Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File:                     pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier:          f1NU6mP10adURlm8X9Fk1AYs4gj6WFsi05ozYX43RFI=
Subject key identifier:   D2:0A:06:1B:B5:2A:1C:0A:BB:2E:16:A0:57:4C:D9:D1:5A:50:8F:47
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer:       /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial:       019357D29EF2FB5F8C1F40F46C4001E6BF97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number:          03C0
Signing time:             Sat 23 Nov 2024 07:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:41 +0000
Files and hashes:         1: LRar0FDfUkJZRjaiGpB_smjzDFk.roa (hash: HvLAVJBU/sQ3W3mLHk4q8CvfZe7e9nOzavEgcqxiGPg=)
                          2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: 8L2oqhkE9V3dGgoWt1rjYG/lQn73+JtiZIyN5u/3OTY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:9e:f2:fb:5f:8c:1f:40:f4:6c:40:01:e6:bf:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
        Validity
            Not Before: Nov 23 07:00:41 2024 GMT
            Not After : Nov 24 07:00:41 2024 GMT
        Subject: CN=d20a061bb52a1c0abb2e16a0574cd9d15a508f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:a2:d2:24:d7:68:6d:7f:79:87:04:f7:b0:
                    e9:95:65:3b:6d:91:ac:6f:1e:62:fc:aa:66:3e:c6:
                    b1:01:ed:cb:7b:90:be:72:d9:4b:21:08:31:df:8b:
                    1c:62:88:b4:12:5c:15:3e:3c:a7:4e:78:c3:75:f4:
                    00:9d:75:f7:c2:93:17:65:3a:71:d9:77:7c:8d:b5:
                    a1:6f:08:8d:a5:f2:b7:89:8d:9d:a5:84:00:75:f0:
                    f3:f6:b0:f4:d5:35:73:43:b9:21:c4:fb:95:e0:33:
                    e9:e9:cf:d2:a8:30:84:8e:39:73:78:5d:d1:7e:bc:
                    7b:68:1f:0e:68:5d:2f:95:a1:0d:45:82:3f:71:62:
                    75:b8:c0:0a:c5:2a:a6:56:62:92:08:f4:62:b9:cf:
                    bf:d9:1d:df:13:bd:2b:9f:9f:9c:70:58:87:67:bf:
                    40:fa:cf:00:07:5c:f3:ee:4f:10:7e:e5:d9:c4:1e:
                    2a:50:6f:83:b2:af:00:3a:ae:63:9c:40:4a:53:28:
                    b5:37:24:60:55:fc:31:0e:cc:54:88:a1:3b:80:ff:
                    ae:c2:2e:4b:e7:58:bd:5d:84:6e:df:08:9f:3d:ac:
                    13:39:c6:74:e1:11:3b:d6:1b:d0:66:20:8e:48:ca:
                    a6:2d:12:57:47:0d:e5:e6:9b:a2:fd:56:5f:5b:2b:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0A:06:1B:B5:2A:1C:0A:BB:2E:16:A0:57:4C:D9:D1:5A:50:8F:47
            X509v3 Authority Key Identifier:
                keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:3d:63:68:33:9a:fc:2a:51:7d:55:bc:34:5f:6a:db:26:
         7f:de:62:52:e7:b0:04:38:99:34:75:e7:d9:f9:fa:5d:21:ba:
         49:89:37:2a:40:09:e6:b8:8c:68:4b:0f:6c:0f:13:57:2e:80:
         f1:a0:73:fe:d8:87:65:50:15:00:fa:b0:88:74:13:77:76:29:
         bb:7e:23:92:9e:e1:77:b0:93:b5:3c:56:e1:e0:16:fd:9b:fa:
         de:54:51:d4:26:c9:a2:33:8b:88:2b:55:03:19:b6:79:aa:c3:
         90:47:c2:07:76:e5:f6:74:91:e6:c0:4f:65:fc:a7:bf:fa:5a:
         06:11:80:ac:e5:ff:bc:45:49:5b:df:48:ef:70:f9:37:7e:3b:
         b9:01:86:6e:e0:65:b7:11:e1:ee:6f:89:d5:4c:de:e4:79:e4:
         26:0a:e6:58:89:97:cd:dd:a0:45:3f:1c:ac:fb:30:ff:67:43:
         aa:3b:10:a5:43:eb:cb:90:b3:ec:12:f7:98:05:cb:05:8d:29:
         42:b1:9b:f8:3e:a3:52:03:5f:ee:18:02:53:ef:d9:48:b4:39:
         74:cc:78:23:8e:82:fc:e7:c1:a7:3d:79:ac:a1:38:bb:56:c4:
         27:08:5d:ba:40:a2:aa:82:30:22:d7:bd:ff:4f:bb:89:6c:ac:
         f0:e9:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:54 2024 by rpki-client on console-fra.rpki-client.org