Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft
File:                     34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft (raw, json)
Hash identifier:          5nnH2hUVysHIgxOv0ei/pU5/CwRk6Ixae8O9i+qzZfU=
Subject key identifier:   D4:89:E6:E6:93:B9:AA:FB:19:27:20:BD:89:94:F8:67:C7:3B:FA:93
Authority key identifier: DF:83:CC:17:F2:6B:C6:A9:7C:44:D8:A2:43:6A:95:C7:2A:94:BF:F1
Certificate issuer:       /CN=df83cc17f26bc6a97c44d8a2436a95c72a94bff1
Certificate serial:       018F8F03252B99C6B761BF772FAD526A2ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft
Manifest number:          117D
Signing time:             Sun 19 May 2024 04:01:38 +0000
Manifest this update:     Sun 19 May 2024 04:01:38 +0000
Manifest next update:     Mon 20 May 2024 04:01:38 +0000
Files and hashes:         1: 34PMF_Jrxql8RNiiQ2qVxyqUv_E.crl (hash: 9mci6tYSAPsggqe/lvmRUaZkxOxyJPSE37HuJdmS4Kw=)
                          2: sMoFZ_MXmyugpJ3C5fgHUFZTZ2g.roa (hash: mqMv6famRSZi5kLhp/1qZg4BKRhemDd7fsHQM20c4+g=)
                          3: z2WXrPGFkHSKf2FlhNazZDs_iMQ.roa (hash: 3QipBrY3+2eVHccGm6LaPn9CaSE+gBwHKvE9jYpSROo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:03:25:2b:99:c6:b7:61:bf:77:2f:ad:52:6a:2e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df83cc17f26bc6a97c44d8a2436a95c72a94bff1
        Validity
            Not Before: May 19 04:01:38 2024 GMT
            Not After : May 20 04:01:38 2024 GMT
        Subject: CN=d489e6e693b9aafb192720bd8994f867c73bfa93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:31:f3:88:35:c0:3c:64:f7:3b:bf:8b:86:
                    fb:e9:bb:a4:fe:c0:0a:0b:4a:05:b7:e7:27:8b:75:
                    ba:51:da:4a:8e:ec:17:e8:36:52:6b:1e:46:25:c3:
                    c7:74:4d:54:a9:93:5e:11:c5:37:2f:e5:1e:ab:24:
                    a6:23:9a:1f:9a:0f:6f:97:45:f3:92:52:be:df:79:
                    81:4b:22:c1:b1:11:1c:8b:9c:cd:e1:59:87:ef:1c:
                    b3:42:8d:a0:bf:69:ec:af:f8:3c:52:a1:9c:2a:1d:
                    f2:c6:04:1d:d8:92:db:ca:c7:6b:61:8e:0b:2e:9e:
                    93:aa:f0:2a:f9:40:0a:36:ca:ae:f2:98:5b:c7:dd:
                    4c:ec:25:5b:e0:26:98:16:12:72:79:d4:8b:31:29:
                    88:53:d8:ed:30:99:87:c2:25:f6:c5:55:70:0b:18:
                    dc:e1:df:09:48:b2:c5:23:75:81:d0:66:c2:2e:6c:
                    cc:f2:f4:44:27:ad:b9:1e:fb:9b:ce:5c:4b:41:52:
                    48:2d:66:d6:4a:a8:c9:52:ff:63:3e:df:48:a5:52:
                    b4:c8:a0:2e:05:26:d4:59:34:17:ab:60:83:e0:3c:
                    a1:5a:62:cd:a8:1a:f3:d9:13:0e:c7:96:0f:88:22:
                    8d:20:3f:7b:b2:7c:45:80:05:12:2f:c7:41:1c:00:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:89:E6:E6:93:B9:AA:FB:19:27:20:BD:89:94:F8:67:C7:3B:FA:93
            X509v3 Authority Key Identifier:
                keyid:DF:83:CC:17:F2:6B:C6:A9:7C:44:D8:A2:43:6A:95:C7:2A:94:BF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6d:a2:ab:b3:08:c6:34:09:38:93:10:72:b9:b0:0d:cf:06:
         76:bf:87:57:ba:d9:0f:73:a2:b4:d7:46:46:bb:10:e8:52:83:
         04:97:19:cd:4b:7d:99:5b:b5:c6:3f:b3:a8:d0:ee:60:f5:b5:
         cb:7f:1e:a6:e9:c5:59:6d:6e:f4:1d:b5:08:91:51:e1:d7:87:
         10:70:ac:40:e4:ec:f6:17:5a:fe:e4:ea:7b:89:4e:61:9a:e5:
         7f:ab:31:27:6a:23:ff:f3:89:a4:6e:2f:db:8b:7a:70:57:84:
         59:d3:8b:47:24:7b:18:8b:57:de:fa:89:e3:ec:55:ff:bb:29:
         cb:71:e9:5b:0a:18:ef:9b:71:39:62:84:54:a6:48:a5:97:93:
         3c:a7:33:3a:8d:c9:57:15:fe:77:a0:c9:83:a0:12:aa:1f:28:
         a4:00:72:0e:1d:ff:79:0f:6f:37:73:bb:18:48:10:aa:2a:ae:
         27:89:7a:c0:9d:2d:0f:bd:40:35:fb:12:9f:96:6f:9b:43:1a:
         69:27:3d:3e:db:bf:8e:29:a6:57:43:2b:ea:4f:3c:f7:ee:67:
         98:eb:f5:3d:18:50:25:46:77:27:f4:60:06:fb:20:ab:15:d9:
         73:72:cb:ef:3d:f8:ed:fd:7c:a6:90:c8:6b:e4:c6:56:73:ce:
         ce:c9:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:21:55 2024 by rpki-client on console-ams.rpki-client.org