Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File:                     PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier:          2XQZ9bI6AJATXh8HSuuEJrXVsk7NXZvVLyErAdf/LGI=
Subject key identifier:   22:AD:3B:D4:F7:82:2C:C0:CE:1A:D9:6B:BB:77:B7:2A:E0:51:4E:5A
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer:       /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial:       018F874AB82830CBAA06F1B83035AEBB4D8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number:          0B13
Signing time:             Fri 17 May 2024 16:02:51 +0000
Manifest this update:     Fri 17 May 2024 16:02:51 +0000
Manifest next update:     Sat 18 May 2024 16:02:51 +0000
Files and hashes:         1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: SRnugvZv38MEwPg0EOUuwpaY/aSuTx7nDW0bNSxPmgY=)
                          2: gPGVQYrqRfLPiQuYuN9w-kkOWV4.roa (hash: pCQe11E/eIRm3WlEf1wseo167yVKPILg/pDc4RwtmAI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b8:28:30:cb:aa:06:f1:b8:30:35:ae:bb:4d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
        Validity
            Not Before: May 17 16:02:51 2024 GMT
            Not After : May 18 16:02:51 2024 GMT
        Subject: CN=22ad3bd4f7822cc0ce1ad96bbb77b72ae0514e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:a3:5e:56:3e:87:db:82:97:7e:38:60:3f:
                    c9:3d:c6:94:bf:7e:7e:b4:44:95:d6:ae:0c:67:c2:
                    a3:22:5e:c5:22:a8:c8:92:bb:69:4c:1a:83:5a:2b:
                    48:de:56:f8:70:44:1e:28:5a:c3:4c:53:e8:88:69:
                    45:2e:5c:d5:43:48:79:22:5c:e0:95:9d:3a:f9:08:
                    bf:f4:f0:9f:7e:24:78:70:84:7e:da:2e:e0:9a:e5:
                    09:25:74:53:0c:5d:c7:cd:f4:44:ee:7c:ca:e6:01:
                    f9:3f:81:a1:f5:1d:fe:4f:72:98:45:c1:48:b2:45:
                    a4:11:50:6e:14:c9:9a:2a:1b:2f:4c:b4:0e:1a:50:
                    8c:72:03:ae:b5:e8:f5:80:84:a9:e4:7c:3b:3a:ea:
                    bb:21:5c:68:6a:af:7b:7b:31:14:28:5f:9a:4f:9a:
                    fc:98:1e:b5:68:2d:ae:ec:2a:c4:cc:80:13:12:73:
                    44:e9:f1:e4:ef:42:2f:c3:e6:35:4a:9a:85:67:e4:
                    84:a2:f5:eb:b2:b1:9a:d1:bd:7f:b0:ff:e5:3d:8f:
                    28:b0:25:23:91:e4:d0:2d:59:b5:9d:9c:77:85:26:
                    48:eb:88:f7:42:ab:02:15:53:aa:b9:1b:29:24:ac:
                    b0:2f:ba:6c:cc:6b:57:56:6e:a5:dc:12:d5:13:81:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AD:3B:D4:F7:82:2C:C0:CE:1A:D9:6B:BB:77:B7:2A:E0:51:4E:5A
            X509v3 Authority Key Identifier:
                keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:02:a1:bf:b2:83:5c:0d:ed:fc:d7:16:15:e8:bd:b2:c5:68:
         80:25:42:1b:8d:5b:de:e7:ce:bd:c3:75:4c:3b:39:0f:70:ad:
         dd:72:a2:cd:d5:dc:04:5f:94:c4:4c:c7:a1:60:6d:5f:e9:d3:
         e6:80:38:35:d9:ff:72:2a:1d:48:dd:be:4a:8b:9a:fb:ff:95:
         e7:86:fd:c2:02:71:47:d4:35:82:32:46:0a:52:64:39:32:87:
         77:7e:47:77:8e:36:de:06:6b:d7:29:44:61:b6:8a:6b:cd:83:
         22:e1:53:28:60:61:9c:bd:a4:7c:2d:c4:39:fe:66:ea:9c:b4:
         6a:93:d0:d1:72:17:47:e6:7f:53:f2:fb:fc:b3:bd:db:5e:83:
         6a:4d:be:5d:43:24:16:18:9c:54:46:7d:c3:7e:b4:a7:99:db:
         38:ed:11:9f:c2:e7:43:e1:84:bf:56:05:e3:4b:9e:79:c3:9f:
         59:4b:9f:bc:ce:92:54:f2:20:56:d9:c5:c8:16:c2:90:83:c0:
         04:83:40:68:92:44:08:7d:ea:1a:7e:54:7b:da:33:c4:4b:21:
         e8:d9:0b:03:3b:db:76:46:f4:06:79:bc:9a:68:2a:3a:4a:6c:
         72:41:69:0a:05:e7:d4:4f:9e:58:d1:6a:b1:5c:9d:52:d0:1f:
         8b:87:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:13 2024 by rpki-client on console-fra.rpki-client.org