Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft
File:                     PZquhEPMof7teX2aiS-DMhA4wPc.mft (raw, json)
Hash identifier:          gg5j+ChwudOz7cCkYbauGstDFIAuI/g96swPoqSVlgQ=
Subject key identifier:   00:D1:0B:D9:17:44:33:FC:48:D9:A5:82:4B:72:09:02:AD:D5:25:23
Authority key identifier: 3D:9A:AE:84:43:CC:A1:FE:ED:79:7D:9A:89:2F:83:32:10:38:C0:F7
Certificate issuer:       /CN=3d9aae8443cca1feed797d9a892f83321038c0f7
Certificate serial:       01901E58CD933CE6EE2963D59CA1633BFA7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 00:00:54 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:54 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:54 +0000
Files and hashes:         1: PZquhEPMof7teX2aiS-DMhA4wPc.crl (hash: mPtkozU40MtVZla/fMZ36HJMl9q4qPaB4TwiCgcUIf0=)
                          2: T6lm3HT0jj8CR6wFHnF7TC4rEDQ.roa (hash: lnCFcUp96PdfSHADsZ2LTAXkRveTB6oaLrUow0Dha6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:cd:93:3c:e6:ee:29:63:d5:9c:a1:63:3b:fa:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9aae8443cca1feed797d9a892f83321038c0f7
        Validity
            Not Before: Jun 16 00:00:54 2024 GMT
            Not After : Jun 17 00:00:54 2024 GMT
        Subject: CN=00d10bd9174433fc48d9a5824b720902add52523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:2c:a0:73:31:df:95:c0:44:56:f4:07:60:
                    72:d5:e9:48:5a:14:e9:99:a9:0b:6d:ed:08:ed:d7:
                    81:f6:0a:26:d5:10:eb:52:1d:37:e5:41:60:40:da:
                    53:55:19:74:ff:81:38:f5:61:8f:51:f1:3c:2d:d6:
                    ab:1a:c0:ce:e8:85:bb:23:40:d8:d7:db:ec:65:93:
                    c3:0b:c6:69:96:b1:58:7b:9e:84:a9:ae:1c:40:61:
                    29:f0:39:5b:6e:d4:86:28:b4:af:9e:58:96:7d:01:
                    5e:d4:89:f8:13:5c:1b:32:34:ff:34:6c:4e:c9:ff:
                    23:1e:95:53:c0:3c:5d:80:65:67:cc:6a:8a:01:76:
                    ce:ab:a1:a4:63:a4:0c:bb:ab:4d:35:6c:20:0a:26:
                    48:f3:7b:09:6e:65:17:2a:65:3a:94:60:5b:d3:90:
                    ef:4f:ff:8f:6f:40:b5:2a:e2:9b:c8:1c:7a:a1:ba:
                    a1:b8:cb:57:50:5f:81:93:0a:e6:a1:06:20:b9:db:
                    1a:4e:d2:3f:ca:08:be:4d:65:01:06:fe:ca:3d:54:
                    98:0e:3b:6f:f7:77:0f:8b:fa:ac:0f:a6:3b:4b:f2:
                    60:34:c4:f4:30:c4:e7:d8:37:c3:b7:7e:f7:62:57:
                    35:33:93:db:02:ba:4a:2e:c0:63:ca:1a:20:4e:af:
                    36:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D1:0B:D9:17:44:33:FC:48:D9:A5:82:4B:72:09:02:AD:D5:25:23
            X509v3 Authority Key Identifier:
                keyid:3D:9A:AE:84:43:CC:A1:FE:ED:79:7D:9A:89:2F:83:32:10:38:C0:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:16:93:b6:10:19:5a:22:df:53:84:3b:a2:cc:18:27:70:
         91:ee:d7:ea:57:c9:8b:9f:a9:b7:1a:87:7e:89:34:94:8c:1f:
         b5:09:45:ae:83:81:e5:5f:7b:28:e7:ef:fc:9c:1f:af:89:f4:
         da:05:60:20:a9:de:23:1e:8e:90:88:8b:bf:8f:a8:78:4b:d4:
         e8:22:d4:b7:2a:2c:c5:5f:e1:4e:dc:01:8a:d4:8c:a0:29:61:
         a9:7e:0a:f7:55:c4:8d:70:dd:35:52:88:6e:73:96:e9:04:96:
         e9:dd:93:a5:af:7f:1f:c8:11:5c:06:ea:53:a7:7e:2e:4f:6c:
         60:6e:3f:3d:4b:e7:3c:e1:ee:27:59:77:d1:be:d2:18:c1:d1:
         05:5f:19:52:de:f7:b3:3b:5e:09:e6:a0:9c:b4:bb:71:a3:cb:
         b3:fc:e9:42:79:e3:45:95:e0:a2:9a:44:48:62:7e:da:79:57:
         70:d5:72:0a:d6:c2:db:86:03:a0:86:68:18:2e:60:61:6b:ec:
         a7:61:e2:fb:4d:ef:8a:42:f9:7e:b7:d5:66:4e:ca:4a:a8:06:
         fd:d9:4c:fb:3f:b8:d7:59:d9:70:79:a4:5d:89:df:40:44:62:
         5a:3b:a5:60:2d:87:0b:df:24:78:93:e4:35:83:42:d6:4f:3b:
         8a:2c:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:01 2024 by rpki-client on console-fra.rpki-client.org