Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File:                     pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier:          KOusFYucI+n1ru7K+8qictqiNLasYjP8W1CfgA0i7jQ=
Subject key identifier:   46:1A:BD:1C:A6:06:6C:64:A5:4C:51:96:45:69:D2:75:30:F6:39:05
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer:       /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial:       01901C6ACDF8F2054E199F8D11DE5B5671FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number:          0E19
Signing time:             Sat 15 Jun 2024 15:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:19 +0000
Files and hashes:         1: GfqeBkj-i0tHKHL_OTPtZtB0SKc.roa (hash: 0cCWBirIxAEQRFrsVKlqaaHtt074hhTP6vrVADFjJ3k=)
                          2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: jWgAlBofv86Lg0zcCmPkDRFr8jDPOd3LLgetonxoaB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:cd:f8:f2:05:4e:19:9f:8d:11:de:5b:56:71:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
        Validity
            Not Before: Jun 15 15:01:19 2024 GMT
            Not After : Jun 16 15:01:19 2024 GMT
        Subject: CN=461abd1ca6066c64a54c51964569d27530f63905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:9b:6a:76:63:44:72:80:f0:6d:35:29:4f:
                    be:93:e6:75:e7:32:9f:98:da:23:21:95:4a:88:59:
                    f9:c4:2f:75:cd:52:9c:f7:4e:b3:4c:74:53:3c:25:
                    fb:11:49:6f:e6:8d:8a:5c:42:8a:4f:24:d6:c7:6e:
                    6f:de:11:e1:9e:1c:c4:2d:a7:f9:7d:82:14:5b:11:
                    03:99:c3:e3:8c:9d:90:28:a7:5f:3f:1b:84:30:8b:
                    1e:52:c7:13:ef:37:be:ae:76:d6:f1:1a:57:8d:ba:
                    46:4f:0e:20:33:b0:08:f7:ae:1e:c4:89:cc:1d:3b:
                    04:4c:b4:43:1e:18:99:29:04:1f:17:8d:bc:c1:f5:
                    8e:a0:cd:b2:ab:56:ca:04:47:d2:5a:21:a5:3d:0b:
                    b8:f9:09:38:ab:1a:dd:39:fa:f7:a4:08:9f:69:67:
                    63:68:b8:57:da:a6:67:34:58:2e:0f:b0:f6:65:ec:
                    51:be:2e:28:2b:af:5f:83:4f:bf:10:1b:b5:52:40:
                    5c:ee:01:05:c7:db:b7:4e:0c:67:96:8e:39:a8:f7:
                    25:e4:9f:33:ce:ac:b0:43:99:a8:d9:cd:4e:8e:57:
                    88:c8:f3:37:0a:a4:01:c6:21:de:a2:54:48:65:bc:
                    05:f5:50:61:b5:8c:d1:93:dc:a4:aa:0d:8e:97:e1:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1A:BD:1C:A6:06:6C:64:A5:4C:51:96:45:69:D2:75:30:F6:39:05
            X509v3 Authority Key Identifier:
                keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:33:e0:e7:b8:0c:57:94:b3:43:df:cb:f1:5e:ff:74:8b:da:
         ac:6d:a5:95:7e:01:f2:ab:6c:60:1e:00:9d:f6:c4:90:b2:35:
         f9:a3:96:55:ca:42:0e:76:a7:a2:5d:42:ac:f0:54:a5:b0:ef:
         03:80:2b:d9:bf:95:1f:9a:cc:7d:e8:73:6b:be:74:8e:cc:0d:
         7e:e2:0f:34:98:94:ca:79:2c:b2:dc:32:b5:87:4c:3e:1a:25:
         da:11:1f:f4:3f:83:0d:15:b5:37:3c:9f:f2:93:a5:3f:ed:09:
         3f:92:13:4f:29:2d:f9:37:4e:69:49:dc:9d:4f:59:0d:1b:bd:
         83:d2:58:1d:cb:c7:6a:07:08:ab:af:d9:97:c6:a0:ca:63:d3:
         43:46:f7:02:9a:b2:26:ac:7c:ab:ee:0e:4a:69:f5:63:11:cb:
         38:8d:a8:3a:2d:39:0e:96:d0:7f:2c:e6:b2:ab:68:2f:0b:d9:
         5b:35:2f:42:c5:f4:d6:85:86:47:66:71:63:ea:c0:74:30:7f:
         6e:0f:d9:ba:01:9a:b3:20:0d:74:8a:fd:7c:53:78:4f:ff:82:
         28:80:11:ec:f7:72:c6:6f:57:42:80:15:38:6d:d2:90:de:e7:
         8a:9f:5b:58:05:cc:16:f2:2d:37:15:e9:21:4c:9a:cc:1f:75:
         c1:f5:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:24:02 2024 by rpki-client on console-ams.rpki-client.org