Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File:                     PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier:          80FMxi6b/mL/rF9QUa4Er/2XEnJtvrz0y8Mf4KH8xH4=
Subject key identifier:   07:7E:90:25:BF:9A:88:AB:7D:E9:21:BC:59:E4:DA:3D:BB:0D:CF:4C
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer:       /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial:       01901DEBD685D99ABDAAD1A37D5091E1A057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number:          0608
Signing time:             Sat 15 Jun 2024 22:01:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:53 +0000
Files and hashes:         1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: RBLeGXnKMWFPnvnI/p8+nzbL2mD0ePpz44dufzmizOg=)
                          2: l8XQvTXjpuUnbDki44ku5vuQlmI.roa (hash: nz2OsZuqLvJ7YgCTwaj1GSPO53MFkMsPG+eCynn4jmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:d6:85:d9:9a:bd:aa:d1:a3:7d:50:91:e1:a0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
        Validity
            Not Before: Jun 15 22:01:53 2024 GMT
            Not After : Jun 16 22:01:53 2024 GMT
        Subject: CN=077e9025bf9a88ab7de921bc59e4da3dbb0dcf4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:a1:86:1d:e8:89:37:6c:36:4c:ca:9b:a0:
                    20:1f:9e:c1:d2:49:ba:e3:94:0f:90:0a:d5:4b:47:
                    c3:e9:99:dd:2c:10:06:d1:44:e6:83:5f:a7:5a:a8:
                    03:78:6a:a5:ca:8e:13:72:49:81:2c:d8:be:96:da:
                    d9:8c:5a:e3:be:ca:8e:26:c3:d4:bb:2f:3d:0f:73:
                    35:32:c6:b2:d9:7d:07:37:7b:42:c4:c7:39:cd:d5:
                    46:16:2e:4a:24:3f:bf:23:16:a5:ba:a1:3d:27:f3:
                    50:18:f9:29:2a:4d:3e:ba:89:ac:b8:05:a4:fa:ca:
                    e9:e4:c1:2c:cc:c1:3e:44:1c:d6:01:98:ac:a0:ac:
                    cc:68:7d:ca:7d:9c:1d:24:1e:8a:9b:cf:66:46:11:
                    e4:cc:83:56:a3:e6:e3:75:1b:ef:09:9e:05:ab:2d:
                    fd:9a:07:c0:c4:f0:c0:68:fd:43:dc:eb:c9:67:1a:
                    33:34:dd:6f:8d:fe:8d:1f:01:bb:23:ce:a1:05:d7:
                    20:ca:05:4b:bd:70:d2:97:9c:b4:7f:be:b4:22:30:
                    eb:66:06:66:95:3d:c2:e0:28:12:0a:8e:9e:91:6a:
                    dc:a0:9d:21:cf:e7:f6:42:6b:87:71:8d:4f:00:5a:
                    8f:9d:15:b2:f9:de:69:8f:d0:f8:b8:9e:4e:cc:80:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:90:25:BF:9A:88:AB:7D:E9:21:BC:59:E4:DA:3D:BB:0D:CF:4C
            X509v3 Authority Key Identifier:
                keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:94:dc:c1:fc:82:69:87:b4:8f:31:d4:c8:cf:5a:0d:d0:08:
         08:3c:2b:d7:3a:d4:a2:74:0e:1c:69:ba:62:c9:cb:d4:49:ed:
         28:e5:9a:6f:06:66:53:58:a8:b4:af:b9:8d:64:b7:30:af:fe:
         f2:82:72:d1:88:fd:29:02:f1:65:17:cf:af:cd:2d:28:59:bd:
         a9:b4:8d:13:67:9a:51:d5:d2:22:52:e7:f1:e5:6e:17:5b:cd:
         ab:51:84:68:2a:23:a6:6e:67:8e:67:01:17:80:b3:be:95:e3:
         34:53:ba:dc:ef:20:ea:ec:82:70:89:ab:8c:82:04:d3:fd:b9:
         af:69:fe:b0:95:76:da:cc:91:33:6f:98:06:f6:fc:d4:68:55:
         c0:45:8d:a9:15:b0:85:69:75:cd:de:ca:50:80:96:7d:01:52:
         e1:6d:33:e9:26:36:5a:c0:96:2f:f7:2e:d8:b3:db:dd:2d:0b:
         8d:13:3b:a0:87:0c:9d:84:10:a6:92:1e:d2:2f:ac:f2:96:80:
         78:df:93:68:21:e3:85:09:31:48:5e:8d:8a:be:71:2c:60:fe:
         a0:8b:32:4a:bc:18:db:b7:ad:95:cf:75:a7:ad:71:b8:e6:02:
         ac:aa:ec:9a:f4:dc:76:a6:d7:c4:5f:e6:9b:5f:b7:77:9c:bb:
         f3:96:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:25 2024 by rpki-client on console-ams.rpki-client.org