Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
File:                     pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json)
Hash identifier:          l8H6alc+iimHnHzyFy/wioYID6O77imdc23/C+FeblA=
Subject key identifier:   6A:84:6D:AB:DA:31:92:A0:66:39:DA:ED:EC:4E:37:4E:DE:BC:99:4F
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Certificate issuer:       /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial:       01901DECC50BE89C21BD731068752E6BE66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
Manifest number:          065B
Signing time:             Sat 15 Jun 2024 22:02:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:54 +0000
Files and hashes:         1: UNsPiZGkr5Tr9rRrrIKStDfpcsg.roa (hash: nuuW5kL/AOjG+zu32HD8Dkfv95UtzaduBFn+34PNTd0=)
                          2: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: 9TGeqkcP2wThDAXU3+UVU0KHj8gzmOx9Y5ncnIFBvt8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:c5:0b:e8:9c:21:bd:73:10:68:75:2e:6b:e6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
        Validity
            Not Before: Jun 15 22:02:54 2024 GMT
            Not After : Jun 16 22:02:54 2024 GMT
        Subject: CN=6a846dabda3192a06639daedec4e374edebc994f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:89:df:4e:d9:45:07:05:5d:98:8b:42:6b:
                    76:1c:fb:7b:cc:2c:34:0b:36:20:de:c3:d5:f4:09:
                    49:38:bb:39:bc:5c:c0:c6:52:2f:b8:44:d9:6e:6c:
                    4f:21:3a:15:34:1d:82:e8:c2:40:5e:d6:57:4f:3a:
                    60:32:42:53:7a:49:0d:e3:d7:66:9b:68:da:b9:e3:
                    23:07:1a:9e:41:0d:38:2d:7d:0b:ab:d5:2b:42:34:
                    2a:8f:57:11:9a:a7:6e:6e:08:18:bd:c2:fa:53:cc:
                    1d:ec:d5:42:f2:c1:2c:bb:68:a3:70:da:b7:5a:2a:
                    42:11:25:e1:d6:40:e3:c7:6a:33:2c:38:1f:a3:4b:
                    1a:2e:fb:af:c9:a4:20:8f:5e:1e:30:97:f8:4b:08:
                    b7:4c:69:9f:24:e8:1e:02:d4:44:50:3d:e9:9a:cb:
                    38:f3:b0:a1:d0:00:06:d0:7b:d3:ed:1b:2b:cc:04:
                    d9:28:2f:c8:9f:c1:bf:d5:4b:41:e6:1a:15:3b:45:
                    e9:a8:1a:2d:f1:90:08:0d:b5:f6:93:01:d1:b6:bc:
                    b6:32:1e:36:9d:db:6e:de:71:ba:e7:84:cb:5b:47:
                    2d:b4:75:14:91:3d:0a:f3:e6:d4:11:52:a3:ce:ea:
                    45:15:92:97:43:10:92:8d:e3:b0:4b:55:f2:c1:77:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:84:6D:AB:DA:31:92:A0:66:39:DA:ED:EC:4E:37:4E:DE:BC:99:4F
            X509v3 Authority Key Identifier:
                keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e4:06:8e:75:22:57:14:e3:e2:4d:19:57:88:6c:9a:a6:38:
         be:33:eb:e7:93:e1:d2:17:af:fd:9e:13:d0:6f:1c:e2:3e:3b:
         8c:f3:34:41:28:f9:35:2b:57:66:4e:75:40:9e:0f:e5:d2:ca:
         bb:de:17:4d:06:7c:e0:74:f0:c0:c8:6d:47:fb:28:40:13:ae:
         3b:0a:79:79:02:6a:32:22:41:93:74:7c:a3:d7:7f:c3:cd:5b:
         64:bb:e2:65:f9:f0:2b:bf:d1:0b:45:42:3f:4c:40:8f:12:77:
         ec:40:76:d2:8a:1e:8e:6e:9b:f3:d8:24:85:17:8d:13:7b:1b:
         1a:98:b1:29:95:2b:57:13:61:03:b7:19:6e:93:90:13:0c:07:
         5b:80:e2:4b:c5:b1:80:ed:cb:43:8e:63:83:45:ec:7e:15:88:
         8d:78:74:83:2d:a3:75:c4:83:1f:00:c3:63:e4:b5:04:79:36:
         87:ec:4f:28:5f:68:3e:a8:b0:9f:fd:37:eb:8f:d3:3d:8a:f9:
         d9:06:18:a6:8d:64:36:d6:ff:d8:45:89:62:24:57:5d:05:f9:
         94:1c:22:91:6f:ef:ff:d9:51:f8:e4:b1:1c:4e:6f:67:f6:b2:
         75:81:34:27:21:ba:4d:8c:5b:4c:87:05:99:2e:9e:ee:ec:1f:
         7b:32:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:58:10 2024 by rpki-client on console-fra.rpki-client.org