Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
File:                     PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json)
Hash identifier:          k4nmVa4PkfVjeFZM/V8MGkDYiCJRDc0f0wyXbowdK4k=
Subject key identifier:   62:A1:36:9E:57:6F:9F:C8:C7:7A:6A:53:EE:05:E8:4A:14:2B:2F:2A
Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
Certificate issuer:       /CN=3e424e245a64324a68731dd26f30c685baa8a678
Certificate serial:       01901C6ADB69E5F425222D82A3612ACA27FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 15:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:23 +0000
Files and hashes:         1: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: 1h6Wy5k+MrT0n5tetNauSmPzxQT0d2+owVfRps4J7eg=)
                          2: dDElJ7RP68mS5t8HoYIZBMYw-wY.roa (hash: vz4BlLEhjEvPgAgOz6lLj/CQtWd/qqZ6q6j+JUNFfe8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:db:69:e5:f4:25:22:2d:82:a3:61:2a:ca:27:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678
        Validity
            Not Before: Jun 15 15:01:23 2024 GMT
            Not After : Jun 16 15:01:23 2024 GMT
        Subject: CN=62a1369e576f9fc8c77a6a53ee05e84a142b2f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6e:57:3b:71:3e:40:aa:7d:61:57:47:d8:02:
                    73:51:91:b8:32:9c:ab:9a:5b:6c:91:2d:7a:c8:e7:
                    a4:b8:79:f8:a7:d8:98:c1:f8:32:ba:9a:86:b1:4f:
                    83:79:e9:1c:b7:1a:ad:03:53:b6:23:ec:61:6d:5e:
                    60:a4:1d:ea:2b:b0:30:c2:bb:5e:22:c6:10:c1:5f:
                    3f:d0:2b:52:f7:a6:76:87:88:e5:c7:8a:a9:f6:f1:
                    3f:ec:01:66:e1:2c:f0:31:35:f7:af:fb:1e:6f:1f:
                    b2:6c:db:4c:41:a6:45:a7:6e:b6:e5:cb:8f:0b:dc:
                    13:34:ae:c3:8a:62:64:74:ea:f9:09:4a:ba:cd:2e:
                    eb:91:76:5d:51:49:98:e2:b9:e6:f6:fe:34:b5:82:
                    29:77:7a:49:7f:67:02:ce:f8:98:e7:ca:16:fb:e3:
                    7a:c8:8e:f9:1a:cf:4f:37:2b:55:0a:2b:e8:6f:84:
                    02:dc:8d:ef:7d:4d:cd:65:ad:5e:9e:69:02:50:e0:
                    33:e4:46:19:8e:fa:83:3a:8d:f9:34:9b:fb:7e:de:
                    9e:5a:ed:37:06:95:77:38:7a:c4:e9:bb:10:27:57:
                    19:16:06:84:19:85:c1:ba:53:51:c1:66:c4:2c:33:
                    cf:54:52:97:21:fc:b8:9d:9d:aa:9e:92:6e:4d:02:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:36:9E:57:6F:9F:C8:C7:7A:6A:53:EE:05:E8:4A:14:2B:2F:2A
            X509v3 Authority Key Identifier:
                keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:62:75:9c:3b:6a:3b:b9:21:26:13:65:eb:c0:53:cf:ac:4e:
         f1:5e:65:55:76:83:11:47:c9:2b:10:cf:93:e9:4d:32:3a:37:
         7b:78:f2:c4:9f:2f:07:72:56:17:67:8e:12:38:1d:89:f3:92:
         a2:ec:34:c5:ea:e6:2d:bf:ee:91:5b:51:41:32:d7:47:53:13:
         c9:14:11:a7:db:82:d6:f9:03:85:31:08:91:b5:1a:aa:f1:c2:
         6c:34:f0:f3:39:60:54:81:85:27:8a:1d:77:79:01:20:4c:7e:
         22:ee:92:fc:7f:a7:24:c4:49:bd:4e:a9:c4:e2:42:2b:42:cd:
         c0:a4:96:24:c3:97:90:47:09:4c:fa:ee:68:a2:a3:3b:9e:33:
         b1:41:c1:01:93:8d:5c:6e:c5:e8:ee:42:50:c0:ea:4f:30:e5:
         fd:bc:ef:61:82:a6:f7:25:1f:7b:26:12:05:4f:c4:b2:99:76:
         0e:74:58:ff:77:60:06:98:20:d6:3a:a1:3a:9d:08:e9:36:e1:
         2e:39:d4:f9:71:66:fb:89:02:07:0b:e3:5e:67:73:d3:0e:e6:
         3c:70:90:bc:e9:88:93:b7:2d:6d:23:5f:f8:f5:ef:0a:3c:85:
         c0:a9:74:f5:dc:70:18:5c:39:35:0f:04:2d:48:2f:3f:f8:a0:
         99:67:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:18:21 2024 by rpki-client on console-fra.rpki-client.org