Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File:                     PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier:          JxzuUtGKv0g8OPEoctId7vpf2Soq5HeDagO9OgkeUWM=
Subject key identifier:   08:0F:3C:F3:FD:67:B4:A8:5D:BA:64:CE:E1:B8:0E:15:42:31:3B:0B
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer:       /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial:       01901DEC66E0A935FBFC689F0A64CA73AC88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:30 +0000
Files and hashes:         1: D31lRcVXyeksHDAC5KKV4q5_fgo.roa (hash: Y2F0jSf6EQ7yrPis6f+mcx+VJt4uxrIzKAiAKqKdHHY=)
                          2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: nuvYQlamwtV+01/LA81ME8RPbTNo87ms95vNK1Vrtno=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:66:e0:a9:35:fb:fc:68:9f:0a:64:ca:73:ac:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
        Validity
            Not Before: Jun 15 22:02:30 2024 GMT
            Not After : Jun 16 22:02:30 2024 GMT
        Subject: CN=080f3cf3fd67b4a85dba64cee1b80e1542313b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:de:94:e3:2f:42:46:23:ed:88:06:c2:c8:
                    c4:66:fd:30:28:c1:3d:a9:83:47:bd:05:16:e0:71:
                    53:11:72:e5:81:4b:be:8e:43:9d:77:31:52:eb:c2:
                    f4:8a:cc:ab:0a:95:ec:f6:5f:44:f6:3e:79:1e:cd:
                    08:f1:45:e0:6e:42:ef:0b:4b:df:51:c7:93:96:99:
                    39:c9:65:c5:e0:7b:bd:ee:65:cf:6d:cd:0d:46:f3:
                    21:c8:7c:02:b6:4e:ba:e1:35:59:14:41:91:f2:e7:
                    31:b6:ac:cd:ca:77:85:b6:69:78:e6:1a:f2:b6:20:
                    b5:2e:5e:48:9b:31:8e:af:f0:3a:0c:a8:d6:4f:38:
                    af:be:ee:92:1d:26:1f:1f:1b:f6:8e:d3:88:a9:4c:
                    e3:ee:a1:93:2c:ed:52:bc:6f:35:07:e8:67:34:c2:
                    4a:87:44:89:db:ec:d9:fb:25:9b:96:f7:c0:2f:60:
                    2c:0e:9b:bd:fc:89:fd:0e:29:30:a8:19:d3:da:b6:
                    d1:30:77:b4:f7:97:d8:30:73:dd:1f:58:26:e2:86:
                    68:e9:a8:a3:64:f6:fe:9f:fe:4e:6a:06:de:2d:1c:
                    7d:d1:ab:b6:82:83:c3:99:de:82:db:94:98:e3:90:
                    84:f3:e2:31:dc:b9:8f:d3:8b:e2:86:90:41:2d:42:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:3C:F3:FD:67:B4:A8:5D:BA:64:CE:E1:B8:0E:15:42:31:3B:0B
            X509v3 Authority Key Identifier:
                keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:37:65:d2:eb:bd:19:ca:b3:e3:36:8d:21:f2:10:fa:64:70:
         1c:d5:44:a4:5e:8b:5e:78:19:13:a0:f4:b6:47:db:e7:5a:40:
         d8:bd:62:b5:b7:b1:30:34:f0:83:e3:db:3c:e2:a6:24:15:13:
         4a:fb:a1:71:75:6d:ed:5e:d6:22:6a:32:29:0b:b2:29:41:d0:
         a0:4f:cb:c9:21:18:ee:6d:81:29:3d:c8:1f:82:40:48:eb:3c:
         1e:8e:43:b3:cf:2a:3d:b0:c2:33:5a:6c:0c:eb:b6:8a:36:89:
         ab:6a:be:5f:f1:df:a2:de:94:ad:b5:fd:58:aa:9e:41:03:0a:
         f4:ec:a3:5e:78:df:68:43:13:d3:6e:7d:1a:b2:0f:87:e4:4d:
         d1:af:1f:da:c6:b1:f4:bf:6f:9b:65:71:28:88:d6:b4:2d:f5:
         5f:c9:fe:b5:a5:b9:47:7d:e9:b4:da:97:14:02:06:9b:69:ac:
         12:42:05:f2:59:ea:5d:3f:67:94:8f:59:58:99:c5:9d:1b:53:
         20:6c:c6:d6:42:51:54:62:a9:ca:a3:3b:e9:db:cc:07:88:62:
         0e:e6:10:ee:1c:67:b6:b3:15:6b:ca:c3:9a:b5:ca:7e:d7:5c:
         2b:37:ad:53:c5:fe:8e:f3:9b:22:1a:cc:fc:a0:d2:3a:41:b9:
         8e:2b:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:02:30 2024 by rpki-client on console-fra.rpki-client.org