Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File:                     pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier:          8hBG2stPofod9QbPkYR6njP8380VlfNuPpif9+V09Bw=
Subject key identifier:   A6:FF:F8:98:D7:29:ED:6A:39:10:BB:4E:E1:85:B7:3D:F3:BD:E0:51
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer:       /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial:       01903B50B7BAB5679EFB8BE627806EACB4D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number:          9B
Signing time:             Fri 21 Jun 2024 15:01:03 +0000
Manifest this update:     Fri 21 Jun 2024 15:01:03 +0000
Manifest next update:     Sat 22 Jun 2024 15:01:03 +0000
Files and hashes:         1: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: eEGUIn+vgV2BTHtgLuyODhzHg1epeIUlsk25v9qSD8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:50:b7:ba:b5:67:9e:fb:8b:e6:27:80:6e:ac:b4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
        Validity
            Not Before: Jun 21 15:01:03 2024 GMT
            Not After : Jun 22 15:01:03 2024 GMT
        Subject: CN=a6fff898d729ed6a3910bb4ee185b73df3bde051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:38:f7:99:55:4b:b0:d2:d2:38:33:f6:fe:
                    d9:cc:1a:cb:40:5a:4d:38:cf:99:3e:04:71:70:c3:
                    dd:7a:1f:84:64:c6:80:54:db:35:5c:a7:17:80:e6:
                    55:17:57:79:f6:ad:d6:b1:bc:36:d4:dc:9b:20:b0:
                    e2:d3:fb:84:50:ea:48:e6:0b:cf:56:56:cc:6e:5e:
                    3e:65:d6:99:04:73:b1:39:dc:67:bd:a8:5c:04:31:
                    19:f1:08:4b:4b:08:f7:9e:07:4a:2f:c6:b0:c4:d3:
                    ea:e0:e0:5c:4c:21:e2:34:db:86:81:5e:e5:c2:b7:
                    63:18:0c:26:41:53:8a:fb:3d:e1:ce:5a:63:a3:97:
                    f1:ed:f2:ff:ce:e1:c9:ac:43:53:35:53:c0:c4:3a:
                    c9:c4:d3:59:df:08:9a:52:6f:a1:2b:3b:71:18:83:
                    e3:d6:9c:a0:cc:85:ec:9a:79:df:c3:1c:7d:6f:54:
                    72:8f:84:e7:06:87:d0:c6:03:8c:3b:05:e3:cc:50:
                    58:92:6e:43:f1:b0:b4:3b:07:7a:47:9c:99:b3:bf:
                    98:cd:33:23:a9:1c:68:fa:25:d2:32:28:7f:10:3b:
                    1d:5f:39:df:2a:62:33:a8:74:cb:fa:85:3d:8d:71:
                    8a:fa:2d:2f:37:8a:26:39:2c:8d:f3:9c:ab:6a:2f:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FF:F8:98:D7:29:ED:6A:39:10:BB:4E:E1:85:B7:3D:F3:BD:E0:51
            X509v3 Authority Key Identifier:
                keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:69:f9:ef:56:4d:b0:fa:27:2b:72:9b:7a:20:0a:0d:86:
         2a:2e:bc:eb:87:33:9b:b3:93:8b:a6:12:19:a4:f9:99:4f:7c:
         95:a3:72:b5:1a:a6:63:7d:fb:b9:14:3c:e9:cf:1c:8c:76:ef:
         e8:74:57:fa:6d:c9:7e:ea:45:53:6f:ed:e6:31:28:a5:1c:de:
         10:34:8e:eb:92:4c:01:1d:a7:70:10:78:c1:5d:ba:ac:e2:2c:
         11:0c:b5:a5:c0:9d:ae:79:7a:b2:db:a0:0d:df:37:89:79:4e:
         72:9d:3a:b0:43:63:ab:07:4b:8e:91:9c:31:5e:33:83:38:3f:
         1b:ac:f7:17:ea:e1:48:10:ea:8b:06:cd:d1:28:ad:7f:3a:82:
         50:5d:e6:ef:04:9c:21:a4:b9:54:cf:5e:db:72:ed:aa:0a:4a:
         54:6d:6e:d6:4a:86:d9:4c:aa:73:cc:c6:29:31:c9:32:76:ce:
         72:96:f4:8d:88:f4:81:d6:dc:19:e9:ac:8f:76:64:e8:64:2b:
         c0:d8:1d:f6:71:7d:fe:7f:ff:0c:57:d9:e4:27:36:94:87:98:
         e8:35:18:f5:86:86:c7:b5:c3:53:b7:9c:e8:18:33:77:a2:2f:
         71:73:5e:57:92:ab:19:02:b9:5b:b8:26:17:c1:a8:62:ba:3d:
         f7:c4:62:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA7ULe6tWee+4vmJ4BurLTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2ZmM2IxYWNjZDgyMDFhNDExNmM5ODc1NzMzOTIzNDI4
OTgwMWUwHhcNMjQwNjIxMTUwMTAzWhcNMjQwNjIyMTUwMTAzWjAzMTEwLwYDVQQD
EyhhNmZmZjg5OGQ3MjllZDZhMzkxMGJiNGVlMTg1YjczZGYzYmRlMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEI495lVS7DS0jgz9v7ZzBrLQFpN
OM+ZPgRxcMPdeh+EZMaAVNs1XKcXgOZVF1d59q3Wsbw21NybILDi0/uEUOpI5gvP
VlbMbl4+ZdaZBHOxOdxnvahcBDEZ8QhLSwj3ngdKL8awxNPq4OBcTCHiNNuGgV7l
wrdjGAwmQVOK+z3hzlpjo5fx7fL/zuHJrENTNVPAxDrJxNNZ3wiaUm+hKztxGIPj
1pygzIXsmnnfwxx9b1Ryj4TnBofQxgOMOwXjzFBYkm5D8bC0Owd6R5yZs7+YzTMj
qRxo+iXSMih/EDsdXznfKmIzqHTL+oU9jXGK+i0vN4omOSyN85yrai9bAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb/+JjXKe1qORC7TuGFtz3zveBRMB8GA1UdIwQY
MBaAFKY/87GszYIBpBFsmHVzOSNCiYAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEt
NzdkMzE1Y2MxNmFhLzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEtNzdkMzE1Y2MxNmFh
LzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQhp+e9W
TbD6Jytym3ogCg2GKi6864czm7OTi6YSGaT5mU98laNytRqmY337uRQ86c8cjHbv
6HRX+m3JfupFU2/t5jEopRzeEDSO65JMAR2ncBB4wV26rOIsEQy1pcCdrnl6stug
Dd83iXlOcp06sENjqwdLjpGcMV4zgzg/G6z3F+rhSBDqiwbN0SitfzqCUF3m7wSc
IaS5VM9e23LtqgpKVG1u1kqG2Uyqc8zGKTHJMnbOcpb0jYj0gdbcGemsj3Zk6GQr
wNgd9nF9/n//DFfZ5Cc2lIeY6DUY9YaGx7XDU7ec6Bgzd6IvcXNeV5KrGQK5W7gm
F8GoYro998RixQ==
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:48:11 2024 by rpki-client on console-ams.rpki-client.org