Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
File:                     PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft (raw, json)
Hash identifier:          LxM9Du/eeL0iyXYIPGZIHnDYHGUYpJxFVsLXj68fkr4=
Subject key identifier:   A2:78:CE:06:4A:EE:0B:30:7C:CC:2B:A8:F7:8C:32:11:C9:98:B3:F5
Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
Certificate issuer:       /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Certificate serial:       01936A7D6CA4E090EC0B3FCCD77F0FDF3607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
Manifest number:          6E
Signing time:             Tue 26 Nov 2024 22:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:24 +0000
Files and hashes:         1: AfZsd2k8vGRpr3wzQK5dzaPSjoM.roa (hash: xItUC/hf7CWR2hF0Nu8PvDLPaN0K3JRSqsyo2Qfw5xU=)
                          2: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl (hash: +6hSBwDHBX22ZiZ/jUiQr5B1zc4jyYKvCejmrhlbU3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:6c:a4:e0:90:ec:0b:3f:cc:d7:7f:0f:df:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
        Validity
            Not Before: Nov 26 22:00:24 2024 GMT
            Not After : Nov 27 22:00:24 2024 GMT
        Subject: CN=a278ce064aee0b307ccc2ba8f78c3211c998b3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c3:03:e0:6e:3b:66:ec:3e:87:82:88:cf:e7:
                    b6:66:c8:4a:fc:b4:82:00:ae:bd:98:33:d7:e8:c3:
                    78:2d:ef:f0:f3:3e:11:d1:cc:7b:8d:7b:9a:ea:52:
                    a2:d7:ef:c4:05:b1:c2:cf:71:82:a6:d6:53:ea:b0:
                    ab:c4:6c:14:30:3b:46:ea:76:14:73:66:10:1e:84:
                    5d:6e:a4:40:11:fc:d8:60:81:a8:91:11:3c:72:9c:
                    42:3a:f0:63:9b:ca:e3:4e:ea:b7:77:c6:14:2e:53:
                    ea:3a:b3:84:a8:7b:17:75:dc:96:58:a3:61:ae:bd:
                    38:e6:88:84:e3:a6:cc:04:94:3c:ec:33:d2:50:94:
                    ce:a7:46:6e:21:3d:c3:2e:56:c3:7c:a3:6c:16:12:
                    32:e6:30:9c:2c:fe:4f:f6:4c:cb:70:68:ce:ed:71:
                    94:11:a5:b2:89:97:48:f0:b3:8c:20:cb:f2:be:e2:
                    51:fa:50:5c:9b:df:85:48:a2:d9:b8:5d:ed:2d:45:
                    0a:ef:b1:4a:0e:2f:cf:db:18:07:65:1f:29:6b:62:
                    51:71:bc:d9:41:1d:9c:bf:aa:43:68:ed:ea:be:68:
                    8f:98:18:d7:01:4a:49:e6:50:6e:eb:89:13:fc:f9:
                    28:1f:13:82:fb:a0:21:48:b0:1c:94:ed:df:66:b4:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:78:CE:06:4A:EE:0B:30:7C:CC:2B:A8:F7:8C:32:11:C9:98:B3:F5
            X509v3 Authority Key Identifier:
                keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:67:29:04:2a:a3:82:f8:16:67:33:02:00:83:57:41:01:fc:
         b2:57:ff:42:c1:7c:57:c3:c7:d3:0b:8f:2e:21:dd:14:0e:2c:
         5d:3f:ca:1b:2f:f3:55:50:be:8c:ff:4d:3f:72:dc:5d:e8:dd:
         22:9e:07:b0:a0:b0:d9:14:e6:99:68:5a:32:4b:a6:70:1b:d1:
         a3:94:de:d7:e6:e7:bb:99:4e:1e:a3:d0:c7:b6:81:12:07:a4:
         8e:ac:0a:22:87:42:80:63:f4:98:6c:c0:28:b8:be:6c:87:2a:
         5f:d4:02:13:f7:cf:e8:2d:50:09:e8:50:6f:f6:9a:49:51:50:
         17:39:6f:a9:03:ac:67:48:59:c8:bd:c5:08:fb:dc:93:f0:75:
         4b:60:2c:97:67:55:a5:05:30:3b:23:21:0f:16:9a:b4:7d:be:
         77:71:c2:5b:69:76:11:18:4e:c9:92:58:0a:86:b7:8f:fa:50:
         9b:4c:bb:50:27:90:85:8d:6b:93:1f:40:a9:8d:36:dd:7b:aa:
         7f:0c:cd:41:ba:b6:99:fc:1f:3c:fc:42:97:12:9a:48:0c:6b:
         1c:4a:14:36:75:29:4b:44:a5:1b:b6:ce:70:22:2e:bc:d3:65:
         b0:98:45:cb:9d:06:b8:d1:fc:28:27:08:32:d2:50:dd:a6:51:
         db:26:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:27 2024 by rpki-client on console-fra.rpki-client.org