Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File:                     PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier:          Te1SezjR6c/WmPYPAloKXtQX8WYdaMbrqAH+xA0yZ2M=
Subject key identifier:   BE:17:65:7B:B6:DC:17:67:17:41:A2:AB:41:5F:0C:B4:B6:4C:B6:A2
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer:       /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial:       018F874A0676E253EDF1029F7F27B50B4A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:06 +0000
Manifest this update:     Fri 17 May 2024 16:02:06 +0000
Manifest next update:     Sat 18 May 2024 16:02:06 +0000
Files and hashes:         1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: L0TnL7s4rOxmIjMo8ayAIZ0uffED5cYTjTaF99Wps9s=)
                          2: SY6jVp5Kv4BauFptaGgaKDy75qU.roa (hash: 0CZ6XNHKr/XmnTa6sYo+p/5Tb8GEXsoMDjIJ99ZeJnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:06:76:e2:53:ed:f1:02:9f:7f:27:b5:0b:4a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
        Validity
            Not Before: May 17 16:02:06 2024 GMT
            Not After : May 18 16:02:06 2024 GMT
        Subject: CN=be17657bb6dc17671741a2ab415f0cb4b64cb6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:42:aa:8d:f6:80:76:bf:57:57:2f:69:f0:
                    00:d9:b7:81:b2:be:82:48:e3:73:f1:3c:e5:0d:52:
                    21:9a:ab:4a:fd:00:24:0f:e8:09:0f:c9:d5:21:d5:
                    42:bb:07:e0:c3:09:9d:a4:19:44:fe:2f:c1:d8:97:
                    3f:87:de:f1:1e:ba:02:f2:3c:c5:28:a3:eb:01:ab:
                    52:e3:cf:5b:af:45:45:27:c9:3f:fc:70:c4:8c:7b:
                    49:66:8f:1d:90:d4:a3:58:14:89:8b:08:cb:0a:6c:
                    41:69:68:b9:e1:30:f8:d1:b3:ac:24:63:39:9b:27:
                    c1:2c:64:7a:d1:3a:61:b8:29:a8:98:63:12:fd:93:
                    f5:3b:bc:ff:71:61:84:2d:c6:09:41:ec:fd:20:e3:
                    93:83:a5:d8:19:1c:03:2e:71:22:8d:a4:12:69:76:
                    b0:5d:b8:79:1b:33:12:5a:e4:e9:df:66:64:de:41:
                    98:d9:a8:08:6d:7b:2a:58:77:b9:a9:80:90:51:84:
                    9a:79:f0:31:e2:00:15:97:1f:e4:5f:a9:c8:83:83:
                    47:a6:ed:38:d8:ff:68:3b:72:0d:c0:37:8c:5b:85:
                    e9:82:92:e7:69:9b:1e:fe:a1:24:23:17:e0:30:21:
                    b5:ce:b1:de:f1:61:57:1b:bb:6c:cf:ab:62:4b:78:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:17:65:7B:B6:DC:17:67:17:41:A2:AB:41:5F:0C:B4:B6:4C:B6:A2
            X509v3 Authority Key Identifier:
                keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:36:29:5b:f4:77:01:5b:1b:60:02:1c:65:b5:2d:69:cb:fa:
         d6:6b:9e:5f:fc:7d:c7:9c:40:35:57:40:f3:25:20:4e:8e:37:
         75:d0:aa:df:d7:5d:07:5d:04:da:bb:2a:18:aa:02:27:d3:e8:
         4e:ec:7c:bd:e2:84:c1:80:fb:b2:b5:11:5a:23:0b:56:42:7f:
         80:dd:db:0c:5b:18:af:e3:e4:c9:73:e7:1a:89:1e:82:6f:0d:
         00:a0:86:9f:b5:e0:dd:18:4b:91:e2:8b:9c:16:1f:1b:71:fc:
         fc:75:46:f0:8d:98:cc:f5:13:ec:51:3f:e1:7d:fa:e1:00:8f:
         45:d8:6a:aa:76:13:41:7b:6c:95:b5:3b:e3:d9:06:0a:70:52:
         c5:9a:f6:56:1f:b9:76:1f:59:e7:3e:26:50:13:47:7c:0c:78:
         7b:6d:16:fc:84:e0:07:7c:fe:36:b3:37:4c:aa:d7:19:c1:85:
         83:b7:dd:ab:a4:e8:dc:b7:a2:03:b0:08:72:8e:ca:26:86:3e:
         81:16:16:0e:73:25:5a:26:50:d5:52:36:b2:b6:31:1a:db:d8:
         61:e4:38:98:cb:0b:4d:45:88:c9:eb:96:17:17:48:5a:f4:72:
         f0:b4:89:39:bc:6b:60:86:58:c6:26:85:2e:36:8a:82:78:7c:
         47:c6:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:59 2024 by rpki-client on console-fra.rpki-client.org