Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File:                     PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier:          Mi3z5Auml+fqrOYz7L1JFLwwIN16He3XaqSD4UocIUg=
Subject key identifier:   47:EA:AA:7B:DD:A6:10:09:41:38:40:37:BB:F4:8D:02:D1:63:8F:EC
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer:       /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial:       01923AA8FEBE356E47CD6562D09933D7A39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 22:03:26 +0000
Manifest this update:     Sat 28 Sep 2024 22:03:26 +0000
Manifest next update:     Sun 29 Sep 2024 22:03:26 +0000
Files and hashes:         1: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: BMOQ6GrYCWhU/M1f3DJBEceky90qJ2KZOPAXPAPuJ60=)
                          2: XonliaPqS2TdzpdK8pa2yiXlHdo.roa (hash: EAmU4Cxo5tA71r4NNxfSpzzPUsool+5SXEqx9HZr5p8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a8:fe:be:35:6e:47:cd:65:62:d0:99:33:d7:a3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
        Validity
            Not Before: Sep 28 22:03:26 2024 GMT
            Not After : Sep 29 22:03:26 2024 GMT
        Subject: CN=47eaaa7bdda6100941384037bbf48d02d1638fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:f2:a6:5b:82:63:3c:8c:4f:58:51:fc:10:
                    d0:d7:6c:54:8e:00:50:a1:84:ef:df:6a:19:42:90:
                    18:90:26:c1:08:5a:f2:21:b8:ec:89:15:f1:29:c7:
                    e5:e9:ff:68:b0:fc:ee:e0:3d:68:69:d2:ca:21:02:
                    c5:0b:be:24:97:7f:1b:01:b8:2f:ac:d0:48:77:4d:
                    0f:71:a0:69:6b:84:cb:53:50:65:4c:55:6a:de:d7:
                    c0:c3:c9:4a:55:71:01:8b:c1:69:66:71:cf:76:ff:
                    4f:67:ad:e0:56:1f:5a:52:1f:32:e3:19:9c:e0:b1:
                    78:f2:8a:0b:f2:c0:c0:19:3c:44:df:a1:56:a5:88:
                    22:bb:cd:35:84:7f:0a:c6:29:86:b9:4d:71:a2:3a:
                    cc:6f:6b:45:49:bd:08:07:93:3b:93:24:fc:1b:2d:
                    1d:82:f6:93:68:71:1d:f3:77:4d:18:79:55:4d:ce:
                    f2:49:a9:46:64:89:05:63:7b:21:85:05:6a:96:ce:
                    02:a2:a2:5c:cd:22:5b:9c:09:6f:71:74:d0:93:f8:
                    0d:c9:25:db:30:37:66:93:a8:17:b5:19:31:8c:d3:
                    ab:66:9c:ce:89:d6:37:90:17:b4:ab:c6:a8:d4:b6:
                    47:b3:4b:a7:cb:e2:ef:73:dc:56:d0:17:b0:af:1f:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EA:AA:7B:DD:A6:10:09:41:38:40:37:BB:F4:8D:02:D1:63:8F:EC
            X509v3 Authority Key Identifier:
                keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f9:2f:49:bc:12:b4:f8:2d:1a:7a:40:6f:49:37:2a:07:ae:
         ef:b9:c7:f1:cf:3b:01:60:f4:92:4e:c3:d5:4b:d0:d8:12:6a:
         58:ea:89:42:35:78:07:a3:97:70:86:51:88:0f:ca:6a:82:8f:
         5d:38:7d:c8:c1:9f:78:16:c1:e6:be:00:a3:51:f6:5c:37:07:
         aa:9b:37:3b:9b:5d:ee:89:ae:0e:70:1f:73:d5:d7:60:06:4e:
         b5:a5:b8:12:9e:19:1b:1f:c1:df:96:10:e1:76:a9:94:09:eb:
         e8:6e:aa:e5:99:3b:80:db:56:fb:e2:01:07:7d:f7:6d:2d:ff:
         9a:cd:41:5d:a7:d5:db:77:05:40:be:8d:73:83:e0:47:95:b6:
         c7:5b:e1:39:e1:9f:02:09:08:1c:09:69:e8:fc:79:1b:79:40:
         53:4b:2d:81:ab:e4:cd:be:7a:55:e5:71:29:32:bf:41:89:e0:
         b7:55:59:50:86:09:d4:d5:e5:71:8b:3c:a3:19:f1:39:84:27:
         f1:df:66:3c:74:46:ce:4d:91:c7:40:40:33:d6:d1:2e:dd:cc:
         50:77:ff:47:f2:44:6a:05:ee:8f:67:c1:da:94:c3:2a:f2:e1:
         33:d9:8d:f2:c8:33:c5:38:14:28:6b:95:2c:ef:0e:99:48:27:
         04:b7:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:07:53 2024 by rpki-client on console-fra.rpki-client.org