Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File:                     PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier:          oAU+VSBhw7u5Tt0J8Zu3SRR3DsBz1qnFU/2uS+z7NcM=
Subject key identifier:   F6:3F:F4:AB:C8:1E:23:CB:41:27:9E:AB:88:DB:7E:87:52:35:2A:17
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer:       /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial:       0193591C746A062129F98561444D035CD4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number:          106F
Signing time:             Sat 23 Nov 2024 13:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:57 +0000
Files and hashes:         1: 7uJFkbWsJp74FyRwpuCZyfRGvPg.roa (hash: ewPs1qX7KL0hwLYDLmn46HNNpP8Ms5qU4eJVsQo2Ejs=)
                          2: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: GQCIAkM7I0KfHkAoi6lK2hs/3WzsbEutfSnmZzBpJOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:74:6a:06:21:29:f9:85:61:44:4d:03:5c:d4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
        Validity
            Not Before: Nov 23 13:00:57 2024 GMT
            Not After : Nov 24 13:00:57 2024 GMT
        Subject: CN=f63ff4abc81e23cb41279eab88db7e8752352a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:65:ad:90:24:80:63:24:80:13:fb:ab:b2:
                    74:17:be:ec:b5:b4:95:08:4f:8d:dc:f3:d3:28:da:
                    b2:92:95:bc:2e:72:75:63:bf:47:2c:05:f0:48:84:
                    0a:61:85:96:57:2d:8a:60:fc:82:10:c3:7c:a5:fa:
                    13:0f:e0:e1:d6:8f:db:7e:3f:f4:fc:fa:91:c6:63:
                    72:0b:32:06:14:15:fa:54:a4:61:de:0e:ba:7c:9e:
                    4c:cf:2f:0b:6e:56:28:71:00:8b:08:8a:05:b4:05:
                    3d:98:a2:93:7a:41:b5:d2:86:51:d4:60:03:c7:22:
                    5f:10:74:3a:28:bc:04:00:2f:ed:66:a5:6b:17:8e:
                    58:2e:a4:b6:ed:dc:c0:6b:c3:ee:be:7e:2c:ef:91:
                    80:fa:36:3f:64:52:b4:63:71:33:df:c2:6e:1b:a4:
                    f3:4e:5e:51:71:5a:28:7e:1c:66:0e:dc:a2:6a:7e:
                    7a:18:bd:40:93:30:78:8c:49:fc:4c:06:cf:4d:9d:
                    94:a9:47:03:da:83:cb:8b:dc:1d:25:b6:42:1f:ac:
                    e1:2f:76:65:71:ca:f3:77:d2:a1:57:b5:61:80:20:
                    df:b5:12:37:15:1e:47:1b:8a:48:48:af:e1:b1:a5:
                    4d:0b:fb:df:b2:92:0c:3a:4b:bf:53:52:20:98:67:
                    0d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:F4:AB:C8:1E:23:CB:41:27:9E:AB:88:DB:7E:87:52:35:2A:17
            X509v3 Authority Key Identifier:
                keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:d4:00:ba:eb:2e:75:42:a2:33:57:8a:60:ca:c7:5a:41:
         94:69:31:9d:af:f4:16:66:0a:b5:61:50:dc:0d:4f:30:29:e7:
         fa:5a:0c:e4:85:4e:c5:6c:ea:b5:68:a8:2e:7e:ca:dd:b9:31:
         5b:31:d3:33:d8:48:4e:ad:14:15:f2:94:fe:67:d7:8c:90:77:
         36:82:07:b6:e0:65:b1:09:fd:de:40:07:52:28:f0:07:aa:6f:
         11:03:1c:ac:73:19:4a:56:6c:bd:40:9f:c4:94:01:e9:cb:d5:
         1f:b5:db:5f:f8:f0:02:e3:36:32:6d:28:d8:56:42:79:dc:70:
         a7:d3:4a:e4:09:13:d5:a1:15:cb:d8:e0:85:b9:bc:12:5d:b5:
         58:9f:79:ca:74:7b:53:78:9a:75:c9:fa:fd:ab:01:16:78:49:
         4b:ad:8b:be:86:92:dd:52:bd:ef:db:53:48:bf:11:50:86:b7:
         09:f1:78:4d:0e:22:ef:b0:a6:97:9b:49:ab:ae:ed:6c:d3:5a:
         51:74:1b:bc:27:e7:d4:5d:74:0c:33:27:0f:14:b4:4b:8b:6f:
         15:60:20:68:a6:08:47:4f:b7:d2:06:ba:fc:ca:c5:6b:f1:00:
         9c:33:36:ca:c4:b8:ac:67:15:d1:51:32:6a:3a:83:25:f1:fc:
         75:8f:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:27:07 2024 by rpki-client on console-fra.rpki-client.org