Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File:                     PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier:          4V3iRHSGq1fn9QzeaNiM0ZJ8OaOJN+dHxzL/f9Xyhng=
Subject key identifier:   34:B3:B0:BC:F1:69:47:A7:AD:96:DA:65:28:E2:BD:9A:06:29:60:BB
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer:       /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial:       018F874ABF4078CAA2898D2CB7FCDBE0166B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number:          0BB4
Signing time:             Fri 17 May 2024 16:02:53 +0000
Manifest this update:     Fri 17 May 2024 16:02:53 +0000
Manifest next update:     Sat 18 May 2024 16:02:53 +0000
Files and hashes:         1: 45uoar-h3ujfgFyGuGc0JV5-O8U.roa (hash: VSM+A23rMFUuUddZD21ZdGf9wKbvg/mtSBG37QE9g7g=)
                          2: 8CQBA9UIbsIXK-KQ8bRKpzHFfF8.roa (hash: iqQGG94M21CF5Z3HkA6hxLOLMuPvZwZiiDQ2KvSaibY=)
                          3: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: ac5qPNG+JSyXFL7mzj2gbIZxwZgvnzpGW86iFlc1NkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:bf:40:78:ca:a2:89:8d:2c:b7:fc:db:e0:16:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
        Validity
            Not Before: May 17 16:02:53 2024 GMT
            Not After : May 18 16:02:53 2024 GMT
        Subject: CN=34b3b0bcf16947a7ad96da6528e2bd9a062960bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:64:ac:75:21:91:6b:0a:2e:33:bb:da:eb:31:
                    3b:81:b1:8b:47:0c:e2:bc:60:4d:1e:25:c3:03:ee:
                    91:fe:4a:36:20:14:7e:e2:20:03:5b:57:71:e2:4c:
                    a1:7f:46:00:fe:56:19:87:e8:4d:ab:74:41:07:6d:
                    6e:08:7d:3a:ea:d4:29:a2:bf:f8:23:21:76:21:1c:
                    b2:a1:ec:3c:58:22:93:83:64:ef:a6:64:5a:18:89:
                    3c:f2:09:25:3a:22:0c:b9:5f:d9:dd:07:13:57:f2:
                    ab:49:0f:6d:f5:fc:9e:35:de:ea:2e:1f:c3:64:9c:
                    fa:5b:eb:9c:d2:39:7f:1e:ce:e0:19:12:4f:d3:45:
                    56:2d:57:49:72:7b:0c:0b:95:aa:23:b1:66:27:db:
                    53:4d:87:15:78:f2:b3:fb:82:da:ac:de:9b:2b:aa:
                    d1:61:62:ec:d2:23:81:db:31:a5:d0:b5:43:83:45:
                    66:4b:22:2c:7a:5f:f9:46:89:ab:68:53:12:6d:55:
                    1d:86:94:0e:66:13:c5:da:2e:a1:a6:63:ad:de:4b:
                    55:42:06:52:a2:9a:25:db:82:15:cd:9e:c3:ca:2c:
                    51:51:24:79:52:f6:db:3d:5c:3b:56:7b:77:e5:ae:
                    2e:ea:6a:fd:98:f3:63:e8:b3:57:31:2a:72:96:40:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:B0:BC:F1:69:47:A7:AD:96:DA:65:28:E2:BD:9A:06:29:60:BB
            X509v3 Authority Key Identifier:
                keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5d:05:9d:30:2f:05:2d:25:e3:44:ce:60:46:ee:43:e5:85:
         d9:ad:f4:22:5b:e9:89:fd:b4:10:e1:0a:67:a5:ec:4e:e5:23:
         1b:15:0b:6b:77:a6:e5:4c:be:e1:82:ce:bc:1f:39:41:9c:80:
         ef:47:36:ff:37:98:92:38:4c:6e:6d:f8:a8:d2:6a:e7:f3:7c:
         88:ff:c6:70:0b:32:02:75:d3:c4:72:1f:e9:50:20:05:51:4b:
         56:60:c4:60:f0:56:a4:b5:e9:ae:5f:ba:0a:fe:c7:04:71:5f:
         65:82:b5:11:b5:be:a8:49:8f:b0:5e:56:9a:bc:09:5e:94:8a:
         d3:1a:fc:7d:9f:47:89:2e:bf:6e:b0:ba:82:38:de:93:3b:60:
         5d:8d:e9:62:08:98:a6:b9:0d:e2:cb:0e:11:e3:99:d7:65:9a:
         cf:01:5a:07:f1:f8:72:ac:6e:2f:7c:49:dd:cf:64:9c:8e:02:
         aa:10:63:4d:79:9f:08:19:0c:7c:e6:d9:18:af:ea:f7:b3:64:
         d0:6a:c9:ae:d1:44:d6:75:0a:09:7a:f8:17:c1:7d:e6:3c:eb:
         ef:da:fc:fb:54:7a:52:d2:3c:2f:ee:79:4b:86:f9:49:6a:d6:
         c2:3f:57:67:73:8b:95:82:07:1d:03:6f:63:e9:9a:c1:3a:a0:
         87:a7:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:34 2024 by rpki-client on console-fra.rpki-client.org