Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File:                     PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier:          McCEnj3dJi9mepHQJEGVTxzjBn+UPeVGuYNt95RQ7h4=
Subject key identifier:   E8:03:57:36:5C:28:56:7A:5F:7F:89:87:32:75:55:F6:79:C8:EC:77
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer:       /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial:       01901EC70DF7D835BBDB4FB9E8466F4D44A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number:          03DE
Signing time:             Sun 16 Jun 2024 02:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:20 +0000
Files and hashes:         1: Jg-zjGl2wokSK8aqIFgsoTH25W8.roa (hash: jK3piW2tTNLCayDVeq5txur4OuQnEonMvAN5As4QprY=)
                          2: M_WfuBxmPqxcsEpMuyHQMgn7iO8.roa (hash: D56guXifG0M4fvvQ/CCheW3KayRKVAjS3/u9zGX865k=)
                          3: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: 6KIC+sXer57OqiF2d3LtHdr0uiCgTIatujJIaQlDug8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:0d:f7:d8:35:bb:db:4f:b9:e8:46:6f:4d:44:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
        Validity
            Not Before: Jun 16 02:01:20 2024 GMT
            Not After : Jun 17 02:01:20 2024 GMT
        Subject: CN=e80357365c28567a5f7f8987327555f679c8ec77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:26:b0:5a:13:75:f9:a8:60:df:a5:9c:5d:
                    ff:5e:92:6c:5b:5b:47:d5:42:df:98:37:6f:20:89:
                    9a:98:e3:82:2b:cc:db:b1:9d:6f:e7:f4:14:c3:3b:
                    09:c6:a2:ec:ae:1d:0f:05:45:47:ca:8e:92:e9:d4:
                    a9:59:dd:d9:d3:dc:84:25:4e:92:0c:61:00:95:14:
                    7c:df:9a:a1:d1:e6:b1:c5:d9:36:30:28:a4:d9:d0:
                    9f:98:e1:71:cb:b5:d7:f0:f8:83:72:a0:9d:6f:67:
                    7b:d9:f0:b1:ab:d5:88:20:15:88:27:6b:42:42:41:
                    c2:4d:d2:5c:99:dc:f9:7f:25:1e:ea:f8:2d:71:36:
                    8e:b1:06:5e:07:db:59:a1:81:c3:09:de:9d:9b:f5:
                    9e:36:c3:8a:d1:f4:30:b2:f5:f4:ce:ab:31:79:54:
                    43:8d:e1:a7:e4:c5:9f:19:fd:b6:20:ec:c1:bc:ce:
                    b6:cd:b2:4b:b0:96:3a:3b:a1:f7:02:9c:be:1f:66:
                    6d:8e:e2:80:8a:a8:68:a0:d5:99:84:39:f9:fe:ab:
                    d3:20:4f:e8:f8:bb:fd:c1:f9:aa:20:be:c2:f0:a2:
                    dd:09:ac:08:02:03:d8:24:d1:31:40:37:57:69:44:
                    bd:97:9a:be:84:bb:3d:c4:28:af:6e:50:3e:68:46:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:57:36:5C:28:56:7A:5F:7F:89:87:32:75:55:F6:79:C8:EC:77
            X509v3 Authority Key Identifier:
                keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:bd:86:34:9a:96:90:be:a9:dd:3c:51:2a:ce:88:69:81:79:
         06:ca:8d:f6:71:57:17:d5:75:65:b8:e8:e7:58:8a:dc:99:73:
         9c:20:43:e1:a8:5a:71:85:5a:e1:e1:3d:f9:be:ed:1c:80:0c:
         33:38:fb:76:73:64:9a:b0:0a:4f:f2:8b:e8:a4:49:70:1a:76:
         be:76:13:95:9b:d4:db:29:31:a5:54:f2:41:81:60:02:42:22:
         62:f6:ab:70:67:f3:c1:f2:35:46:42:da:b0:52:af:36:83:5f:
         3e:00:a4:8f:60:36:be:3e:3c:a5:5d:d4:a9:9e:7f:13:9a:6b:
         2b:0c:83:e4:7a:17:ce:04:44:6d:99:ff:61:d9:39:04:77:25:
         3b:d8:3c:9c:67:ac:a0:c0:76:a4:4a:e6:3c:b3:2a:4e:95:84:
         bc:41:71:e3:8f:1e:4e:76:49:3c:1a:61:29:48:cb:fb:07:e1:
         95:93:97:d4:6f:4a:1d:c4:cc:10:55:b5:d0:e4:13:01:ba:50:
         ef:24:a6:e0:fc:4c:1c:6e:f4:bd:e1:a5:4b:8e:29:48:58:0e:
         02:05:68:df:21:4c:ef:9c:45:5e:a3:43:c6:f9:60:48:ee:3a:
         59:d4:38:88:c4:8e:91:55:5b:86:a7:3f:ce:17:05:f3:a4:7f:
         ac:12:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:14:19 2024 by rpki-client on console-fra.rpki-client.org