Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b64a3b-d39a-4e60-bcbd-3fbef14726c5/1/PSPV7QoUG_tE9pNdI1iK65E2xm0.mft
File:                     PSPV7QoUG_tE9pNdI1iK65E2xm0.mft (raw, json)
Hash identifier:          /GxXqIYet2gXmNnjYmvMpHJc4zbc75sOI6pZexzfBaA=
Subject key identifier:   0C:82:B6:EC:D9:03:D2:67:07:4B:56:50:C8:96:BA:F6:07:36:05:F6
Authority key identifier: 3D:23:D5:ED:0A:14:1B:FB:44:F6:93:5D:23:58:8A:EB:91:36:C6:6D
Certificate issuer:       /CN=3d23d5ed0a141bfb44f6935d23588aeb9136c66d
Certificate serial:       0190411B8A0B2AE8CE00B66763D513BDF7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSPV7QoUG_tE9pNdI1iK65E2xm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b64a3b-d39a-4e60-bcbd-3fbef14726c5/1/PSPV7QoUG_tE9pNdI1iK65E2xm0.mft
Manifest number:          0F05
Signing time:             Sat 22 Jun 2024 18:00:42 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:42 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:42 +0000
Files and hashes:         1: PSPV7QoUG_tE9pNdI1iK65E2xm0.crl (hash: Jiotwf9YlZT5SVGk1qTH4qL3dWW+RR+844l3ciHVqOM=)
                          2: nvf_LVX7Mm77t8IYqB827q565Ww.roa (hash: zYUtnamlBKPRv1oHkrfVrF30YvwJvzne7YrCh0R1qfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b64a3b-d39a-4e60-bcbd-3fbef14726c5/1/PSPV7QoUG_tE9pNdI1iK65E2xm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b64a3b-d39a-4e60-bcbd-3fbef14726c5/1/PSPV7QoUG_tE9pNdI1iK65E2xm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSPV7QoUG_tE9pNdI1iK65E2xm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:8a:0b:2a:e8:ce:00:b6:67:63:d5:13:bd:f7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d23d5ed0a141bfb44f6935d23588aeb9136c66d
        Validity
            Not Before: Jun 22 18:00:42 2024 GMT
            Not After : Jun 23 18:00:42 2024 GMT
        Subject: CN=0c82b6ecd903d267074b5650c896baf6073605f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:f2:8e:15:fc:77:f1:51:52:e6:bd:8b:a7:
                    86:52:ab:5b:69:a3:a8:b2:59:de:c8:ef:d6:c0:47:
                    99:fa:9c:f4:58:55:c0:e1:fc:51:a4:ee:6e:1c:16:
                    05:be:c0:0c:6c:6d:3c:be:c2:c8:7b:61:b9:8a:12:
                    c2:d5:07:4c:2b:2d:5d:14:1b:d2:90:1e:64:9c:96:
                    3f:0e:32:cf:22:c0:f9:2d:aa:c9:0c:44:97:d2:a6:
                    f6:80:2c:08:f5:4f:f7:dc:91:29:6c:a4:65:f1:69:
                    61:20:7f:fd:8c:e2:f3:d7:9e:76:2c:d2:18:e8:ef:
                    c7:e1:32:77:90:4c:ca:47:4e:de:c2:18:9f:ef:f4:
                    d1:f6:7d:db:63:5c:7a:c2:93:99:8f:b1:53:20:9c:
                    b8:af:a8:87:3c:fe:03:11:6a:9b:d9:4c:7d:b3:99:
                    37:9f:1e:c9:05:f6:b1:47:6b:f0:8d:26:bd:f8:e6:
                    54:6c:62:bf:97:ba:72:03:c9:51:e5:3a:f5:db:e3:
                    c6:b5:51:d1:c8:02:32:50:02:e7:fb:a4:8f:36:71:
                    7f:b4:ab:8e:19:94:6f:5d:1d:ab:56:4a:83:5b:73:
                    8d:18:60:55:6d:23:4a:49:a3:7f:6d:9f:ca:7b:0a:
                    ca:d4:f7:5b:e2:7a:18:1f:97:ca:14:c4:35:16:ba:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:B6:EC:D9:03:D2:67:07:4B:56:50:C8:96:BA:F6:07:36:05:F6
            X509v3 Authority Key Identifier:
                keyid:3D:23:D5:ED:0A:14:1B:FB:44:F6:93:5D:23:58:8A:EB:91:36:C6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSPV7QoUG_tE9pNdI1iK65E2xm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b64a3b-d39a-4e60-bcbd-3fbef14726c5/1/PSPV7QoUG_tE9pNdI1iK65E2xm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b64a3b-d39a-4e60-bcbd-3fbef14726c5/1/PSPV7QoUG_tE9pNdI1iK65E2xm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:32:cc:2c:37:ab:ca:2b:dd:0f:a9:1b:46:86:68:85:93:9a:
         d1:8d:d8:87:ad:45:88:47:f7:cc:7e:ab:6d:ee:ac:d8:45:73:
         de:42:39:4b:54:99:25:ba:ad:b8:8e:d7:32:20:d5:b7:e3:cc:
         af:78:b2:a7:52:dc:6a:bc:3f:88:c1:a4:77:6f:a3:9d:ab:bf:
         ee:89:30:9d:9c:c6:a6:69:0c:d3:30:cb:6f:1e:52:3b:2c:06:
         79:7a:73:14:30:40:7a:8c:eb:71:0d:11:c2:31:9d:b8:79:18:
         a1:6e:87:26:1d:9a:75:65:a5:21:01:ae:77:63:22:16:1e:ed:
         74:0f:0c:02:32:10:99:6c:d9:89:13:9d:83:6e:0d:35:1b:be:
         62:ac:53:96:1d:58:6a:43:ba:81:ab:a3:8c:8c:33:b3:b3:8e:
         a7:62:be:fc:50:b7:ae:84:ad:6f:89:6a:69:1b:6f:71:07:16:
         bf:47:18:d7:cf:66:04:56:b5:7e:d0:e9:96:d5:62:d3:03:00:
         ea:2d:5f:5d:e6:50:cf:cf:f0:24:09:e0:53:7c:22:0e:56:15:
         21:c0:1e:0a:51:d6:64:a5:2d:46:1b:31:7e:a2:b2:0c:9c:f5:
         63:67:43:ca:97:5b:f2:4d:d2:0e:c7:5b:4d:4e:9b:98:78:60:
         75:34:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:44:09 2024 by rpki-client on console-ams.rpki-client.org