Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File:                     PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier:          IvT9I6VqEkzKU7QPiPOEe0b7p43y3dM8qazpTFQrPlY=
Subject key identifier:   C4:0C:BE:DF:65:87:8B:35:8B:11:EC:7D:AB:50:DC:E4:98:F7:66:6E
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       018F8DEFA474200B1FAA38202D9994C3F6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number:          0AFA
Signing time:             Sat 18 May 2024 23:00:43 +0000
Manifest this update:     Sat 18 May 2024 23:00:43 +0000
Manifest next update:     Sun 19 May 2024 23:00:43 +0000
Files and hashes:         1: 4wzrzTSe4OfvtHyfgVOfhTZzVMc.roa (hash: qFI+zaBmAHIEttJ/kaFzk4Tl6WLETr7kE2kQg9lJGak=)
                          2: EBaJ8tX9jtDT7VcahZ9DBCEQPZk.roa (hash: luviHiFK4SwTUyLU+LLLaLzh2PpTgQOOezzG2s6dLMA=)
                          3: ImAQannuwVOgMf04hE6LPunycrw.roa (hash: zJsd46VKYNgDL6hcbpCT+zIswpeMrVhLjWxvjwGDoB8=)
                          4: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: y7q5ULn1mxQ/pqU+COMuvFaV269WrkdzM6//JW6Nk2k=)
                          5: g-v6DDuss9rksfc24s6W710G1LI.roa (hash: K/YDaCC/IQvSAb/B3stTC5jtYkenfJpOL0TXXg+Iap4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:a4:74:20:0b:1f:aa:38:20:2d:99:94:c3:f6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: May 18 23:00:43 2024 GMT
            Not After : May 19 23:00:43 2024 GMT
        Subject: CN=c40cbedf65878b358b11ec7dab50dce498f7666e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:3a:bd:5a:bf:7e:4c:88:fd:72:79:29:4b:
                    91:c2:00:91:c3:ae:6a:60:7c:75:0a:57:73:0b:db:
                    08:5b:03:2f:a4:56:ec:fd:b3:70:af:e3:80:02:ba:
                    d5:02:2c:26:93:86:09:96:dd:0b:ef:e9:bd:f6:9b:
                    61:8b:ec:8a:5f:f7:57:1f:ba:4b:9b:30:0c:63:4d:
                    60:8f:9b:0c:bb:27:ef:be:f0:af:27:35:19:fa:5a:
                    29:03:fc:be:f0:7a:ce:8b:bb:82:1b:87:60:8e:7b:
                    2b:6e:28:f6:1d:2a:cb:87:bb:dd:78:90:3c:9b:e4:
                    42:bd:7a:8d:ec:bf:b0:99:bf:d2:10:b9:05:27:7a:
                    93:1b:e5:e7:52:5c:03:60:ea:f0:6b:79:08:6c:a0:
                    64:6b:67:77:8a:4a:8e:f8:81:39:b5:57:52:01:41:
                    b3:60:3e:7f:9f:94:aa:d7:c4:b0:50:b1:08:e9:ff:
                    63:2a:93:c5:60:99:f8:21:cf:5a:fa:e8:9c:5e:a4:
                    1f:d6:70:a3:62:d6:c6:e9:be:eb:69:86:e7:cf:50:
                    73:3d:0c:49:22:0a:e1:64:cc:62:18:bf:2d:48:d2:
                    13:9b:18:5d:d9:d8:d5:e5:18:9b:ef:55:84:52:3d:
                    ba:50:4a:08:f2:fb:57:ff:b1:41:29:40:49:2b:90:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:BE:DF:65:87:8B:35:8B:11:EC:7D:AB:50:DC:E4:98:F7:66:6E
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e4:d2:b4:84:08:57:21:55:5c:41:33:bc:3c:c7:cb:de:4b:
         e9:c3:55:42:e4:47:4c:61:99:8b:ca:fe:be:67:30:8e:2b:af:
         cf:c9:5b:5e:70:c0:fe:b4:52:83:e6:1d:81:fb:c4:47:80:c5:
         c7:5a:02:86:c3:f3:f2:10:a9:88:8c:d4:49:ce:f3:de:f2:1d:
         9a:a1:4d:fc:80:9c:db:e1:a1:dd:93:3a:e0:82:56:3e:d4:0b:
         7b:39:52:7d:01:d6:65:66:9e:99:6c:24:dd:7a:44:17:43:3b:
         81:18:4e:50:ca:aa:43:fe:01:7f:c5:92:0a:25:91:0b:bf:6b:
         4d:38:d0:06:fa:b7:56:82:fe:07:5c:ce:da:9c:a7:e4:ba:ef:
         ac:d4:25:96:e6:a1:0b:31:7c:53:15:1c:37:b8:b7:b2:1f:91:
         86:2c:b4:f2:4a:92:e6:07:b3:86:09:8e:14:18:b8:ba:af:8c:
         19:c0:80:f6:eb:af:23:b1:d8:c6:40:20:3d:74:76:df:0a:fe:
         8f:f2:cc:51:1e:29:a0:1b:ab:e3:2c:7b:bc:a7:9c:2b:fb:41:
         f1:de:ae:d9:f4:64:4b:88:22:ed:4d:08:3f:d6:71:b2:73:c7:
         0f:18:e6:6f:3d:4e:ed:86:2c:b9:21:83:eb:5d:ac:ee:ca:4c:
         1f:9a:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:17:42 2024 by rpki-client on console-fra.rpki-client.org