Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File:                     pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier:          aupRtY/z1aavZ8DWzKUecRHiZDOvgsECwxHbA6Qgheg=
Subject key identifier:   E4:05:42:CF:31:2B:91:F2:6B:85:12:84:A6:C9:B2:66:FC:11:21:77
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer:       /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial:       018F36D21F03852C53FEE8E90BB9EC659592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number:          1153
Signing time:             Thu 02 May 2024 01:01:31 +0000
Manifest this update:     Thu 02 May 2024 01:01:31 +0000
Manifest next update:     Fri 03 May 2024 01:01:31 +0000
Files and hashes:         1: Ld6H9qvu2mlR2NBjvRsZ6zjmfi8.roa (hash: uk02gk6uMo1nx0+/0fwbJJM/68DWBqyTURMNl3fa9XI=)
                          2: PF7peyJjMzymBmZyNy525r-jtvE.roa (hash: m+vXWymChV9lVq8YPGUk39oELFrfN+1DS20jzFUPtrc=)
                          3: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: SQXTiVA4JZ/fS1kb2TizhV8sHH0jfxNNWFBohZn8i14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d2:1f:03:85:2c:53:fe:e8:e9:0b:b9:ec:65:95:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
        Validity
            Not Before: May  2 01:01:31 2024 GMT
            Not After : May  3 01:01:31 2024 GMT
        Subject: CN=e40542cf312b91f26b851284a6c9b266fc112177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:41:ff:c0:8b:18:c5:42:17:f0:03:ab:be:
                    2e:c7:dd:c8:03:a4:90:c3:82:49:20:fb:f0:49:74:
                    cd:e4:6b:ef:ba:1c:70:9f:1d:89:2f:59:96:5c:54:
                    74:ba:63:4e:e8:c2:9c:15:fa:b3:28:db:6f:9c:32:
                    9f:c0:c8:2d:09:49:ef:1e:30:f5:0f:82:e0:1b:a7:
                    7f:9c:0d:71:50:40:f0:3a:0c:2b:ff:3d:21:d6:fc:
                    8d:e4:9c:60:b0:8f:cc:a2:8b:3c:02:02:e4:67:48:
                    17:77:48:48:72:be:2b:35:35:ef:c6:5e:ae:7d:2d:
                    be:78:45:69:20:f7:67:c9:cf:39:85:b2:b9:d4:ae:
                    39:19:93:f3:38:d8:8c:ab:7c:51:33:27:ac:b0:ef:
                    e4:47:de:60:3e:90:4d:92:9d:28:13:8a:f2:fc:5a:
                    19:77:a8:64:97:10:35:f3:2a:f8:c0:51:a3:67:07:
                    14:0e:d9:8e:3a:43:9c:ff:9e:8b:2e:12:c7:73:bd:
                    4b:0d:87:1b:77:d6:05:6e:cc:d2:18:52:d8:46:20:
                    68:fb:70:dc:b7:2a:de:78:73:41:3d:ac:7f:42:33:
                    9d:77:09:63:7c:f9:c7:38:e1:75:1f:f3:3b:b8:04:
                    37:31:9d:eb:35:2b:bf:ca:fa:7b:0e:3d:31:78:b1:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:42:CF:31:2B:91:F2:6B:85:12:84:A6:C9:B2:66:FC:11:21:77
            X509v3 Authority Key Identifier:
                keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:7d:88:38:94:03:b2:3e:ed:df:53:16:99:e9:a5:e4:f4:
         7a:14:97:d8:15:fb:3d:0c:f3:b3:59:3b:eb:f7:61:23:e1:f7:
         4e:ff:14:4b:5a:68:db:cb:31:f4:13:62:2b:bd:a8:2c:2a:72:
         ac:da:16:bb:1b:48:d8:47:31:0c:c4:b3:81:88:7e:26:8d:1a:
         61:1b:ea:e7:50:81:8b:0c:98:f1:82:d5:e2:62:98:60:5d:77:
         d8:52:14:b9:b6:1c:d3:0c:ff:07:5a:2f:ea:e2:93:7b:60:13:
         86:73:76:fe:d5:f4:9f:50:ca:39:bb:5e:27:78:f4:83:f6:6f:
         09:f0:14:ca:d0:b3:37:af:40:3f:fd:0c:0f:5d:3c:4e:97:a1:
         1e:b9:c5:19:4b:94:0f:9b:57:33:af:e1:08:1a:4b:4f:45:b9:
         97:a7:9a:19:bc:4c:c8:8c:bd:e4:34:04:b6:5f:08:ba:87:e6:
         34:92:af:b4:d5:56:3b:2f:3a:89:36:7e:6b:e2:18:0b:a9:1a:
         3d:be:fd:51:98:f4:63:31:06:24:67:a2:4e:c8:ba:33:0e:bb:
         70:54:c0:9b:c6:0e:23:21:ee:f1:7f:f7:21:a5:b4:68:e2:b9:
         f0:3f:a6:53:d0:7a:5d:19:2f:e6:78:9e:90:f5:7e:82:88:fa:
         f2:70:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:33:34 2024 by rpki-client on console-ams.rpki-client.org