Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File:                     pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier:          gDAxRjktluTtvnWsnmQy/Q3qDHOQ/Td8tBiv2nrqr30=
Subject key identifier:   2E:FF:A5:0C:FC:6E:0D:AA:ED:85:9B:D6:73:64:EB:A3:88:8E:4D:05
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer:       /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial:       019356F698637A6D1CD1ECB0A08DECDBB15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number:          0237
Signing time:             Sat 23 Nov 2024 03:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:21 +0000
Files and hashes:         1: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: QcV9IvVJKC2HIMa9E1ueEQnR5SkIp22W4g1C1r26fPg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:98:63:7a:6d:1c:d1:ec:b0:a0:8d:ec:db:b1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
        Validity
            Not Before: Nov 23 03:00:21 2024 GMT
            Not After : Nov 24 03:00:21 2024 GMT
        Subject: CN=2effa50cfc6e0daaed859bd67364eba3888e4d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:81:70:f2:f3:99:7f:56:a6:f0:80:4e:0f:
                    61:33:fd:31:94:c5:06:59:40:3c:d1:cf:f2:a9:33:
                    1e:3b:37:83:67:f3:81:bd:13:f4:c0:ba:56:6a:6a:
                    ae:24:8f:1d:71:81:45:d7:93:1b:f2:e8:d2:b5:aa:
                    d2:4b:72:d6:5f:8c:40:47:86:56:ab:ba:ae:72:d7:
                    2d:ef:c0:21:9e:01:d5:02:0b:67:5f:c2:62:22:a3:
                    05:a4:4b:69:dc:dc:58:96:4e:15:8f:62:e5:34:20:
                    fa:c9:25:0b:05:cf:26:22:42:9a:a9:8e:da:b5:b8:
                    30:05:84:d6:8f:a4:c4:83:5f:4e:a6:08:67:e5:86:
                    04:1d:b8:99:fe:7e:41:4f:6b:9c:5f:fb:76:c6:b6:
                    33:1f:9c:7f:10:a6:bf:3b:d7:3b:44:84:11:0d:ce:
                    6f:eb:3e:22:78:40:76:eb:01:a5:2e:c6:21:f4:2f:
                    6f:38:a2:cc:bc:6f:58:20:e3:97:26:4d:b4:85:af:
                    a1:8f:12:5c:1f:85:35:22:7d:db:4c:4e:11:09:7e:
                    11:1e:98:fc:84:d2:32:1a:b6:2e:a8:1b:a3:35:6d:
                    66:22:68:be:17:c7:10:8f:2f:1d:a1:70:af:9a:8d:
                    2c:49:e5:e1:81:a2:c1:4a:57:3a:55:44:df:26:be:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FF:A5:0C:FC:6E:0D:AA:ED:85:9B:D6:73:64:EB:A3:88:8E:4D:05
            X509v3 Authority Key Identifier:
                keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:3e:f4:fb:3e:dd:ba:2d:9f:32:78:21:96:20:a8:50:54:
         6b:92:b3:ce:01:1e:0c:3a:99:2b:4e:11:8a:40:9e:53:24:65:
         d2:5b:88:be:06:2d:45:ff:8e:c6:69:82:8d:e3:c6:ea:ac:a5:
         5d:65:87:dd:d3:4f:dd:56:f0:fc:ed:60:32:37:0f:97:30:e7:
         0f:42:4f:8e:d3:0c:65:95:ee:13:a2:1e:42:30:ac:f4:8a:a5:
         09:f8:69:c1:84:64:65:c7:a9:5b:66:13:60:8b:c7:ab:84:f8:
         cd:97:73:2d:04:21:e2:61:85:8c:6e:76:32:bb:ac:58:97:f4:
         fb:f2:75:c9:d5:a3:12:46:38:9e:c1:50:82:28:2b:cb:15:9c:
         a5:bb:d1:b9:58:f6:a4:fb:75:86:1f:7f:a2:6b:36:02:69:a4:
         32:b2:65:9f:82:ca:2d:d6:be:88:88:00:b7:14:04:e1:47:41:
         43:ba:ac:c6:c2:32:2b:6e:3e:2a:75:80:b9:e8:31:1d:89:b6:
         c1:c2:54:77:cc:de:63:4f:01:10:4b:7b:fc:2c:f1:a2:75:e1:
         c8:75:2f:d1:0d:84:77:4a:f1:92:6d:b2:29:ad:98:e8:f4:27:
         b5:0c:39:66:9a:8d:83:b8:48:24:03:cd:d2:0a:ed:73:94:42:
         3f:d0:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:48 2024 by rpki-client on console-ams.rpki-client.org