Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File:                     PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier:          FIB0tHTfNaPe8eclk4kfyyOnp39JtWlGYr/sQq9faD8=
Subject key identifier:   11:7E:5D:BC:BB:18:7D:52:8D:B5:D8:2F:C0:54:98:C9:A0:A9:61:5F
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer:       /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial:       018F874933184173C0946EF88B10EE6C4F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 16:01:12 +0000
Manifest this update:     Fri 17 May 2024 16:01:12 +0000
Manifest next update:     Sat 18 May 2024 16:01:12 +0000
Files and hashes:         1: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: fQuNp7zWMlA+j84kRA+judzMK74UWaNxmQGSJEfTtxE=)
                          2: mMapmEdHukRlUNw7gLygKtPwVA0.roa (hash: 3gGZnqmUEddBmlxASfoEGD7Q1NxuNJwGbZ6GTIPvk8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:33:18:41:73:c0:94:6e:f8:8b:10:ee:6c:4f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f172439599d7da525797899bf213b8e63554914
        Validity
            Not Before: May 17 16:01:12 2024 GMT
            Not After : May 18 16:01:12 2024 GMT
        Subject: CN=117e5dbcbb187d528db5d82fc05498c9a0a9615f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:15:d1:ce:8c:8a:ca:98:3d:9e:3a:b0:fa:c2:
                    a1:57:02:3f:74:3a:c7:34:3d:3f:f9:3f:df:b7:bc:
                    99:e0:6b:50:ee:c2:8c:be:fe:82:f5:25:fd:f7:46:
                    79:ff:77:dc:5a:4d:ac:87:6e:0a:e7:10:20:87:27:
                    f2:94:46:9e:39:71:0d:73:96:00:06:1a:c3:7e:ba:
                    e8:a5:ff:97:6b:87:9f:5b:a7:f9:e1:52:9b:d3:75:
                    e7:04:77:9d:ce:a7:2b:1b:11:e8:7b:29:67:91:6e:
                    71:c6:31:66:97:26:12:84:10:91:e2:a4:a7:ab:a7:
                    e5:46:b3:31:3b:d1:2e:22:9c:57:c0:96:ad:7a:1c:
                    4b:4b:5f:2a:ab:58:fe:83:33:1d:fe:a6:46:8d:2f:
                    11:5f:5a:b9:5c:3a:6d:c9:8d:e6:6a:bd:f8:8d:ac:
                    48:f0:e3:9b:07:74:17:0a:27:08:0d:fb:c3:70:e5:
                    f7:50:8a:72:7a:fb:1c:c8:fa:2c:5f:db:0b:c3:5d:
                    4e:5b:45:ea:eb:f5:6a:70:e5:a9:34:e2:15:a6:74:
                    18:08:8e:23:0f:f6:1b:a9:d2:54:a6:01:b0:ae:43:
                    b1:3a:52:9c:b2:ef:1d:af:45:f1:dc:c8:fa:06:ca:
                    cf:a5:91:b3:ee:ef:de:7a:3c:35:99:30:23:92:2a:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7E:5D:BC:BB:18:7D:52:8D:B5:D8:2F:C0:54:98:C9:A0:A9:61:5F
            X509v3 Authority Key Identifier:
                keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:8b:07:0d:ff:c2:a4:c7:1e:8e:fb:3f:11:97:81:64:16:
         7d:c0:18:66:11:4c:c9:85:be:a0:0b:ea:cb:21:ca:d8:db:68:
         35:bd:27:90:48:c7:98:55:7a:ea:f0:04:93:8d:af:56:c7:7d:
         a1:74:ac:cb:fc:7a:03:21:86:0d:f7:96:2c:7f:f4:76:27:03:
         40:76:1c:ea:05:1b:88:1f:73:74:1a:93:88:9c:c8:cc:16:1f:
         ac:df:94:44:e7:40:08:df:1e:fd:9a:7b:7a:8d:4c:7a:84:48:
         50:06:69:cf:a8:5b:fa:eb:95:7f:dd:c3:7c:f3:df:7c:ac:fa:
         d4:75:cf:1d:aa:69:08:bd:86:e0:1a:93:82:04:e5:26:cf:89:
         76:06:30:8c:b4:8c:68:6c:a6:23:0c:e4:78:f0:87:cb:9d:8e:
         5d:8e:60:e7:32:94:3f:0c:53:91:88:69:09:28:f8:01:1e:58:
         dc:6b:98:6b:24:68:93:29:85:a4:a7:24:4d:cb:1d:e2:2a:75:
         a2:62:eb:40:dc:56:a2:53:e3:6d:2e:2c:e2:09:f7:51:0a:83:
         04:85:f7:41:52:12:10:bc:3d:30:c1:df:c7:6a:de:d7:95:31:
         22:85:13:ab:d6:49:f0:8b:25:d3:c2:1b:6e:00:3a:61:c3:bb:
         1c:c1:88:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:09 2024 by rpki-client on console-ams.rpki-client.org