Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
File:                     PZlE6PVlGxvS8KngBoZfOmuB62E.mft (raw, json)
Hash identifier:          3IOKOCd/7c254QmqrU4hlZ0rcyOS2avsGiVaOzvxMHk=
Subject key identifier:   3B:82:DF:91:49:56:74:B1:79:2A:F0:C1:FA:04:05:66:B9:96:82:44
Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
Certificate issuer:       /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Certificate serial:       018F88923B43B5EBA482CC0D7A6AC9106DA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 22:00:35 +0000
Manifest this update:     Fri 17 May 2024 22:00:35 +0000
Manifest next update:     Sat 18 May 2024 22:00:35 +0000
Files and hashes:         1: PZlE6PVlGxvS8KngBoZfOmuB62E.crl (hash: t3NJPDZkcF3Z4YL7LF8k96qPNkBryjiXdO7m0FVgte4=)
                          2: lzgQA6tumGrtl1J3R_5L-rMo5IA.roa (hash: Rb5Dy+J3N7pxZEpcXafgYOYnpaHQnT4moddED/LjesI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:3b:43:b5:eb:a4:82:cc:0d:7a:6a:c9:10:6d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
        Validity
            Not Before: May 17 22:00:35 2024 GMT
            Not After : May 18 22:00:35 2024 GMT
        Subject: CN=3b82df91495674b1792af0c1fa040566b9968244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:d3:4f:a7:86:73:29:99:8e:e6:9f:3b:bb:
                    6e:18:2e:48:fa:e6:c1:b0:c7:2f:c1:dc:d6:ba:04:
                    b5:35:60:52:8f:0d:5b:a6:1f:1f:94:26:25:92:48:
                    a0:ed:7a:e9:f4:27:b2:e6:c1:d5:8f:e3:3c:46:37:
                    54:fe:1b:43:88:ec:0e:c1:18:67:fe:14:0a:b5:f5:
                    07:a9:af:c4:89:b2:a5:12:38:32:f1:d2:df:d4:7a:
                    84:cc:c7:b6:5c:8b:fb:da:13:01:a9:3b:db:44:c2:
                    46:d4:57:8d:52:35:19:1f:fc:21:6d:1d:05:11:a1:
                    f5:ff:e3:b8:ba:ae:09:6e:75:f6:f3:8b:70:fe:ea:
                    45:4b:7b:f4:92:01:13:e4:62:7d:36:cc:9e:ae:5f:
                    3f:d5:dd:a6:af:d6:35:bb:b0:b6:86:c5:13:b3:48:
                    e1:cf:9d:c8:ee:25:95:5d:fe:ed:7d:88:74:e6:fc:
                    e4:d2:d3:39:be:6a:a8:14:23:12:2d:14:c1:10:34:
                    d6:ae:9e:89:24:07:b0:1f:ea:00:1e:5a:e9:5c:d2:
                    1b:c6:dd:bd:a7:3e:fe:b5:38:db:17:f5:a8:b4:87:
                    33:49:90:35:60:a6:51:bf:92:36:97:30:6e:1f:a1:
                    85:84:6d:dc:43:46:67:d5:96:39:9e:91:8f:f1:0a:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:DF:91:49:56:74:B1:79:2A:F0:C1:FA:04:05:66:B9:96:82:44
            X509v3 Authority Key Identifier:
                keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:87:8e:35:25:de:d6:c9:f7:20:c1:62:25:02:d9:38:78:
         21:af:f0:83:e8:f9:a3:e7:86:7a:d5:5d:28:a1:ae:4c:05:5d:
         05:8e:04:48:eb:29:e4:f9:1f:2b:64:aa:e6:24:f8:6b:51:ec:
         47:96:ab:51:89:e1:8b:f2:b5:90:db:27:48:6a:bb:f8:c6:a9:
         b0:7e:91:ce:6b:bc:16:dc:16:05:a4:c7:f5:0f:86:81:e7:62:
         e2:4d:35:95:84:79:05:68:80:f7:e9:78:bd:a6:7d:f5:a3:ee:
         a2:c0:65:bb:9e:d6:99:c8:1f:bf:aa:63:cd:a2:72:3f:a1:ae:
         3d:19:02:4d:b9:85:59:97:d3:ec:c3:8d:4a:2d:e1:c3:55:24:
         c1:75:5f:7f:09:74:b1:6f:43:7f:55:9d:4c:fc:6b:f8:7d:81:
         ac:c1:7f:69:5a:a4:ad:6c:9b:a8:ee:05:35:8d:a1:eb:1c:b0:
         ed:a5:bf:a4:d2:63:df:66:22:d2:e8:20:35:f4:8e:cb:58:32:
         6c:a0:97:e6:e4:02:b9:7a:7a:ab:23:fd:fa:6f:09:1d:5b:fd:
         80:dd:ad:93:e1:eb:d4:b6:f4:a6:13:bd:32:ea:d9:fa:0a:24:
         ec:5f:ea:0a:5b:8d:90:40:b9:b2:8b:d6:c9:fa:2b:46:4b:75:
         c0:a8:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:51 2024 by rpki-client on console-fra.rpki-client.org