Manifest

$ rpki-client -vvf rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.mft
File:                     8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.mft (raw, json)
Hash identifier:          xOPsoeI4qqxdOfnSC2cOKC0tPNVZn8xN521I9Rs4rpw=
Subject key identifier:   56:5E:8B:26:8E:D1:85:C6:48:6E:BD:88:2E:F6:92:EA:95:BC:FF:A9
Authority key identifier: 8A:4E:AC:66:5A:94:79:8F:D0:DD:EA:24:17:6E:E5:E0:C0:B7:74:3A
Certificate issuer:       /CN=8a4eac665a94798fd0ddea24176ee5e0c0b7743a
Certificate serial:       2C1B5DE8625481FFDD59A31B892ED1DDB5A4CD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ik6sZlqUeY_Q3eokF27l4MC3dDo.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.mft
Manifest number:          0104
Signing time:             Fri 17 May 2024 05:15:39 +0000
Manifest this update:     Fri 17 May 2024 05:10:39 +0000
Manifest next update:     Sat 18 May 2024 08:18:39 +0000
Files and hashes:         1: 8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.crl (hash: qqLum+Nt9y5Oi+/m2UkqZCFbICNyysOg4XvaQ9RZ3+M=)
                          2: AS200160.asa (hash: ma1rVUSoax4QFVVTTAVkoDTcdSEWAsLsgs2UvNWq4+w=)

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.crl
                          rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ik6sZlqUeY_Q3eokF27l4MC3dDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1b:5d:e8:62:54:81:ff:dd:59:a3:1b:89:2e:d1:dd:b5:a4:cd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4eac665a94798fd0ddea24176ee5e0c0b7743a
        Validity
            Not Before: May 17 05:10:39 2024 GMT
            Not After : May 18 08:18:39 2024 GMT
        Subject: CN=565E8B268ED185C6486EBD882EF692EA95BCFFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:64:2f:21:06:1b:7d:c7:22:60:dd:fa:68:
                    ea:1a:f7:b0:fc:c9:7c:00:1c:a7:e2:1b:ff:bb:61:
                    b6:ae:ed:09:60:2e:fc:4a:6f:e7:be:ca:27:90:c1:
                    1d:df:b3:7e:e9:1d:f7:28:34:75:2a:cd:4e:b2:b3:
                    48:88:c8:00:d6:f8:72:4e:b6:53:9f:59:fc:52:d7:
                    e4:12:39:7c:2a:c2:7e:14:7f:ec:d3:7d:f5:54:57:
                    05:09:d4:63:b4:01:9b:bc:f7:e0:d0:91:0d:37:01:
                    39:77:3f:66:fe:5d:ee:f3:34:8d:79:55:6e:0c:85:
                    46:ab:74:c8:db:d2:71:9a:20:09:61:16:60:0d:00:
                    a5:60:32:fa:fa:0b:9e:43:4a:da:95:a5:93:aa:1c:
                    1f:4b:68:fc:16:71:64:17:2f:64:83:e7:07:20:2b:
                    50:b6:7d:47:7a:f3:00:c5:01:d9:ab:3f:a0:3a:f6:
                    dc:45:e2:e3:58:fe:c7:6c:0a:d3:1d:c9:1a:b8:74:
                    5e:59:0c:de:8b:2c:a5:5d:6a:2d:f4:81:6b:6b:c6:
                    95:83:85:09:31:dd:1a:ee:46:4c:25:e1:e4:f0:62:
                    34:6c:15:22:09:4a:db:54:f3:e4:3c:a1:04:b3:4d:
                    d2:1e:c7:35:37:ff:dc:f8:64:35:55:bc:8d:82:32:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:8B:26:8E:D1:85:C6:48:6E:BD:88:2E:F6:92:EA:95:BC:FF:A9
            X509v3 Authority Key Identifier:
                keyid:8A:4E:AC:66:5A:94:79:8F:D0:DD:EA:24:17:6E:E5:E0:C0:B7:74:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ik6sZlqUeY_Q3eokF27l4MC3dDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:0d:53:4b:0b:b4:a9:10:5f:a8:23:24:ee:7e:8c:3d:52:
         66:80:81:6e:98:a7:b0:14:f1:70:89:42:55:65:7f:aa:4f:9e:
         fe:d6:31:8f:27:ea:6e:78:4a:c4:22:4e:0b:3c:82:a4:e5:de:
         0d:c2:32:26:81:ae:1f:66:9f:59:7b:71:47:b4:d9:36:51:8c:
         6c:19:8a:dc:4d:e4:d9:01:e6:bc:bf:76:9a:a3:ec:85:9d:13:
         db:cb:d5:22:5d:ea:5a:a9:92:d0:8a:36:25:3c:c2:b0:22:aa:
         57:91:cd:19:09:16:f6:b2:f4:ec:03:af:f1:d9:41:b6:12:49:
         e8:a9:7a:8e:a5:ba:62:75:f6:84:88:69:30:33:4e:84:3b:f3:
         90:51:58:76:61:c4:8b:21:40:38:bd:6d:e1:a5:fa:aa:e8:f0:
         4c:60:ae:a9:fc:83:ec:73:9b:f5:55:54:46:4e:15:a4:60:61:
         12:fa:bf:96:e8:bf:f9:19:cb:7c:38:14:1c:2c:ba:6a:cf:39:
         d7:28:ce:86:fe:0e:87:39:24:9d:87:cf:f4:6a:d9:a1:9f:45:
         11:6c:da:9d:7c:77:97:e8:28:94:fd:bc:de:06:77:0d:c3:ec:
         4a:32:9e:5a:e7:cf:ab:9d:74:19:51:f1:94:ef:b0:dd:3a:e2:
         95:9b:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:19:03 2024 by rpki-client on console-fra.rpki-client.org