Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File:                     PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier:          oj3sNICj5k2d95xDtMm/EyPVq1WhOOa28q8w4FibVhw=
Subject key identifier:   AB:13:67:C3:E3:FB:C5:B2:0D:59:98:4E:7C:79:64:F0:FC:EC:BE:5B
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer:       /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial:       01935688C8C79443BEB08FC4BD72DA755932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:24 +0000
Files and hashes:         1: D31lRcVXyeksHDAC5KKV4q5_fgo.roa (hash: Y2F0jSf6EQ7yrPis6f+mcx+VJt4uxrIzKAiAKqKdHHY=)
                          2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: faIp7da0/Q92otQCRMFiVXQ3HlHYr2NwdVofHR2qVOA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c8:c7:94:43:be:b0:8f:c4:bd:72:da:75:59:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
        Validity
            Not Before: Nov 23 01:00:24 2024 GMT
            Not After : Nov 24 01:00:24 2024 GMT
        Subject: CN=ab1367c3e3fbc5b20d59984e7c7964f0fcecbe5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:57:08:0f:1a:46:5a:40:d7:96:b6:7e:12:
                    70:b1:61:d9:76:ce:57:d9:55:21:20:18:36:56:64:
                    5e:8d:7d:79:53:7d:b3:6f:2b:55:ee:37:36:ee:a7:
                    2f:3a:8a:06:46:1a:75:08:bd:09:35:d0:1a:a6:84:
                    8b:1f:62:17:31:67:06:23:59:d8:9d:cb:84:ed:df:
                    3a:5e:17:7d:23:ff:67:5c:88:08:0d:09:1b:26:63:
                    b3:b4:79:bf:d4:1a:5a:ca:42:1d:da:78:2c:0f:df:
                    ee:b4:86:c2:b8:3d:1b:66:ef:a6:23:82:67:49:57:
                    c4:46:98:a2:70:f8:c2:2a:91:fc:a6:a6:fb:43:4f:
                    62:a3:3c:14:61:50:09:de:7d:b4:52:87:0f:ea:1a:
                    9f:bc:4b:a6:64:c0:e7:0b:7c:b2:2f:17:0b:b0:0c:
                    00:1d:30:77:a4:a4:ec:34:96:67:d1:a9:5f:83:9a:
                    4f:82:2f:2f:82:81:dd:3d:f4:ac:ff:85:4e:fd:ca:
                    e3:e9:51:6f:85:0d:11:00:88:d1:67:4e:c0:13:5e:
                    2c:00:6a:c5:ff:4d:53:1b:cb:c5:28:9f:da:3d:6f:
                    42:24:c9:6e:dd:f6:02:a3:93:02:be:b2:dd:c9:68:
                    71:81:ea:24:d9:1d:ef:46:45:ed:b1:76:f9:d9:86:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:13:67:C3:E3:FB:C5:B2:0D:59:98:4E:7C:79:64:F0:FC:EC:BE:5B
            X509v3 Authority Key Identifier:
                keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9a:25:d6:d4:9f:27:fe:3b:13:1f:1d:02:c9:e6:2e:b2:63:
         df:64:b8:e6:a2:1b:a2:b1:a6:be:fa:68:91:d4:cf:64:79:41:
         a8:af:ba:cd:d3:55:58:2c:97:11:5a:8d:29:4d:e1:b6:37:d8:
         8a:ca:2e:04:a9:92:49:af:73:e9:9e:93:2b:17:32:0d:ec:d1:
         1f:da:7b:92:a0:47:45:e3:ad:d6:f4:cb:1c:5f:8f:5f:b6:e2:
         e3:21:39:41:ab:ba:83:e6:27:9f:2d:03:b8:2c:df:9c:7e:f5:
         c9:7d:80:d2:ae:c6:e4:1c:ef:54:70:e9:11:7e:12:f6:9e:d7:
         bd:e2:21:ae:21:20:eb:96:da:e4:47:26:a3:41:1f:5d:90:5d:
         8d:78:02:d5:aa:14:be:37:91:21:42:cd:84:49:4a:ae:7e:8a:
         1f:18:ec:c1:e2:ed:cb:2d:af:c8:2e:5f:ab:49:16:29:fa:51:
         3a:50:e5:88:d4:07:88:b1:dd:30:02:3e:b5:f3:3a:4a:e6:b0:
         cd:ab:96:64:10:a3:d6:00:45:2d:e0:33:3c:1e:d5:33:f6:ee:
         50:31:d1:10:13:8b:8e:04:2a:24:c1:83:36:ff:9a:28:64:28:
         58:25:3d:c2:af:f9:23:5b:87:15:14:ff:e3:08:93:87:c3:b5:
         df:8a:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:50 2024 by rpki-client on console-ams.rpki-client.org