Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          dmHK6Oz8Jx+I2FhL21Q5l3+DOTQE1VOcAmt9lCGoR9s=
Subject key identifier:   17:08:48:17:6E:B4:11:E2:1D:62:53:D2:40:55:42:8E:6B:D6:7B:99
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       019236CB0FC9FA355561AD60929344762D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 04:02:10 +0000
Manifest this update:     Sat 28 Sep 2024 04:02:10 +0000
Manifest next update:     Sun 29 Sep 2024 04:02:10 +0000
Files and hashes:         1: JkBuuwuZebi9sIkm47Se-yv2GYQ.roa (hash: NGybg51dqrrC6oz0JgeoyEITpl9TtiyH6Ov7zC8hNW8=)
                          2: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: KaKE/gbhjpDY5Ryz3wIqcWKIK1cHTE7ZGlDDmzKStqI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:cb:0f:c9:fa:35:55:61:ad:60:92:93:44:76:2d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Sep 28 04:02:10 2024 GMT
            Not After : Sep 29 04:02:10 2024 GMT
        Subject: CN=170848176eb411e21d6253d24055428e6bd67b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:8d:62:79:2c:e9:70:26:90:ab:a9:df:b0:
                    9f:45:a4:17:aa:f2:64:da:75:bf:91:4a:dc:80:64:
                    31:ef:05:5f:4e:f3:76:47:f7:3e:dd:20:a8:bb:54:
                    e2:aa:32:1f:e4:92:53:ab:60:87:5c:b0:86:9f:ab:
                    f0:1d:eb:2b:e2:68:e6:e2:b1:bd:fb:2e:1b:31:a3:
                    2a:1f:2f:a1:7f:a4:b4:d6:69:25:52:f4:d7:5b:41:
                    dc:04:8d:c9:a1:2d:98:0f:e1:55:fa:0e:4a:c0:b2:
                    d3:75:7b:fd:81:7d:b3:00:c4:3e:84:60:b6:0d:72:
                    61:91:7d:f6:4a:92:cc:23:71:5a:cb:fa:36:09:61:
                    81:55:d1:6f:f7:e8:ce:d2:97:18:00:19:49:2a:45:
                    dd:02:aa:7d:4d:7a:6b:13:3e:eb:f2:b1:46:04:c8:
                    e2:22:e7:e4:18:a5:23:09:bb:18:79:ae:20:0b:c3:
                    e8:29:0f:c4:05:c6:15:28:d4:ab:7b:e0:3f:d3:42:
                    57:fa:89:74:27:e5:bf:95:0f:51:fe:ff:99:ba:f1:
                    3c:1f:6d:21:85:b0:fc:9f:6e:f6:91:98:80:9b:85:
                    39:5f:2f:b4:68:4c:49:13:a6:18:ce:b1:1c:fc:e6:
                    a2:f9:ea:62:6d:d5:91:2c:6b:0a:bd:21:0c:40:22:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:08:48:17:6E:B4:11:E2:1D:62:53:D2:40:55:42:8E:6B:D6:7B:99
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:ba:02:e5:64:86:4a:bf:b3:31:c7:b7:10:91:aa:8b:36:
         9a:65:6f:bf:68:5b:5a:d7:b0:e9:45:d5:a0:f9:ff:1e:b7:24:
         bb:c4:6f:47:fe:62:b7:4f:e0:bd:b2:28:f5:29:44:3e:10:3a:
         37:77:b3:73:0d:23:c2:e2:ea:81:a3:2f:92:b0:6c:1f:c8:e2:
         9c:c6:47:e5:5e:8f:70:a2:62:69:50:66:2e:44:ee:9b:e3:3f:
         cd:dc:d6:1d:d6:33:18:64:fb:12:93:c2:2f:e7:3b:36:ab:b4:
         49:b9:82:19:aa:27:ae:2b:c3:af:60:03:b8:29:33:71:31:68:
         60:ba:13:b9:2b:85:b5:f0:32:15:19:27:d9:01:4d:ed:bd:06:
         dd:15:83:d7:e8:26:75:db:a8:35:47:9a:6a:d3:c3:c9:46:d5:
         04:9a:2e:76:2b:d7:39:75:43:d0:0a:dc:f7:2d:c3:f6:04:49:
         29:3e:30:f1:cc:91:36:20:03:4a:2a:92:4f:98:0e:6f:bc:40:
         69:4b:42:af:de:f5:6e:4c:93:84:8c:51:52:bf:c7:33:27:76:
         f5:0c:f0:78:30:7d:01:d3:5d:36:3b:92:ea:15:17:bb:50:bc:
         e4:8a:6a:b4:35:93:36:55:1f:58:05:c4:d1:58:6d:2c:e6:8e:
         bd:5d:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:21:04 2024 by rpki-client on console-fra.rpki-client.org