Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File:                     PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier:          imNb01PX6kRLSP/8Vkw76Dhdc7sRQsKKUdz+Wr2/u2g=
Subject key identifier:   1C:CD:4E:A6:82:FB:0D:18:7D:65:64:D1:DD:2F:6F:24:D3:6E:29:34
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer:       /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial:       018F8AB726E52B1EAFA8743083EA5AB7E5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number:          03FC
Signing time:             Sat 18 May 2024 08:00:09 +0000
Manifest this update:     Sat 18 May 2024 08:00:09 +0000
Manifest next update:     Sun 19 May 2024 08:00:09 +0000
Files and hashes:         1: MbmLFVlz3Z_PtoogvlV5R2w4dyw.roa (hash: 9rSQ+ACHazOG/xbp0K7+Pt3Duxbq9J4eIQPdKQUNgkM=)
                          2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: BHFPcX7s+kJ64IxuFjJNh4JliG0IUZnp9hWlDy5jRK4=)
                          3: ZamqP1ip1FXfMzoBGsBUQJFl5Hs.roa (hash: VtU6mnl9H4NWdNwsoyUoYeN3NKr9hoiiuaRhOOOXNnw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:b7:26:e5:2b:1e:af:a8:74:30:83:ea:5a:b7:e5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
        Validity
            Not Before: May 18 08:00:09 2024 GMT
            Not After : May 19 08:00:09 2024 GMT
        Subject: CN=1ccd4ea682fb0d187d6564d1dd2f6f24d36e2934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:70:5d:85:d5:d8:3f:54:85:b7:fd:e7:8d:
                    d5:4a:e3:18:ef:62:ce:73:17:ab:f4:50:44:66:ec:
                    54:0a:17:37:3b:12:31:46:73:21:97:e8:ae:90:25:
                    81:d9:e4:94:86:21:1e:e1:1b:2a:37:90:16:e4:e5:
                    fa:01:34:15:94:08:3c:27:ef:f8:e0:99:3f:a1:b0:
                    a2:b9:4b:d6:d1:1e:87:de:5d:ad:50:4a:05:16:d8:
                    3e:7a:74:35:1b:e5:a3:dd:cd:ae:58:3d:af:8b:ef:
                    dc:48:5b:aa:10:6a:74:e1:56:1d:a4:2a:4b:95:62:
                    7f:09:db:02:b6:13:85:4d:3c:c6:53:8e:66:4b:dd:
                    6d:d6:8f:00:8a:e7:4e:7e:e2:51:03:c2:cb:c5:3f:
                    67:4f:0e:06:0b:e4:e2:1f:2a:1c:6e:00:d9:88:fd:
                    3a:f2:5a:e2:69:16:c3:7d:e4:c0:53:f9:4f:ea:23:
                    43:1c:d8:54:ef:e4:b6:30:9d:be:53:62:82:5c:66:
                    e6:1f:c4:13:b1:83:4e:9b:a1:f4:1a:9d:5c:04:4d:
                    7d:15:5e:ec:d1:e1:67:30:3c:f2:92:13:e7:7f:fb:
                    69:30:4d:a6:4a:ed:e1:c9:20:f5:a5:42:6d:f9:58:
                    c2:55:48:d7:01:10:5d:dd:13:07:34:4b:b7:b0:95:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CD:4E:A6:82:FB:0D:18:7D:65:64:D1:DD:2F:6F:24:D3:6E:29:34
            X509v3 Authority Key Identifier:
                keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:13:58:8f:b7:42:cc:23:73:c2:83:ec:88:6f:98:47:b5:dd:
         ab:bc:19:a8:c1:d4:46:e9:3c:56:fe:90:78:94:43:52:2c:c0:
         34:35:fd:af:31:6c:65:96:26:63:bd:3a:64:99:8d:df:99:bc:
         3f:21:f0:eb:27:c3:c4:ee:3f:40:f8:0e:18:b9:de:4b:0d:72:
         04:27:e5:48:97:19:55:1a:b7:ba:2e:27:9e:82:1a:e9:61:e1:
         0c:f8:40:36:60:4f:94:ea:0a:be:9a:8e:b2:09:92:f5:e7:c4:
         4f:ee:c5:cf:6c:b4:c7:a2:23:d1:c5:15:e5:fc:08:0e:b3:d3:
         9a:4d:5b:2f:2c:a9:43:1e:dd:e0:ba:d0:f1:86:31:33:cc:ec:
         e8:7d:68:ea:7a:3f:e1:1b:ba:60:50:1e:b0:70:11:91:5f:8d:
         11:23:25:8d:c6:98:aa:4a:c1:58:58:69:17:20:84:01:17:c6:
         48:24:72:6a:76:8d:0a:8d:c3:af:79:dc:90:6f:f1:d3:69:a7:
         06:2b:3b:80:78:f3:8d:b6:0e:db:ae:ad:71:76:5e:f0:3c:4f:
         20:d9:7c:fe:da:c5:8b:5c:0a:b4:c7:45:d9:f1:04:5a:1e:19:
         e4:36:16:ea:24:db:35:13:44:a9:86:c9:20:f0:97:c5:cd:05:
         e0:d9:c5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:50:39 2024 by rpki-client on console-ams.rpki-client.org