Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
File:                     28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json)
Hash identifier:          19Q6o+7r1gVMbiq2h/tygdNIXw2AmbmaRPpICJT7oUI=
Subject key identifier:   33:86:8C:73:E4:2C:5F:34:A7:86:81:B4:1D:43:D8:7B:A0:D3:64:45
Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
Certificate issuer:       /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Certificate serial:       7B010BA3A20AA6E68C6A3A5F6922D8F0D831049E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
Manifest number:          89
Signing time:             Sat 07 Sep 2024 14:35:27 +0000
Manifest this update:     Sat 07 Sep 2024 14:30:27 +0000
Manifest next update:     Sun 08 Sep 2024 18:13:27 +0000
Files and hashes:         1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: x5/gddDob0NehDOTHfCY29OwxaQYJkXUQ93i22mExLs=)
                          2: AS51396.asa (hash: PIUS/RviqxFZXRqi4DultqCaHpO6c1gYriaKclOG85w=)

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
                          rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:01:0b:a3:a2:0a:a6:e6:8c:6a:3a:5f:69:22:d8:f0:d8:31:04:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
        Validity
            Not Before: Sep  7 14:30:27 2024 GMT
            Not After : Sep  8 18:13:27 2024 GMT
        Subject: CN=33868C73E42C5F34A78681B41D43D87BA0D36445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:68:0a:9e:c1:1e:f8:e6:88:64:49:93:2c:
                    3e:2b:44:64:23:ac:da:ed:16:e2:1d:29:37:33:90:
                    53:cc:cc:b4:ac:48:84:84:c4:4e:2d:77:67:3a:19:
                    c4:9f:70:79:94:ee:77:a8:d2:28:4a:c5:a1:1c:f9:
                    19:5e:d2:ac:7e:f9:3d:dd:b1:bd:84:27:a0:fb:60:
                    4f:92:9c:fa:83:01:6a:32:9a:ef:89:0e:bd:a5:88:
                    9b:c8:d4:a9:9b:1f:6c:3f:29:db:f6:d0:2f:96:01:
                    69:c8:65:bc:c3:2c:8c:e6:6b:e2:8d:ea:a4:1b:ef:
                    c3:0f:0f:43:f5:68:cd:b1:0a:50:6a:b6:2c:db:e5:
                    d6:ea:18:9c:fb:4e:a5:73:a2:6b:82:eb:8f:8f:91:
                    fd:83:0f:96:8e:8f:1c:f3:ed:29:bb:4f:f8:be:ca:
                    7d:10:ac:2f:21:5c:45:18:5a:67:5b:7d:ca:37:35:
                    7c:e6:b6:42:76:01:82:dd:32:82:65:fa:60:36:5b:
                    82:49:56:a7:08:c8:81:47:25:68:19:37:6d:a8:4c:
                    9a:77:a9:95:a6:7b:a7:c5:d4:8a:0e:06:6f:af:fc:
                    f8:96:36:b4:4d:6c:20:ac:31:a1:fc:d7:b9:8b:de:
                    7f:8b:04:fc:49:53:d7:77:3f:4f:eb:b8:6e:d0:55:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:8C:73:E4:2C:5F:34:A7:86:81:B4:1D:43:D8:7B:A0:D3:64:45
            X509v3 Authority Key Identifier:
                keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:7f:4f:e5:70:53:db:c1:29:fd:d3:e4:7d:e0:de:a7:ce:
         61:73:cb:29:a7:0d:29:a5:95:84:d2:21:29:d6:c1:f4:e6:89:
         54:b9:7a:27:22:7b:2e:15:ce:0f:cf:c0:0a:b1:5f:0b:6c:6d:
         a3:87:f6:a2:58:48:7f:7e:69:d6:74:9c:c4:c0:e0:cf:e8:88:
         93:48:43:64:ce:7c:e0:67:92:d7:80:71:eb:32:3e:69:d9:9e:
         f8:47:21:35:29:65:6c:07:63:f8:cc:c3:ae:eb:2c:b1:41:99:
         13:dc:6a:53:6c:57:1f:d3:9b:2a:85:fd:91:78:38:e5:2b:d8:
         9e:f3:35:4e:41:48:6b:e7:37:d4:04:fa:18:ea:65:05:b7:8a:
         09:fa:96:f3:6a:ff:2b:46:93:4e:5a:71:2a:0e:3b:31:a1:3c:
         ac:11:5d:a3:75:43:8a:d6:0c:9a:db:b3:51:45:fd:3e:60:df:
         d8:c4:99:6a:6c:ad:ab:de:77:dd:d4:4a:eb:5d:cf:1b:42:0d:
         ae:00:56:a6:34:56:ce:d8:9d:a6:92:f6:38:3d:d8:2d:ef:0f:
         94:10:1d:d1:db:da:3e:e9:48:4f:3e:a7:e5:19:a9:76:ab:05:
         a9:81:44:06:90:a5:3f:ba:a0:bf:52:07:30:73:ed:e1:12:87:
         1a:7f:a6:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 7 16:46:11 2024 by rpki-client on console-fra.rpki-client.org