Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File:                     pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier:          0Ocr9463G1SHs6FRlyD8XEAdqQiBh7NEsTGQg/UMok4=
Subject key identifier:   01:AD:66:98:49:AB:16:FE:64:EF:8B:D9:A7:89:15:A5:C0:0C:45:19
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer:       /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial:       01901F34858F83165CC78CC992C9F5E0BEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number:          0BCB
Signing time:             Sun 16 Jun 2024 04:00:54 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:54 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:54 +0000
Files and hashes:         1: 9k5Gm2iBIEGixS8tZKz1UhmZNIc.roa (hash: oUcrq3hXtmxzD7tPTaHQuhOe5VoUNJwdpkuF7Ome1Ps=)
                          2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: FUQMH3kTdfPQVSLpH9srik3NaNx+hi8JAy/xzZ48E+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:85:8f:83:16:5c:c7:8c:c9:92:c9:f5:e0:be:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
        Validity
            Not Before: Jun 16 04:00:54 2024 GMT
            Not After : Jun 17 04:00:54 2024 GMT
        Subject: CN=01ad669849ab16fe64ef8bd9a78915a5c00c4519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:3f:11:84:74:b9:b3:d2:dc:2d:36:75:59:
                    46:f8:c3:93:3f:d9:3a:4e:e9:0e:38:41:54:b9:65:
                    57:15:3c:6c:ea:4c:a5:69:f3:98:c5:b3:3a:78:49:
                    8b:ff:06:43:fc:13:ae:69:72:18:30:41:72:38:02:
                    d6:05:85:c1:e9:80:c0:c7:0d:7d:66:51:39:55:e3:
                    10:98:77:32:c9:c8:e1:31:81:c9:3e:18:b7:4a:06:
                    97:01:15:74:3a:88:1b:10:63:c0:73:a0:0e:a8:76:
                    b1:09:70:96:ad:ce:cc:89:fc:ac:bf:bf:b9:8f:45:
                    82:9c:ba:0b:c9:6f:97:89:a2:13:88:7d:1a:f3:cb:
                    a9:c9:e1:f2:3c:d8:63:9a:78:32:10:57:a4:4a:c7:
                    66:39:02:81:52:93:fb:d4:a8:90:58:db:ca:dc:be:
                    da:22:05:86:4c:19:27:5d:fd:b3:96:77:a0:c3:ef:
                    7a:bf:4f:08:22:24:ea:5a:c2:24:28:6f:c8:28:63:
                    83:a4:62:d1:ae:e0:21:8d:2b:7a:08:fc:e8:a0:01:
                    50:bd:07:9c:1c:b9:dc:73:9d:ce:88:cc:2d:64:dd:
                    2d:4a:98:70:7e:e7:f4:01:c8:73:fa:c5:67:53:03:
                    f8:50:43:a7:27:34:ec:da:9d:2e:58:ee:cb:2c:96:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AD:66:98:49:AB:16:FE:64:EF:8B:D9:A7:89:15:A5:C0:0C:45:19
            X509v3 Authority Key Identifier:
                keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:0f:92:1f:a8:5f:3d:d2:d4:95:91:55:71:80:b2:9d:f6:
         e1:15:7b:15:60:6a:99:2e:fd:e0:e0:f0:3f:15:03:27:fe:79:
         0c:1e:d8:43:db:e1:59:98:98:cc:1e:cc:9a:41:53:a2:5f:9d:
         6a:46:ca:5f:c1:68:8b:09:a9:32:4a:40:2b:3f:73:6f:7f:fa:
         f6:09:05:8e:d2:30:0e:35:31:8b:32:ed:2c:6d:2d:8e:2f:39:
         5d:ad:99:e6:f4:5c:d9:0a:d8:0d:bd:47:39:c5:d1:4d:40:e7:
         e5:73:36:d6:3d:55:cb:a2:70:62:5d:69:12:65:40:61:ee:bd:
         50:9c:69:06:55:9f:ee:ee:de:be:27:bd:4e:62:a1:31:19:1e:
         72:cd:12:e1:19:d0:ef:26:5c:66:17:53:7f:b7:04:12:2c:a3:
         30:be:a0:8f:ad:22:52:4a:90:cd:ad:9c:55:d2:93:5f:e4:60:
         c7:b3:32:a9:7d:0e:44:9d:c3:7b:e2:c2:18:79:c5:82:72:e9:
         fa:07:ce:1c:3f:f4:29:87:e5:1b:f1:15:00:e2:b6:34:ba:2e:
         f4:2d:20:8c:67:45:b0:a2:18:b9:57:ef:07:10:d0:66:3c:f0:
         7b:60:6c:02:b5:e5:b0:62:5c:f6:2e:a7:33:67:0e:61:14:c4:
         1c:b7:1c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:01 2024 by rpki-client on console-fra.rpki-client.org