Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft
File:                     PZquhEPMof7teX2aiS-DMhA4wPc.mft (raw, json)
Hash identifier:          C/+/gKypgtv3Kf454xakSW+ENpcC+ae4ykp+13NKgxo=
Subject key identifier:   1D:44:46:9C:45:5A:D9:76:93:A8:7D:91:77:24:B8:9D:E4:E8:45:A8
Authority key identifier: 3D:9A:AE:84:43:CC:A1:FE:ED:79:7D:9A:89:2F:83:32:10:38:C0:F7
Certificate issuer:       /CN=3d9aae8443cca1feed797d9a892f83321038c0f7
Certificate serial:       0190411B7FF5DE6E5E3F0B758BD521265673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft
Manifest number:          116A
Signing time:             Sat 22 Jun 2024 18:00:39 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:39 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:39 +0000
Files and hashes:         1: PZquhEPMof7teX2aiS-DMhA4wPc.crl (hash: gBxY3NK0SNwXikXPxu77mzJaBcfoxILHJuykHq1RaN0=)
                          2: T6lm3HT0jj8CR6wFHnF7TC4rEDQ.roa (hash: lnCFcUp96PdfSHADsZ2LTAXkRveTB6oaLrUow0Dha6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:7f:f5:de:6e:5e:3f:0b:75:8b:d5:21:26:56:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9aae8443cca1feed797d9a892f83321038c0f7
        Validity
            Not Before: Jun 22 18:00:39 2024 GMT
            Not After : Jun 23 18:00:39 2024 GMT
        Subject: CN=1d44469c455ad97693a87d917724b89de4e845a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:5f:91:21:ae:ea:a6:1c:2f:77:14:89:91:
                    82:7b:e3:7d:b1:6c:2f:1b:cd:85:4e:26:9b:08:5b:
                    79:f9:1a:d6:41:1f:87:23:45:32:15:71:f3:55:95:
                    75:4d:de:39:0b:d5:76:0d:63:35:a5:ac:27:95:d0:
                    49:7e:0c:10:1a:57:66:5c:1c:54:58:c4:ac:9e:a4:
                    8c:4a:71:a5:22:24:94:d8:54:4b:f8:61:81:c1:41:
                    99:0d:c8:3b:5f:d1:bb:83:c6:ca:ee:f1:04:c8:d5:
                    76:46:50:bd:e7:34:12:15:a4:98:07:a6:44:ff:b7:
                    7b:f6:eb:55:29:b6:29:a4:75:cc:4a:b9:58:42:00:
                    cb:97:84:6e:1f:77:cb:5f:21:e7:5c:4f:00:80:9f:
                    89:77:ad:29:ed:70:95:16:29:88:f0:11:a3:3b:02:
                    8a:16:0c:d4:4f:9d:90:ee:a4:9b:5d:7b:7f:ba:38:
                    7a:8d:d5:47:64:75:ae:2c:4c:75:29:4b:8b:4b:28:
                    ab:39:54:97:03:66:7d:61:a4:62:9e:5f:19:8c:5d:
                    b6:10:a3:b1:43:eb:16:a7:4e:db:d9:43:41:0a:d4:
                    03:8d:5f:7e:e7:79:0b:d0:a3:8b:a2:d6:1a:19:a4:
                    76:fa:0d:b9:9b:cc:b7:1f:c8:5a:db:ff:1a:f3:53:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:44:46:9C:45:5A:D9:76:93:A8:7D:91:77:24:B8:9D:E4:E8:45:A8
            X509v3 Authority Key Identifier:
                keyid:3D:9A:AE:84:43:CC:A1:FE:ED:79:7D:9A:89:2F:83:32:10:38:C0:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZquhEPMof7teX2aiS-DMhA4wPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35797-8134-4bb7-90dd-287d36dbf5ee/1/PZquhEPMof7teX2aiS-DMhA4wPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:68:84:fb:aa:65:65:06:a8:94:c5:7d:a9:52:04:7c:c8:8a:
         a0:51:3f:3c:28:51:32:a2:0a:18:df:1b:b3:d7:b4:22:ba:1f:
         65:0b:86:90:f5:c4:13:15:96:75:47:52:0a:16:e1:25:2b:86:
         ce:66:51:12:c7:a9:f8:7b:42:aa:90:18:5f:2d:e3:75:c5:d6:
         3c:33:49:7c:84:5c:1d:c7:74:45:d1:b4:e7:7c:f8:7c:fb:aa:
         4e:ad:10:d9:c4:8b:97:64:cd:67:50:99:7e:83:96:37:85:7b:
         10:96:89:5e:f3:1d:ac:24:69:a8:be:f4:61:4b:f2:91:6e:39:
         4a:63:d9:f1:30:b5:10:c8:d5:03:89:05:0a:c9:86:a1:31:c4:
         91:c0:9c:3d:0d:81:82:2a:48:27:aa:5a:d9:ad:e3:68:a3:60:
         11:c6:76:e5:db:d8:b8:2c:9c:75:51:80:70:6d:4b:cd:a2:87:
         ff:49:bd:56:e6:13:9a:31:16:ba:9e:93:b4:ff:f6:10:a8:8b:
         1d:2d:31:dd:c4:54:28:48:ae:19:eb:ce:fb:c8:c2:d2:79:00:
         50:50:8c:e4:4d:61:fc:76:40:eb:76:71:f2:df:ff:aa:49:6d:
         d5:ee:15:f4:c0:54:15:f9:66:de:9b:56:0e:d9:db:35:a8:8c:
         ad:f0:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:35:10 2024 by rpki-client on console-fra.rpki-client.org