Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File:                     pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier:          FJFe7e1BP0DeYOfZrhnvPL/e9SwSiyDo71Q+HMTfYY0=
Subject key identifier:   78:71:AF:C6:C4:FE:4B:6B:A5:6C:8C:7C:E6:7C:0A:6D:D3:7F:B1:6F
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer:       /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial:       019358791F897BA03C9494CBA54AFF7D483C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 10:02:33 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:33 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:33 +0000
Files and hashes:         1: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: WRX8vddzEC0ZN7KXKMZgepDE2HRyY2I/SESUFwGP83c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:1f:89:7b:a0:3c:94:94:cb:a5:4a:ff:7d:48:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
        Validity
            Not Before: Nov 23 10:02:33 2024 GMT
            Not After : Nov 24 10:02:33 2024 GMT
        Subject: CN=7871afc6c4fe4b6ba56c8c7ce67c0a6dd37fb16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a7:7a:7c:3a:6d:26:f9:33:2a:9e:2b:d9:60:
                    7c:d0:f4:90:63:06:fd:c0:1a:10:f2:32:34:d7:33:
                    1f:d0:ff:77:60:90:5f:c2:80:04:ed:48:f7:95:ff:
                    5f:8c:bc:64:8b:7f:43:cb:86:46:46:f1:39:71:7b:
                    49:1b:c4:d4:e8:2e:a3:e6:22:12:57:99:b7:28:ec:
                    ef:f5:d1:71:36:c8:a1:1e:4d:68:22:43:ea:3b:fd:
                    92:97:2d:a4:5f:7f:b9:11:41:61:c8:28:da:e6:42:
                    97:af:bd:f7:7f:b5:a1:9b:af:84:c6:c0:d7:28:52:
                    06:de:46:ef:24:61:61:01:22:28:30:2d:b2:60:39:
                    03:23:0c:45:12:bc:99:62:08:38:19:cd:17:cf:47:
                    41:b8:12:f3:20:90:58:81:dd:57:90:dc:57:fc:db:
                    b8:48:04:be:a8:71:19:33:01:22:00:e0:63:99:36:
                    15:0d:5f:20:ce:b9:8b:4e:70:73:04:13:73:27:f6:
                    46:f3:fa:5f:ba:28:cb:0e:00:92:f8:05:7b:19:b9:
                    ea:d0:a0:98:5a:ce:65:f0:00:b7:c8:33:ba:46:e2:
                    d5:92:36:d6:2d:2c:99:ff:23:af:b9:50:e5:6e:57:
                    30:91:a0:a5:4b:32:fd:96:83:f2:52:ff:29:30:58:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:71:AF:C6:C4:FE:4B:6B:A5:6C:8C:7C:E6:7C:0A:6D:D3:7F:B1:6F
            X509v3 Authority Key Identifier:
                keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:af:7c:22:eb:63:d0:50:b9:94:8c:97:59:68:db:77:b3:e3:
         fe:1f:33:3f:da:05:d4:8e:d4:13:20:18:c5:2d:46:60:48:55:
         84:01:ce:70:a2:22:1d:87:1d:58:76:ef:c1:37:69:cf:d6:86:
         ba:8e:dd:d4:c3:e6:9c:90:bd:d5:15:d5:ef:f3:9c:58:6d:72:
         ef:80:e0:4a:a2:3e:f4:77:40:53:04:df:3f:44:a6:f8:da:84:
         16:70:49:d8:32:10:ac:5c:0f:4a:c5:ed:0f:82:18:e7:96:35:
         9d:53:52:8e:78:57:53:14:ff:8d:9b:0f:c6:79:b6:83:d8:dc:
         33:85:d4:c8:88:91:92:94:b5:a4:51:83:e8:7e:3f:86:ff:14:
         ec:49:d7:7d:af:2f:de:10:eb:9e:2f:11:b7:fc:27:d6:34:bd:
         1c:7e:2a:5d:bf:86:ff:d0:a0:4b:f6:c9:2b:0c:bb:52:cb:ac:
         59:02:e0:3a:24:75:67:f5:1b:8f:ad:a8:1d:3d:ec:12:80:b3:
         1c:86:84:35:25:16:e5:2f:50:90:ce:25:9e:83:e6:59:74:64:
         bf:e9:30:24:d2:1e:51:44:53:3f:1c:02:7b:d4:0d:11:1f:f4:
         a0:5c:db:61:f1:ca:aa:ff:34:81:f9:2a:ec:65:9f:da:fc:60:
         0e:46:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:47 2024 by rpki-client on console-ams.rpki-client.org