Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File:                     pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier:          Pv6i2qWFWvCogDW3LRIZ83UYXIb6jUnuWkMzydQQ+Cs=
Subject key identifier:   2D:E2:DC:88:DE:E7:C5:1E:EF:24:F9:C1:8A:33:39:C6:04:6A:F7:CF
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer:       /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial:       018F87493CB0C864CF4F840157F94252B766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:01:14 +0000
Manifest this update:     Fri 17 May 2024 16:01:14 +0000
Manifest next update:     Sat 18 May 2024 16:01:14 +0000
Files and hashes:         1: Ff0wTrfLYQZTsnYLnCNlXChEv3s.roa (hash: gYEY0vSmUQ48UCslhyK66qDtltu8OJgzX/F2G04eSNs=)
                          2: GXEw_qGCVwAVM9baiwHSxUI6R4w.roa (hash: QYSV3lFUMuEiJCmTTlWmNNBw6s2ju6vB8Y5+ydoZND0=)
                          3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: 56Cb2mfhWKuYpRDN3OyDvlBmkQt/VJkQ1w9lji2v8Ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3c:b0:c8:64:cf:4f:84:01:57:f9:42:52:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
        Validity
            Not Before: May 17 16:01:14 2024 GMT
            Not After : May 18 16:01:14 2024 GMT
        Subject: CN=2de2dc88dee7c51eef24f9c18a3339c6046af7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:d5:91:71:a6:7c:5f:49:92:bc:c7:21:c9:
                    bd:db:2e:1c:74:7a:e2:57:33:f0:f5:29:5a:d7:9a:
                    ee:54:eb:b8:08:4c:4b:56:14:dc:b3:80:09:c3:df:
                    39:b6:00:98:34:ac:18:be:20:47:03:72:1d:75:ba:
                    3f:27:43:d9:2b:ac:20:57:65:98:07:15:66:3e:be:
                    18:2d:b4:c7:32:10:26:36:8a:fc:f4:4b:68:da:39:
                    9a:dc:3e:e7:e4:88:ac:2f:4a:ee:4c:a3:ec:03:1b:
                    a7:bc:62:41:25:7c:24:02:7e:27:75:00:77:04:2e:
                    a7:4d:8f:ff:bd:6d:50:d9:f8:08:5d:ee:ff:bd:be:
                    ee:82:d3:85:d8:75:82:b9:9c:b2:23:a5:6d:10:b1:
                    23:10:74:13:bf:08:82:ee:01:96:63:85:b4:75:f3:
                    5f:69:16:2a:ec:d1:7d:77:e0:76:8d:78:cd:f2:42:
                    85:4a:f5:85:c7:5e:63:c8:25:49:a3:e8:e6:d4:66:
                    01:37:24:3c:27:7a:dc:d9:21:48:96:8a:51:4b:4e:
                    93:2b:b8:d3:02:93:36:5b:f6:c4:85:39:2e:48:b0:
                    44:a3:4f:ae:4c:f0:24:f0:ee:82:89:8b:d8:ec:f8:
                    a2:c2:fb:e5:f1:f7:ab:56:17:33:33:a8:12:4d:71:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E2:DC:88:DE:E7:C5:1E:EF:24:F9:C1:8A:33:39:C6:04:6A:F7:CF
            X509v3 Authority Key Identifier:
                keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1e:8f:c2:64:24:bd:73:78:24:a4:7e:8f:4d:c6:f3:01:af:
         f3:6f:03:79:7d:2e:1c:a8:66:9a:bf:6b:5c:b5:b7:1b:34:44:
         fc:9d:54:8b:0c:ab:ca:1d:39:81:40:af:34:37:1c:41:58:62:
         1f:3e:12:1d:73:43:02:bd:1f:99:2e:80:ff:2d:76:d2:d4:1c:
         f8:7f:1f:9e:10:18:f2:ec:c8:1b:61:13:a4:29:9c:71:ff:f5:
         35:ae:4b:2c:4a:17:56:26:0b:4d:94:83:f2:31:79:49:96:a5:
         0a:ea:eb:a6:06:d0:c0:28:8f:af:ab:c9:19:0d:30:50:bb:e3:
         e9:ae:4a:3a:96:bf:a0:f3:a7:40:7d:35:34:da:e8:6b:9a:71:
         c5:8d:19:38:3b:ca:02:70:f1:26:97:36:64:dd:96:1d:9b:d5:
         da:a4:68:0a:e4:30:99:9d:dc:5f:32:85:c2:30:bb:93:3d:a7:
         87:d2:18:07:1f:22:0d:bb:89:66:cd:fc:e9:13:32:69:f7:37:
         59:02:5c:7a:64:23:b0:3d:cb:44:aa:2a:f5:d9:6d:9c:a4:28:
         4a:8a:80:37:b4:d3:98:cd:8c:e5:4c:9b:3b:9f:20:82:98:54:
         8d:03:3b:01:a4:12:08:83:bf:40:92:81:f9:ff:f0:71:f3:22:
         2a:d4:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:13 2024 by rpki-client on console-ams.rpki-client.org