Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File:                     PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier:          1/GwDmjKBzRLnEJq28CW1dxAlJ7fmRo5RPFW3U30Uzg=
Subject key identifier:   AA:3A:4F:A9:F5:54:FB:D8:13:69:3F:70:0C:88:3E:4F:59:A1:6E:D1
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer:       /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial:       01904868C5C571A6B954F0C181572DECEA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number:          058A
Signing time:             Mon 24 Jun 2024 04:02:24 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:24 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:24 +0000
Files and hashes:         1: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: X2C+J9p6eoKjnt11FcFGtO+HeNrAXbtOljFgpZMRTcw=)
                          2: _MuTUhvFygA-NGgoaVLRd0IZh0I.roa (hash: N8i+Vc9q2/b3rT3IawRMDPMWumfd1Ycqm9w0iq5FO1E=)
                          3: dw6cLcq-3px5ns328TBfhm9IHns.roa (hash: LGvESQs95/8wBiubWecJESVOPycFLqCE9WSalmVmSjM=)
                          4: kjnHUbqnNeKUfIlQYz8EIUC_X_I.roa (hash: RB5I0xfjV+eKRsPYVYAD3VgpPeQvXOFg1SXxWic1wl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:c5:c5:71:a6:b9:54:f0:c1:81:57:2d:ec:ea:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
        Validity
            Not Before: Jun 24 04:02:24 2024 GMT
            Not After : Jun 25 04:02:24 2024 GMT
        Subject: CN=aa3a4fa9f554fbd813693f700c883e4f59a16ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:ec:bb:7e:0d:75:8c:29:46:b4:4a:7d:db:
                    10:55:b4:6c:1b:24:0f:fc:18:47:3d:f9:7a:83:9f:
                    dc:a7:88:8d:1d:27:6a:81:06:24:1d:ee:cc:cd:70:
                    23:95:6e:75:af:c1:e2:6e:6e:bf:e7:fb:6f:3d:71:
                    15:6d:91:fe:2c:7c:e1:7e:62:e4:61:b4:72:5d:20:
                    4c:11:10:2d:16:f3:ee:a8:04:6e:15:ef:5e:0d:bb:
                    05:02:ae:bb:09:a0:91:3b:9e:7f:9d:b6:39:16:25:
                    92:a1:79:d6:71:e6:f0:98:f1:e9:2d:3d:6b:1a:3a:
                    31:67:3b:43:07:06:28:2f:5b:97:87:75:fd:9b:ac:
                    b7:aa:4c:10:88:6d:47:09:50:df:c6:2f:11:26:8e:
                    34:bd:c5:7f:63:31:39:82:7b:c1:da:a2:01:86:3e:
                    8f:fb:2b:7f:a0:28:1b:7a:35:b4:32:59:d4:a3:9a:
                    2a:b9:4a:3d:b4:7e:fe:c2:1f:a3:5d:d6:65:e6:07:
                    90:31:c1:98:1e:90:5f:6a:ee:d0:94:08:61:90:02:
                    32:d3:2d:69:e0:69:b9:54:66:8d:eb:77:4f:de:3f:
                    8d:9c:42:d9:5c:b5:3d:6c:2b:cd:81:c3:72:70:d5:
                    3d:1d:4e:b3:58:7e:48:22:bc:65:7c:d3:c7:7b:ca:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3A:4F:A9:F5:54:FB:D8:13:69:3F:70:0C:88:3E:4F:59:A1:6E:D1
            X509v3 Authority Key Identifier:
                keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:34:42:7d:64:44:c5:15:26:db:13:7d:d1:34:f6:92:b1:
         ec:ce:d6:ba:57:fb:22:87:fb:1d:33:3d:f9:47:e3:88:16:56:
         ae:19:86:c5:ff:fe:26:ac:5d:36:c7:31:b9:35:c1:d6:3d:9f:
         77:6a:5e:bc:5a:df:33:61:26:06:82:df:00:86:b6:bf:de:f9:
         e2:62:8b:1e:af:c0:a6:f3:68:44:cf:13:b1:be:a1:13:b1:8f:
         24:a5:59:c3:74:b9:5f:63:ba:b6:6d:71:c2:82:58:22:fc:bc:
         6d:06:a3:b1:4f:79:95:c5:36:99:97:41:05:98:2a:08:7d:b1:
         5e:70:7b:c9:63:79:9a:80:af:49:ac:e4:a4:55:3d:e6:41:fb:
         44:2a:70:5e:e6:e8:49:3d:ab:0d:fb:e7:8d:9c:b9:ec:71:60:
         8f:e9:29:90:2e:2a:81:6a:81:3d:bc:ac:5b:6a:64:cc:23:16:
         d1:b2:64:e3:e2:74:aa:66:97:86:17:a2:25:70:b0:95:3f:6a:
         a5:d9:4b:bc:95:93:67:1e:c5:37:ee:62:f8:06:f3:31:8d:0e:
         28:b1:08:41:06:b8:35:2c:7d:1f:bb:32:f3:3e:cb:62:b2:7d:
         20:f8:4e:7b:91:5c:38:d5:85:1f:77:5d:7e:54:57:1f:69:03:
         ed:12:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----