61:f6:d5:e2:8f:f0:
         cd:09:77:f5:30:f0:f7:44:94:8c:28:84:56:41:f5:a5:07:ce:
         ec:0d:15:d3:c8:4b:c5:74:4a:8c:2a:ce:8d:32:78:31:49:7c:
         e0:64:a3:4d:56:18:09:1d:45:7b:2f:6a:cd:ff:2c:ea:ba:1a:
         11:a6:37:fb:7b:c1:fe:a5:25:7c:4a:c3:bd:1f:3f:23:44:d6:
         8c:76:17:75:d2:2f:54:bd:cd:05:f4:42:f5:1c:3b:69:92:6b:
         59:65:44:fe:ea:12:98:25:34:24:3f:2c:e3:a6:01:03:5c:13:
         31:bb:d4:e4:f9:07:6c:25:b0:29:01:f2:ae:eb:2c:ca:81:fc:
         60:c5:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:44 2024 by rpki-client on console-fra.rpki-client.org