Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File:                     pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier:          TIIFNHyn36VbAosjKSIHUREQvKLGklmzwOJIA2a4jDc=
Subject key identifier:   5C:22:02:64:4F:0C:3B:5A:B0:73:EC:41:A8:BF:F0:24:6A:62:BA:E2
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer:       /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial:       018F847E78F6A86B4B8DF264E835E7F6BD1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 03:00:31 +0000
Manifest this update:     Fri 17 May 2024 03:00:31 +0000
Manifest next update:     Sat 18 May 2024 03:00:31 +0000
Files and hashes:         1: 8CJsaFw6l6-8nyhM9ciYflrJwsc.roa (hash: /v4kWbOAV1ajYosLUNQfl7KAIkiStEzbmQCDQwONUU8=)
                          2: CuuWOocDvFqCF5ZT5AZxC6Mz54g.roa (hash: ouXvUF+5/+WIV/e52TzomEamU9rcTPag9MdphuuuhH4=)
                          3: HgbQa1fNvZe-dVZWi2DOms051dk.roa (hash: GmCkfeA03yN4PIyQDHMiqyI9xl4ThmqHmHIhMn+XJdM=)
                          4: jgY1BMU4TC9gH19GHJhCIZVkOLI.roa (hash: 9ibPYcrTEI7sfHGj2G4Mu91aao0goraUGTGoGgrKhA4=)
                          5: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: U90e+7Ft/dyF35f+Yqa0ysXu8Pl0XkkA9YFC4Q8nEB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:78:f6:a8:6b:4b:8d:f2:64:e8:35:e7:f6:bd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
        Validity
            Not Before: May 17 03:00:31 2024 GMT
            Not After : May 18 03:00:31 2024 GMT
        Subject: CN=5c2202644f0c3b5ab073ec41a8bff0246a62bae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:31:88:c9:ee:f2:e2:62:3a:1d:54:90:48:
                    d7:02:48:aa:24:85:f7:72:73:44:45:01:bc:09:0d:
                    b6:93:b6:aa:ae:27:76:20:27:6c:fe:73:3a:f2:b4:
                    0a:67:00:d3:90:e2:71:c5:6f:64:89:2f:66:7b:b4:
                    23:82:b3:37:fa:1e:d0:dc:d1:b4:ed:ff:d0:f8:0e:
                    2a:9d:66:88:d5:89:c1:c3:0b:25:f4:d5:d8:6f:72:
                    10:4a:c7:a4:63:f8:52:50:e8:cf:e2:d9:39:f8:87:
                    51:6d:59:c0:df:2a:46:6a:69:ab:c7:7b:da:1a:62:
                    dc:5d:6c:1d:df:48:ff:f2:61:8c:94:93:23:09:8e:
                    0d:56:7d:73:f8:4e:15:b0:d4:cc:6c:4a:19:e5:36:
                    7b:4b:76:72:80:51:d2:0d:82:30:ed:a7:be:0b:45:
                    33:61:34:18:f8:ff:2b:98:53:3f:1d:10:56:75:a0:
                    d4:c6:cc:e9:36:11:52:6e:fc:e8:42:b7:02:ec:73:
                    68:7d:58:58:23:b3:79:c4:1a:17:93:34:01:27:94:
                    8f:24:ee:65:73:ce:b0:6b:52:a0:de:70:7a:e1:b7:
                    45:36:66:c7:d6:c7:ab:98:f4:82:62:ce:7c:59:6c:
                    8b:2c:ae:87:4d:4c:9f:ef:00:22:24:90:82:3b:42:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:22:02:64:4F:0C:3B:5A:B0:73:EC:41:A8:BF:F0:24:6A:62:BA:E2
            X509v3 Authority Key Identifier:
                keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:92:ca:4a:82:f8:c8:14:0b:03:63:b3:1d:8e:e1:b1:94:4a:
         90:f8:2e:09:48:86:43:90:15:55:71:59:84:2a:38:47:da:4d:
         be:c5:27:50:00:17:61:e9:ca:7f:71:d7:97:68:0c:a0:70:85:
         e7:25:c9:11:14:40:f8:eb:97:f8:dc:b6:41:bb:d8:d7:06:84:
         e8:08:48:eb:b7:68:a5:15:a6:84:55:3d:79:cb:3a:c1:2b:5a:
         3c:f5:8c:ee:3e:0d:21:80:72:87:9e:b5:62:9e:b2:69:77:ba:
         31:67:88:fa:18:25:66:4e:55:15:e1:5a:9f:61:d5:a6:a4:3a:
         fe:34:14:70:b7:84:91:ee:8a:fd:5d:ae:40:bd:fb:d1:e0:4e:
         ea:2c:2b:09:37:c8:c5:e0:84:d3:84:c2:b8:8c:30:29:07:a9:
         04:4a:66:15:4a:1b:d6:78:d1:4e:5c:5c:c6:0b:9d:85:c0:df:
         b5:6f:22:eb:c4:54:8e:d3:4b:d0:d9:8e:6b:82:e1:fa:21:1a:
         8c:ae:8f:e1:e1:df:c6:0f:60:ad:f4:10:46:7b:46:a4:fb:2d:
         6f:9c:c9:a4:79:6a:d0:da:e4:6c:2d:53:20:76:7c:89:d5:55:
         9e:0c:45:cc:42:39:21:82:e5:c4:60:70:b2:77:d1:34:30:e7:
         1c:52:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:49:12 2024 by rpki-client on console-ams.rpki-client.org