Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File:                     PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier:          M6wkD8+WXL7jWojS0q+2BvCye99AtnMAWVnrT48qO1I=
Subject key identifier:   3E:ED:A6:6C:8A:94:DC:FA:9D:3B:70:F0:E5:13:36:05:07:CC:F9:56
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer:       /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial:       018F8FDD89FCDCD30C95C2471C499CFE97F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number:          5A
Signing time:             Sun 19 May 2024 08:00:11 +0000
Manifest this update:     Sun 19 May 2024 08:00:11 +0000
Manifest next update:     Mon 20 May 2024 08:00:11 +0000
Files and hashes:         1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: jyCb/uElxD9lO94zoiLx3XNobuSoLiENAjriSXBP6ro=)
                          2: nIvA5IawAUOxNd-mNlcWbtcy_Uc.roa (hash: sl2s/Cjp7XgQuJKNLDsN7Ino9UgkFgtGg0Ji27I+ttA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:dd:89:fc:dc:d3:0c:95:c2:47:1c:49:9c:fe:97:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
        Validity
            Not Before: May 19 08:00:11 2024 GMT
            Not After : May 20 08:00:11 2024 GMT
        Subject: CN=3eeda66c8a94dcfa9d3b70f0e513360507ccf956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:9e:5d:52:f2:a0:09:cb:f5:17:73:0d:be:
                    e7:e2:a1:8c:40:31:f4:3d:47:1c:55:c0:95:51:16:
                    37:c7:da:7c:2f:ee:ac:42:7b:ec:d5:81:b5:bf:d6:
                    bb:68:f3:13:6b:b6:63:ba:44:58:9a:83:d3:da:44:
                    29:a0:41:cd:e5:98:c4:73:e2:32:74:d3:cb:77:11:
                    d2:68:98:0a:59:7f:75:9f:59:76:18:60:04:e3:09:
                    6b:de:1c:fe:7f:c2:2c:52:1a:8f:37:b3:0c:55:a0:
                    1a:c9:d8:5d:5e:e0:10:95:9a:0c:07:43:5f:47:ce:
                    cc:9a:c0:e9:c2:f2:24:a6:1d:f0:e7:79:01:79:08:
                    fa:04:a9:82:17:17:4b:a5:80:a1:f0:15:a8:c7:f0:
                    f5:ac:01:80:26:2e:eb:8f:be:eb:fb:aa:1a:b9:34:
                    b0:3d:90:7e:23:50:60:50:37:a4:90:b1:10:76:52:
                    d4:f7:1c:22:d2:99:4d:06:f0:f1:4c:6b:56:ea:4f:
                    1b:a9:ce:d1:a2:da:49:04:c2:d4:3f:2e:d5:fa:e3:
                    4c:1e:da:dd:8e:80:3e:47:c5:e2:b6:72:4f:05:cc:
                    3c:bf:cb:28:a9:8a:8d:58:d8:aa:9f:78:22:7b:79:
                    4e:09:88:a8:a1:df:be:2d:2c:aa:be:f4:ba:de:61:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:ED:A6:6C:8A:94:DC:FA:9D:3B:70:F0:E5:13:36:05:07:CC:F9:56
            X509v3 Authority Key Identifier:
                keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:59:db:f6:1e:25:6c:23:48:05:a4:8a:c0:6c:08:d3:e1:
         07:7d:af:52:89:50:e5:26:27:0b:a0:d9:b7:44:44:8e:97:6b:
         b4:be:74:a2:60:32:c9:48:ce:af:df:9b:d7:95:56:25:cf:75:
         4c:73:7b:e8:35:47:9b:b0:42:93:f7:fc:e4:90:7c:30:98:b7:
         37:0f:2b:f0:34:80:6e:0e:b6:86:6d:c6:b1:05:b2:ec:c4:0d:
         62:69:6b:43:c2:c0:18:76:da:7a:5c:52:95:29:1a:f5:44:51:
         f8:fa:f3:8a:53:14:72:07:3a:2b:60:42:a3:53:64:d3:3d:97:
         a9:37:1c:22:39:10:03:4a:a3:62:21:cd:1f:60:76:0a:01:06:
         f6:4a:9a:a1:17:6f:a8:e3:58:0f:f3:49:07:a8:6f:ef:38:33:
         17:d8:8e:41:a2:61:65:0a:92:97:e7:3e:2b:ac:49:6c:75:cb:
         39:a4:08:cc:7a:8b:cf:ce:9c:e7:9d:96:b2:13:1d:c9:ef:a1:
         cd:aa:3b:70:b8:c8:e5:46:3e:ae:3b:13:c1:ba:4c:36:52:c8:
         56:c9:83:b1:b3:b1:c8:85:69:b2:8f:f2:4d:94:8c:d6:49:0f:
         98:c9:31:de:a2:17:97:c1:18:41:1d:03:dc:d0:33:74:59:2e:
         e8:8c:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:48:31 2024 by rpki-client on console-fra.rpki-client.org