Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
File:                     pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json)
Hash identifier:          5he2VK0Gv9NtAV7g9W8dc6+VRWRpWq6Yp5q6gBNMCbg=
Subject key identifier:   09:3F:22:8F:C8:CA:94:A7:B3:CB:48:5F:6F:65:32:93:4F:8B:67:2E
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Certificate issuer:       /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial:       019040AE271B4309B307DE71AD033DD07F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
Manifest number:          066D
Signing time:             Sat 22 Jun 2024 16:01:13 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:13 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:13 +0000
Files and hashes:         1: UNsPiZGkr5Tr9rRrrIKStDfpcsg.roa (hash: nuuW5kL/AOjG+zu32HD8Dkfv95UtzaduBFn+34PNTd0=)
                          2: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: oqMndBDQqrMQcmR3dwwt6czqH31tjBCx6wyCQtWiWRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:27:1b:43:09:b3:07:de:71:ad:03:3d:d0:7f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
        Validity
            Not Before: Jun 22 16:01:13 2024 GMT
            Not After : Jun 23 16:01:13 2024 GMT
        Subject: CN=093f228fc8ca94a7b3cb485f6f6532934f8b672e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:b0:9e:ea:b0:f9:8b:05:fb:83:aa:dc:ee:
                    92:b4:41:62:6a:4a:08:13:1b:97:04:d1:a5:3a:97:
                    89:7b:02:d3:79:d7:67:65:7e:59:94:da:66:5b:67:
                    6a:8e:0f:15:ce:dd:62:60:f4:f3:d3:9b:ff:2c:15:
                    31:1d:34:a4:25:83:cf:bf:fe:e4:de:c9:2c:b4:20:
                    fb:e3:0c:14:56:e7:3f:b3:07:d2:07:0a:b9:4c:08:
                    d6:6a:cb:53:dc:46:c3:2f:00:b5:11:4f:d2:52:c6:
                    47:98:00:8e:85:5d:48:c8:81:14:88:04:32:a7:2b:
                    12:98:a2:33:a9:f9:9c:d7:9b:15:f8:c3:c3:da:55:
                    c8:b6:89:2b:47:5f:6f:7c:f4:48:1e:68:43:96:bb:
                    fd:f9:77:00:17:3e:8d:84:d1:09:03:f3:6c:de:b6:
                    9d:f0:ab:48:00:9a:a0:95:3d:48:d7:c4:f4:c2:f9:
                    86:fc:11:03:40:e8:4c:9f:dc:88:a4:42:a7:d7:ca:
                    f8:57:f6:86:d6:eb:bd:bf:61:94:3d:52:1a:a4:f4:
                    16:74:3e:9e:f8:b1:0b:0e:55:53:89:74:93:e1:9e:
                    3a:b8:ca:9b:ee:05:7b:38:ac:8f:4a:62:92:8d:0e:
                    0f:08:11:21:c1:f2:a1:69:09:1b:54:97:7b:6a:f3:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:22:8F:C8:CA:94:A7:B3:CB:48:5F:6F:65:32:93:4F:8B:67:2E
            X509v3 Authority Key Identifier:
                keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:1d:58:bf:87:b0:ca:e9:c4:fd:43:e1:7c:33:26:20:bf:
         31:90:a6:00:8f:35:23:4d:d6:b9:0e:8b:45:03:52:6a:8a:e5:
         ff:c3:55:d5:64:13:46:ef:b4:f5:90:14:14:fd:7b:cc:06:8c:
         0f:d3:34:94:ba:bf:13:33:59:ec:3d:7e:11:74:7a:20:99:64:
         48:3c:fc:c5:f5:85:2d:89:91:75:11:ce:a6:82:0d:a2:f4:cc:
         61:4d:7b:1a:ba:6f:ae:5c:bf:70:40:a4:c0:87:7e:ee:f6:14:
         40:b4:cc:86:9a:b7:8d:4e:24:5f:81:8b:fa:ca:56:32:58:b2:
         10:74:af:d4:c2:2c:c4:63:50:dd:b0:5f:79:9e:bd:d1:4c:94:
         6e:0c:73:50:b7:1f:a1:2d:63:4b:ec:c6:d8:dd:36:98:6f:9e:
         d0:91:60:ea:dd:39:cb:ae:c7:bd:83:20:26:b0:30:46:e0:31:
         84:02:c0:be:c4:a6:62:40:62:71:b1:48:8c:6e:50:b0:97:b2:
         b5:94:d9:8b:7e:cb:63:94:28:2c:57:78:3d:e0:41:5e:f4:80:
         c7:21:e5:96:c5:4c:44:62:3e:7c:c0:d6:77:87:70:95:15:d8:
         15:f1:6a:49:41:2a:a2:3f:39:47:db:3f:0f:62:91:db:7e:01:
         eb:76:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:35:11 2024 by rpki-client on console-fra.rpki-client.org