Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
File:                     PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft (raw, json)
Hash identifier:          Pmkh4muJFf9cXfC1yE/85vxJKGQmrBqtxFWYYhf5LkE=
Subject key identifier:   F8:9E:92:B8:91:DC:B4:75:D0:E7:39:A7:8B:A0:CC:49:F7:F6:FC:C0
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Certificate issuer:       /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial:       0190332BC591B710CD9C74889304B8AA5F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
Manifest number:          0A57
Signing time:             Thu 20 Jun 2024 01:03:44 +0000
Manifest this update:     Thu 20 Jun 2024 01:03:44 +0000
Manifest next update:     Fri 21 Jun 2024 01:03:44 +0000
Files and hashes:         1: 9z515J3w1VsfvbZTZ8W24IsAto8.roa (hash: u4ojrMBCTHwzQQAWw7R9HEAZo1Ux4KH83qShsy/IGLg=)
                          2: PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl (hash: MFcz82L4gT3eVQ5Jm8vpzP+GI1DhQdhYiDWM08egQ18=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 01:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:2b:c5:91:b7:10:cd:9c:74:88:93:04:b8:aa:5f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
        Validity
            Not Before: Jun 20 01:03:44 2024 GMT
            Not After : Jun 21 01:03:44 2024 GMT
        Subject: CN=f89e92b891dcb475d0e739a78ba0cc49f7f6fcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:61:63:8f:24:6a:0e:04:50:45:b8:54:b4:
                    0f:f1:b0:2f:dc:6a:db:11:c4:a9:1e:ed:3f:96:59:
                    3e:37:8f:3b:c3:0d:c0:b0:b1:d8:ea:94:14:d3:d5:
                    a9:b0:6d:f9:74:2e:01:38:af:58:6e:40:56:59:3a:
                    d7:e9:37:63:ff:42:db:ff:49:ff:32:1d:09:03:9f:
                    de:4b:32:77:ca:ab:cc:1f:df:b2:17:78:f5:bf:39:
                    d2:23:c1:8e:ea:0f:bf:fe:53:1a:eb:47:9c:7c:9c:
                    f6:a2:42:97:04:f4:97:43:a0:e6:94:ac:a3:48:d3:
                    36:6e:af:18:4c:9f:d6:ca:ac:38:8d:d0:ed:92:09:
                    0f:8f:4c:d4:06:95:1c:af:3b:d3:8f:25:a6:08:6c:
                    7e:75:4c:d1:e3:24:65:0f:1e:b4:11:fb:06:d3:08:
                    b3:5f:da:37:ba:e2:2a:f8:83:4a:a4:4f:9f:45:41:
                    fb:3c:32:9c:e9:38:a7:6b:2b:d8:a8:e2:b6:a4:e4:
                    03:3b:05:e8:d4:e2:4c:b6:9f:89:0e:66:c4:e3:41:
                    8b:c9:c9:43:4e:d6:bf:d3:a3:bc:2b:42:1c:f4:3e:
                    4d:17:63:fa:e0:04:96:ac:96:39:d9:8e:56:57:bd:
                    fc:9e:a3:11:f3:9c:da:a7:c0:c8:37:33:1a:b9:f0:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9E:92:B8:91:DC:B4:75:D0:E7:39:A7:8B:A0:CC:49:F7:F6:FC:C0
            X509v3 Authority Key Identifier:
                keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:ed:1e:25:47:f8:e2:2a:53:b5:53:30:fe:c9:a0:90:64:
         6e:8e:70:e2:d7:f9:18:cf:cb:30:d8:c5:5d:8d:36:aa:0c:3b:
         c7:d5:72:96:0f:1f:6e:ba:01:3f:fe:86:33:9c:7c:29:64:d5:
         b9:e4:2b:80:62:c6:ee:2e:67:e0:51:e6:27:fa:1f:77:95:4c:
         41:81:74:2e:4e:19:9f:c4:7a:fb:6c:ce:8e:d2:a5:cb:55:86:
         aa:3a:0f:ce:4c:65:f2:80:c8:28:43:b4:3a:69:d8:7d:80:ac:
         90:ec:a4:9c:40:36:06:97:e7:d6:af:0c:5c:2b:6a:15:c1:bc:
         b4:fa:a0:0e:09:fc:8d:6a:71:b0:12:63:fe:e7:11:4b:0c:28:
         b5:9a:a5:22:b7:a1:e3:67:4c:1a:1d:e3:78:7b:10:51:9d:00:
         a9:58:3b:7c:f3:6a:57:d5:75:49:30:b8:af:d5:5e:ac:6a:c7:
         28:3a:d3:5c:ff:ac:21:20:1b:5d:b3:c4:94:45:52:1b:c5:73:
         0c:65:d4:c3:34:7e:ef:7a:56:d4:22:33:61:34:d1:95:fb:6d:
         6a:22:7a:c1:48:9a:29:26:98:27:9c:73:48:70:dd:98:63:26:
         e1:9d:88:0f:ef:f0:da:05:1d:8c:fb:07:f3:34:d1:8a:9d:2e:
         e3:08:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:58:38 2024 by rpki-client on console-fra.rpki-client.org