Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File:                     Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier:          n+ZlrdrS7RWhpcuBV00PeCcjxMMp5L0yClUU7J1jim8=
Subject key identifier:   3B:1A:E2:91:9F:99:E9:49:2D:35:01:60:E3:8D:00:51:37:89:ED:16
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       0190448AC3F88417D6CFC8DBB76F432818A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number:          116B
Signing time:             Sun 23 Jun 2024 10:01:03 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:03 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:03 +0000
Files and hashes:         1: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: pz9QJ2/pYClV5ueD9Kzug+CG7a0kNWQR2RzqYK7nOQg=)
                          2: VKLjzO3aH5mjNG2UKpPXnPz3FJc.roa (hash: akQnzzj/v3vYjsYWYqM0qFLuO/WbAY+DK4YCFf9B+vw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:c3:f8:84:17:d6:cf:c8:db:b7:6f:43:28:18:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: Jun 23 10:01:03 2024 GMT
            Not After : Jun 24 10:01:03 2024 GMT
        Subject: CN=3b1ae2919f99e9492d350160e38d00513789ed16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:10:a7:39:20:82:ee:c1:f8:01:44:c2:27:
                    9d:72:e4:d7:bb:31:0b:57:52:35:03:be:9d:5e:a4:
                    8b:08:e9:d7:3b:d9:e5:55:c0:59:c1:45:33:7d:0f:
                    15:56:45:a1:76:d5:20:83:cc:c4:a2:4c:18:69:8c:
                    78:34:af:d1:e2:6a:d0:8c:31:c0:f8:21:1b:04:f9:
                    a2:2c:2c:03:43:ca:23:f9:3b:eb:c7:d4:f6:e7:ed:
                    48:e8:a0:21:b2:4c:b7:21:df:16:66:68:08:1f:e9:
                    38:be:61:8f:9f:0d:f5:13:65:ad:a4:b6:aa:f4:2a:
                    33:af:ba:23:a3:36:b2:6d:9d:f6:98:c5:7a:6c:b9:
                    ff:b1:69:2f:86:67:b6:c8:28:ef:ef:b1:1f:34:20:
                    13:18:54:01:12:5b:4a:d7:06:2c:03:ab:4d:bf:21:
                    e0:1b:55:51:76:5f:d7:42:70:67:c6:f8:af:8e:77:
                    31:80:b0:1c:6e:d9:94:b8:8e:68:4d:db:2a:32:c1:
                    f3:ef:05:d0:2c:8c:6f:b3:1c:85:fe:3e:c6:b7:a9:
                    36:55:b2:91:9c:ff:2c:75:07:14:d8:42:6d:52:8b:
                    c3:e5:10:03:d8:13:5c:28:50:3d:27:d8:16:b4:98:
                    cb:10:59:27:68:49:28:bc:41:1a:0e:16:21:82:d9:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:E2:91:9F:99:E9:49:2D:35:01:60:E3:8D:00:51:37:89:ED:16
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f4:38:2c:80:c3:78:cc:93:3b:b1:32:49:bf:f8:5f:b7:32:
         a1:9d:d2:e3:49:d7:9e:f4:1b:0e:c4:c5:27:26:27:85:9d:6d:
         c2:ac:42:17:b7:3b:83:ac:04:1e:d1:90:62:a2:5f:6b:a0:75:
         01:2d:6a:1e:e2:d4:6c:65:d7:fa:07:19:77:55:88:4b:2d:65:
         c2:5c:89:ed:05:72:5c:53:bc:7a:cd:ad:1a:e0:0e:b0:bb:d3:
         f5:8e:a5:41:e8:d0:3a:f9:c4:c2:35:25:5c:b5:d9:64:ad:38:
         f7:4a:c5:00:10:b5:1d:1b:85:9b:7c:11:ff:c5:6f:d0:d5:f0:
         23:a0:8d:f1:a5:cd:dd:ca:56:9a:3c:a1:5c:71:33:51:2b:0e:
         84:0e:5f:1b:b0:f2:bb:60:c9:80:8f:cb:a5:78:e9:9f:1d:91:
         ac:8a:1c:78:73:dc:98:8b:80:61:3d:d1:dc:77:48:5d:81:3c:
         d1:c5:3e:d3:f7:36:0a:c3:c7:a3:fe:26:6b:7e:67:1d:81:f4:
         ac:56:b7:3e:8c:2e:68:a5:f1:a8:73:2a:b2:ef:0a:3a:26:42:
         cb:28:70:a9:a6:61:50:0c:93:c8:67:43:f5:77:23:e9:9d:c7:
         d7:9d:81:d0:ec:25:b6:7b:11:5a:28:bf:c6:c7:d3:0a:f5:78:
         10:bb:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:30:50 2024 by rpki-client on console-ams.rpki-client.org