Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File:                     Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier:          FvwJe8gimd3D1/D3e2vSNpxx3eF7bqjstZ5yAHbajkU=
Subject key identifier:   37:17:94:15:8F:3E:0D:7E:82:69:91:DC:03:C6:10:4B:78:4F:3D:93
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer:       /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial:       018F874AD3FF37DA5A6F7440F929E3F04E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number:          0D00
Signing time:             Fri 17 May 2024 16:02:59 +0000
Manifest this update:     Fri 17 May 2024 16:02:59 +0000
Manifest next update:     Sat 18 May 2024 16:02:59 +0000
Files and hashes:         1: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: mROjiGqcH2gEYm6LdozCJKtGfKl61ZZdnWAOGIoN6A0=)
                          2: fPcagyElLfmUTJ0TiFeKeX9bDAM.roa (hash: UA/YIdGvyXt/Eg80pEFXkes4klxynMNtbgwXw2J4zeY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d3:ff:37:da:5a:6f:74:40:f9:29:e3:f0:4e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
        Validity
            Not Before: May 17 16:02:59 2024 GMT
            Not After : May 18 16:02:59 2024 GMT
        Subject: CN=371794158f3e0d7e826991dc03c6104b784f3d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:2f:75:dc:9c:d7:89:fd:85:b7:6d:6e:0a:
                    d8:fc:8e:ca:ce:62:d2:49:93:27:51:f7:ca:0b:03:
                    e4:9b:d9:1c:30:aa:95:a8:78:c1:cb:1f:d5:7b:45:
                    b6:21:5f:66:5a:30:ce:e1:1d:be:54:cd:df:75:83:
                    d4:b7:d6:87:28:e6:50:9e:d4:51:fc:59:ea:38:89:
                    32:a0:77:cc:25:66:94:60:ad:b2:65:94:a3:f7:93:
                    37:7f:b5:09:72:a8:3b:96:65:e4:dc:22:84:05:aa:
                    c2:6d:8f:91:bd:54:51:ec:07:99:a0:d6:61:86:a2:
                    92:da:07:fd:b8:24:74:50:e0:65:ba:4f:78:7a:3d:
                    42:b1:08:86:5b:8f:07:80:cd:7d:46:43:e0:05:93:
                    ab:31:c2:9d:63:e9:af:42:c2:0e:c9:d4:34:3d:fa:
                    ae:b0:e3:35:74:b1:aa:67:fa:0d:a0:c4:e4:44:50:
                    5a:8b:62:d6:bb:ec:21:98:f1:d9:08:6e:66:9e:5f:
                    1c:26:66:d3:9d:d2:cb:bf:62:0a:fa:d9:52:12:bc:
                    f5:de:90:40:d0:4a:b3:ab:8a:e9:f1:22:ba:e8:22:
                    19:23:2b:8d:f4:30:41:ff:1e:e8:c1:33:a5:1a:57:
                    37:1f:e8:27:b1:9e:fb:9a:38:3c:78:0b:fc:85:88:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:17:94:15:8F:3E:0D:7E:82:69:91:DC:03:C6:10:4B:78:4F:3D:93
            X509v3 Authority Key Identifier:
                keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:64:64:11:83:ee:32:2a:1f:09:aa:71:c7:c9:a1:99:ec:
         31:1e:b4:2e:97:8e:5c:24:3b:dd:5d:f8:a7:fd:34:17:ca:75:
         37:03:92:d1:48:f9:3e:5b:4b:ef:e8:f2:0c:f6:f2:5a:7e:ad:
         4a:38:44:32:d8:1e:8c:d1:21:f2:57:d8:6d:01:e1:6d:c4:05:
         67:6e:07:a8:5a:b4:f2:e1:e0:75:49:9c:a7:5f:df:57:bc:51:
         85:5b:11:cd:26:53:23:e5:5b:19:a2:70:17:18:4c:b3:c4:85:
         54:1a:d4:72:c8:87:0c:d2:c2:04:55:5f:79:ee:b5:2d:68:c0:
         86:af:13:f6:ae:ff:b8:81:78:3d:66:3f:37:db:c7:69:b5:39:
         f3:14:ec:52:d7:4f:10:de:e3:45:ea:6e:06:0e:1c:6c:62:4b:
         80:0f:27:56:35:41:37:05:cb:f8:79:48:b5:a7:7a:a9:50:90:
         bb:2f:47:78:81:9c:63:1e:e9:42:41:ac:22:62:00:78:0a:da:
         52:a7:d8:05:47:9f:63:ee:6c:af:70:20:d4:da:e0:3f:dd:1b:
         1f:aa:4f:73:20:48:83:1f:a6:9a:49:f0:5a:36:29:cc:b6:5d:
         2e:c7:09:b4:64:89:44:20:d0:c0:1d:42:0b:05:29:56:16:9f:
         21:7d:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:07 2024 by rpki-client on console-fra.rpki-client.org