Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File:                     P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier:          tRe7bRCjKmG5Xh423fckfcEu233cFzvkqA6RKMPY+E4=
Subject key identifier:   41:9B:8B:57:CB:01:CC:EC:E5:94:8F:E3:2E:61:64:BA:52:96:BD:FA
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer:       /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial:       018F882499517321E30EA95AFCA3921DF7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number:          0276
Signing time:             Fri 17 May 2024 20:00:50 +0000
Manifest this update:     Fri 17 May 2024 20:00:50 +0000
Manifest next update:     Sat 18 May 2024 20:00:50 +0000
Files and hashes:         1: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: vdb64p7UtUKD45Oqi65wi2qrYosj+NuvLm538t0tw3c=)
                          2: jP9XQVZjzOxxl-EeaR0033ojWms.roa (hash: t6DOWLwMhwKz35SMrcLcwjsMb4axFNE0nyCPcGAq/PA=)
                          3: rSyjsN3CXVKV56HHK6CNDcffWXM.roa (hash: KBYaWcPZU8xLvPyO+ltfURH+Crpulql+lX6wzfvP87w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:99:51:73:21:e3:0e:a9:5a:fc:a3:92:1d:f7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
        Validity
            Not Before: May 17 20:00:50 2024 GMT
            Not After : May 18 20:00:50 2024 GMT
        Subject: CN=419b8b57cb01ccece5948fe32e6164ba5296bdfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:18:af:7e:7e:f2:73:00:15:36:19:5a:75:
                    66:05:2b:08:c8:6e:af:a5:f8:d1:c1:42:15:6f:57:
                    83:e1:d4:0d:48:c0:37:0a:9b:39:51:dd:4e:fd:3a:
                    db:5b:88:13:2c:de:cb:c5:95:82:cb:5f:aa:1a:03:
                    0b:41:7c:53:49:cd:53:6e:3c:9e:a2:07:55:61:5a:
                    34:67:89:ae:96:e1:30:28:d2:1c:2f:f3:f4:af:84:
                    16:36:b9:96:f2:1f:06:7d:96:ad:22:c5:53:c6:1e:
                    d9:4f:c8:5e:e5:a4:8e:86:a0:0b:d5:12:4c:d3:cc:
                    54:b3:77:d2:a5:45:21:4e:14:76:90:87:54:fe:30:
                    13:5d:af:42:8c:01:92:d1:53:0e:a3:24:55:7b:a5:
                    9c:83:cd:42:b8:31:57:6d:c6:f0:3d:94:6d:74:63:
                    8d:74:50:8b:f0:46:86:e1:e8:31:f9:f4:d8:18:2d:
                    34:de:fa:0a:6d:3a:fa:65:04:7f:12:f7:47:cd:d3:
                    a4:8a:dd:be:e8:91:78:22:e6:cf:a2:bb:9c:5c:92:
                    12:e6:e7:b9:9b:83:22:8e:d1:55:32:ba:93:8f:41:
                    fa:33:b5:02:3e:45:e0:f4:c2:56:a1:d1:29:05:07:
                    b6:1d:c0:82:b9:04:e5:a6:aa:ed:3c:1b:ba:90:1f:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9B:8B:57:CB:01:CC:EC:E5:94:8F:E3:2E:61:64:BA:52:96:BD:FA
            X509v3 Authority Key Identifier:
                keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5e:87:5f:38:28:f7:b3:aa:9a:9b:6b:ee:4b:6b:e2:b7:0c:
         11:9c:6d:d6:cc:15:f9:d7:bf:c3:96:9f:3a:24:e8:4f:c6:d2:
         b2:ff:4d:22:7f:f2:e0:28:fd:89:6b:3d:71:d0:b9:28:d4:14:
         08:1b:6b:b4:84:08:36:e2:12:9e:a3:b2:fe:52:e5:52:6c:2c:
         b1:7b:6b:1f:02:84:37:05:e8:af:0b:95:14:5f:0b:f5:45:79:
         44:ee:3d:07:e0:ce:40:3f:44:8b:ac:f7:12:68:54:c4:78:f7:
         a9:45:78:9d:18:65:e5:85:9d:e3:49:73:50:b7:e0:51:9a:f0:
         09:c3:72:80:ef:6a:b0:3b:fa:87:ff:b4:75:67:c7:67:33:ed:
         e3:df:66:d6:2f:c0:24:34:c8:84:11:68:53:92:08:c2:02:d5:
         cd:78:9d:48:cc:3c:79:8f:c0:ce:35:a8:d8:4d:33:3a:76:c4:
         61:75:bc:42:85:c9:f5:d7:26:aa:b0:d3:06:f0:f0:35:7e:25:
         2a:8e:df:94:85:bc:27:0a:6c:35:8e:f3:ae:ac:b5:8b:ff:76:
         b6:36:15:4d:6b:86:e6:34:08:76:63:ac:92:91:2a:48:8a:1f:
         16:f9:d6:b1:35:a8:a8:a3:26:0f:45:36:41:e3:c2:7c:6a:fd:
         51:bc:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:54 2024 by rpki-client on console-fra.rpki-client.org