Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft
File:                     PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft (raw, json)
Hash identifier:          l6moD3c8C8uem4c1neoH4YIbHCq3p4rhS75+uSkRqFQ=
Subject key identifier:   79:0A:0C:E4:3D:5C:4C:BE:FE:8B:DB:3E:44:6E:53:34:63:D0:79:29
Authority key identifier: 3F:31:95:F4:70:84:C8:B0:C6:70:D0:3F:7E:E7:B5:16:CF:80:4C:5C
Certificate issuer:       /CN=3f3195f47084c8b0c670d03f7ee7b516cf804c5c
Certificate serial:       018F87495F587333B3A630E7CCCEECCF102F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PzGV9HCEyLDGcNA_fue1Fs-ATFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft
Manifest number:          0844
Signing time:             Fri 17 May 2024 16:01:23 +0000
Manifest this update:     Fri 17 May 2024 16:01:23 +0000
Manifest next update:     Sat 18 May 2024 16:01:23 +0000
Files and hashes:         1: PzGV9HCEyLDGcNA_fue1Fs-ATFw.crl (hash: vDMXNCCQTMyKAyKApcSLkjySm/bsynD1c2NtL6DxbFM=)
                          2: do23iDhWHm6TzjxuEzyh_jCkmgU.roa (hash: /14dmgoeH4ovCSZ1L4wtgr9wW5fF/RCSZtlfNlv8LJk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PzGV9HCEyLDGcNA_fue1Fs-ATFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5f:58:73:33:b3:a6:30:e7:cc:ce:ec:cf:10:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3195f47084c8b0c670d03f7ee7b516cf804c5c
        Validity
            Not Before: May 17 16:01:23 2024 GMT
            Not After : May 18 16:01:23 2024 GMT
        Subject: CN=790a0ce43d5c4cbefe8bdb3e446e533463d07929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:fc:a9:2d:cf:1c:d4:8c:d9:f5:89:f6:2d:
                    75:5b:c5:ee:f8:0b:02:89:b2:34:de:53:c1:ce:f6:
                    ae:25:31:07:69:12:fa:17:56:38:fc:ec:d8:5d:5e:
                    d1:2d:03:3b:47:1c:fe:84:ab:d3:a9:5c:d7:70:65:
                    da:13:68:04:10:8c:a5:08:fa:5b:1b:e2:ac:26:84:
                    52:c0:41:94:e7:db:62:b3:2b:27:45:6c:97:e2:c1:
                    aa:bb:9e:00:36:e6:0e:e4:f2:51:0d:99:db:7e:d8:
                    87:db:ad:43:2b:ab:5d:de:e5:e0:8f:b5:d2:e1:b5:
                    ea:3f:08:18:49:a5:d8:93:36:4c:1f:90:e7:e4:c7:
                    30:0f:b9:4f:63:fc:63:59:19:5e:9b:d8:6b:16:0e:
                    3f:28:bd:94:90:38:95:2b:ba:1d:64:40:ad:4b:fa:
                    bd:42:00:2f:5a:f6:ec:b6:80:06:17:24:01:e2:7e:
                    6b:b2:7e:8d:10:8e:8c:53:6c:7a:90:b2:4c:a5:49:
                    91:b9:9d:80:76:ad:6e:65:a9:00:5f:d1:dd:db:6c:
                    78:be:1c:1d:6a:85:ab:fa:cd:fa:93:df:af:fb:b6:
                    00:a3:55:fe:72:c8:18:ce:53:4a:72:2e:8d:8b:fb:
                    70:fb:f6:53:16:f4:e6:e6:b8:58:f8:5b:fe:d0:38:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0A:0C:E4:3D:5C:4C:BE:FE:8B:DB:3E:44:6E:53:34:63:D0:79:29
            X509v3 Authority Key Identifier:
                keyid:3F:31:95:F4:70:84:C8:B0:C6:70:D0:3F:7E:E7:B5:16:CF:80:4C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzGV9HCEyLDGcNA_fue1Fs-ATFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b9:3a:3f:e6:ce:c2:64:2f:f6:ec:82:89:bb:be:3f:2c:1f:
         80:d6:54:70:ee:60:66:84:f9:9f:a9:e8:22:cf:66:af:a2:3c:
         b6:2e:6b:ea:f1:ac:ec:49:ec:f5:b1:0a:a6:49:3a:10:f1:ed:
         44:af:3b:85:5c:59:d1:c5:df:a6:95:02:e9:29:11:d8:9e:aa:
         89:87:4b:1f:95:97:d9:19:55:3d:64:50:de:2c:aa:6f:e3:1f:
         1a:1c:50:bf:b4:db:6c:f1:37:61:1b:55:0e:44:1f:2d:1d:98:
         5d:bb:3b:24:ef:7e:85:cd:91:cc:06:4d:24:0b:8f:1c:9f:67:
         27:52:f5:d7:f3:fc:bd:95:a4:c5:9f:5f:56:97:f5:5e:70:5a:
         d5:3e:a2:f4:47:67:e4:a0:8c:5f:57:58:27:dc:d1:6f:b5:27:
         e8:ae:1d:2c:b0:7c:06:f3:14:39:c5:4a:15:29:27:cb:47:bd:
         7d:ab:a4:1a:52:96:d4:d4:a0:cf:8c:db:98:0a:2e:c8:a1:a7:
         5c:04:fd:ef:dd:cc:5d:d3:76:54:a7:e6:93:d1:6f:29:88:3e:
         c2:01:b8:5b:a7:0c:6c:03:92:ae:bf:6c:2c:6d:fa:ce:62:bb:
         e3:5b:34:a7:85:ce:11:43:15:a6:14:a8:92:e8:3d:0a:34:5c:
         51:53:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:44 2024 by rpki-client on console-fra.rpki-client.org