Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File:                     pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier:          FeNhoqzbvsmX5CsEHOGpoe3kiYRaHj0N3NOa6jpkBhs=
Subject key identifier:   74:34:22:1C:63:BD:CC:0B:B1:FE:C0:C9:B8:28:DE:FD:40:7A:63:3D
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer:       /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial:       019045D473099D8314DF88D9B6797173B124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number:          0BDF
Signing time:             Sun 23 Jun 2024 16:01:09 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:09 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:09 +0000
Files and hashes:         1: 9k5Gm2iBIEGixS8tZKz1UhmZNIc.roa (hash: oUcrq3hXtmxzD7tPTaHQuhOe5VoUNJwdpkuF7Ome1Ps=)
                          2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: 8nlVCX5W6D+CjHcOsy8MjF+udTT5CFhvy93bAOtKoQM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:73:09:9d:83:14:df:88:d9:b6:79:71:73:b1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
        Validity
            Not Before: Jun 23 16:01:09 2024 GMT
            Not After : Jun 24 16:01:09 2024 GMT
        Subject: CN=7434221c63bdcc0bb1fec0c9b828defd407a633d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:f5:81:e0:c3:78:55:cb:64:51:fe:0e:65:
                    e7:03:b0:fe:e6:30:6f:5f:51:1b:46:aa:64:cb:f4:
                    3d:63:d9:64:50:b7:71:9e:df:42:ea:6d:4d:5a:da:
                    e9:fd:61:ef:3a:4c:c5:f3:24:88:65:d5:d7:03:7d:
                    36:bb:71:3f:86:ce:8b:74:15:d7:96:62:e2:5a:9b:
                    4a:5c:ec:98:3f:8c:bd:b1:a7:b3:8f:c8:cb:a4:58:
                    97:20:92:4c:93:10:40:df:47:ef:1d:c2:07:21:89:
                    94:51:16:32:e0:49:53:46:ee:45:06:cd:d8:bf:77:
                    40:52:51:1a:c0:23:34:47:1d:a3:e9:bd:f3:01:96:
                    b1:b2:8e:08:b1:8b:43:40:9c:ca:74:59:ff:7e:87:
                    e4:50:63:1e:85:8a:bd:f7:81:10:4a:de:30:14:87:
                    ba:14:9e:cd:4f:14:16:85:99:a6:7b:f9:21:48:8f:
                    f3:70:83:3c:54:0f:5c:94:57:6d:48:1c:bc:35:77:
                    83:db:d5:0f:4f:dc:3a:9c:33:2b:37:e8:a8:85:b4:
                    9b:35:23:4a:cc:1d:c0:42:45:a1:96:3b:47:f9:4b:
                    c2:e0:23:7b:5b:10:6d:5f:32:59:b5:9c:ea:37:88:
                    19:18:29:6b:51:df:19:06:6d:1f:61:6f:c6:06:3e:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:22:1C:63:BD:CC:0B:B1:FE:C0:C9:B8:28:DE:FD:40:7A:63:3D
            X509v3 Authority Key Identifier:
                keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e3:2d:c1:2a:1b:63:2b:94:66:12:a0:10:29:63:df:9d:62:
         53:66:a3:6b:ec:01:7c:b3:96:b4:cc:2b:16:5e:bc:28:13:f1:
         e2:81:64:a4:8b:1f:15:1b:94:a2:d0:08:3e:00:ba:5a:49:56:
         1c:a4:4a:86:f6:30:87:62:5d:8f:ef:2a:57:fb:d0:23:ed:1a:
         d0:0d:7c:5f:51:e3:e7:e3:07:5b:b1:e6:b9:8f:06:74:cb:ea:
         67:d1:e6:8b:15:6a:b1:e8:1a:3f:c8:2b:a2:93:68:b4:52:79:
         e8:5e:f0:60:67:f3:e9:e5:b5:9c:8b:8c:90:be:82:d2:33:01:
         b3:9f:d6:c2:d6:86:d9:6d:27:36:11:01:9d:4b:c5:48:64:38:
         41:12:73:c8:f6:c8:05:39:58:cf:9d:d6:42:40:99:a4:72:f9:
         34:62:b5:09:3b:d7:77:57:ea:49:c3:8f:05:f8:05:92:a8:a3:
         1d:06:48:fb:e5:82:a4:a3:dd:82:e3:63:e6:28:15:b4:ef:f1:
         e5:0a:2a:52:ab:d9:6c:64:9d:b4:46:24:1c:03:e8:6d:17:5f:
         3e:b2:49:cf:55:c8:d1:0d:14:aa:e3:0a:cc:ea:6c:16:02:30:
         54:77:b1:6e:fd:d8:7d:fe:81:69:27:c3:38:82:8f:9d:14:a2:
         88:44:08:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:16:01 2024 by rpki-client on console-fra.rpki-client.org