Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File:                     pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier:          PEz9nwIa7ljzM2/GTV4eR5I4S89Mtxmgd8UH5hvZmcY=
Subject key identifier:   E5:5A:C8:1B:9C:55:F5:47:16:64:17:00:1E:AB:0E:1E:4F:EF:A6:3E
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer:       /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial:       0191FA7E37F46B3D96F0B1EF79DD9D74937D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number:          EA
Signing time:             Mon 16 Sep 2024 11:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 11:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 11:01:01 +0000
Files and hashes:         1: NCJUP8O_xyOPkKoDe_mkcxK3x4Y.roa (hash: 3b3raGtYiR8PB8Rd2qNlYJH9vi1CZU5uRGlh6lklBFY=)
                          2: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: g7O4G79SG+S/PLOZbCr/C+tkDBWebsHyGux9dpEt0Vo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:37:f4:6b:3d:96:f0:b1:ef:79:dd:9d:74:93:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
        Validity
            Not Before: Sep 16 11:01:01 2024 GMT
            Not After : Sep 17 11:01:01 2024 GMT
        Subject: CN=e55ac81b9c55f547166417001eab0e1e4fefa63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:87:46:5f:48:7f:9f:06:54:f7:10:e8:db:
                    52:29:b9:de:61:4b:f2:cf:88:35:d1:96:bf:8e:27:
                    54:e0:63:b5:69:53:85:47:ff:e8:08:ea:9f:0c:e3:
                    ad:92:51:22:84:bb:5f:67:44:ba:57:37:7c:de:78:
                    41:71:0d:ee:17:8c:ec:4f:cc:f1:e2:2e:3b:84:5f:
                    db:a8:45:e7:7f:09:31:bf:bf:62:4d:90:36:da:fc:
                    59:e0:d8:8e:66:10:bd:9c:e4:11:52:97:dc:72:9f:
                    46:f1:23:b4:95:56:50:0d:ca:56:ce:1b:64:8a:9b:
                    1a:64:78:93:2e:02:84:0f:70:b4:37:91:f7:64:1f:
                    37:24:28:a5:de:08:ce:0c:d4:4d:73:55:f4:9b:56:
                    49:cf:f3:97:0f:0f:cd:b0:8a:44:04:7d:9d:2f:03:
                    79:0f:a0:69:3b:98:b9:60:57:08:46:2d:a8:95:e7:
                    a2:a5:1c:11:2f:5e:28:e7:79:92:b9:a6:3e:f3:66:
                    64:e3:41:d6:fd:ad:01:09:25:8c:03:77:cc:8a:cb:
                    d4:08:16:2f:39:81:76:46:ae:54:3d:b1:a0:7c:7e:
                    26:23:bc:d3:5c:1c:48:fa:f6:59:37:14:67:41:fa:
                    18:7d:2a:a3:5a:0d:74:45:e5:db:06:b4:30:d6:6a:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5A:C8:1B:9C:55:F5:47:16:64:17:00:1E:AB:0E:1E:4F:EF:A6:3E
            X509v3 Authority Key Identifier:
                keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:9f:aa:b0:80:0f:87:e5:94:c2:a5:7f:49:8e:5f:84:27:
         23:7c:be:16:f2:a5:07:1f:c4:37:22:fb:67:e1:82:a6:74:ad:
         69:d2:48:22:38:ca:b3:d5:5a:bb:66:b5:08:10:c8:08:f5:f6:
         da:ed:1a:24:1b:92:78:00:97:80:77:ef:f0:51:0e:8f:a5:a0:
         2d:8c:ca:2b:02:5b:a8:42:df:86:b9:09:c9:44:3e:57:78:27:
         60:3a:00:62:84:94:92:29:1e:76:54:ba:c3:e3:8a:b3:29:97:
         8f:8a:b5:1b:aa:fc:f7:6b:cf:61:f8:a9:bd:cb:ea:b4:17:ce:
         c9:98:64:40:7e:22:f6:a2:34:74:1e:a5:14:aa:66:04:1b:0b:
         8f:19:4d:5a:87:2f:e4:4b:e9:6b:22:bb:8b:e8:8f:80:4b:41:
         c0:20:b0:15:65:c0:ed:d0:ed:1b:bc:f3:16:f6:f0:b6:d3:c1:
         5b:39:05:f3:ce:a1:79:e8:32:7d:89:c4:df:ee:be:cc:64:0f:
         67:2a:d5:b8:7c:bd:66:6a:00:29:d4:19:a1:69:a3:b2:bf:37:
         2e:0a:39:5a:93:1f:a2:1c:91:1b:07:fd:77:1d:72:1f:59:72:
         cf:5c:16:dd:0d:23:f2:f8:d7:ee:36:3b:70:e9:f3:ec:98:31:
         c9:ee:b9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:33:56 2024 by rpki-client on console-ams.rpki-client.org