Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
File:                     pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json)
Hash identifier:          hw6aKKavedQ7Z7x/3YLxlwaWS9JUknqnVmg1MENLw0k=
Subject key identifier:   1A:50:D8:69:7B:86:CB:45:D1:94:81:CF:65:8A:7D:9D:CB:29:15:C2
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Certificate issuer:       /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial:       018F8F021E85213703588723B47E7DCA7C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
Manifest number:          04D0
Signing time:             Sun 19 May 2024 04:00:31 +0000
Manifest this update:     Sun 19 May 2024 04:00:31 +0000
Manifest next update:     Mon 20 May 2024 04:00:31 +0000
Files and hashes:         1: 9sg4PhxQr-5el_jydpERZAvSC-Q.roa (hash: ddwuT1ddXITnIYY2z2h4BqOdUKT0kgUZv8vSV37qlHA=)
                          2: XFs96z2YDgce9cCX0VaIS0lQt1Q.roa (hash: bnr+9jFkk2vbuUc4Nrx3SpQJFQ4GmibzvKflBXU//lU=)
                          3: bzckin69qzdPH52CZp-A9oK7B3M.roa (hash: dlNYmMuFaGXCWPB56IoMF/5sKg5CmDSKXHt+p4Ekymo=)
                          4: eb8i-4uUy3Rnpd2gHhFCypXdKjk.roa (hash: +taWhNgy4xMyfCzuG0ANF8WTrvknNuBA4KDlnvOk30k=)
                          5: kTLCZepqchs8NxbELpJc1xHdWCU.roa (hash: iugym2AEBM0fPexKC1wqxiaO6NHWX6sfhmyX8+TqVfY=)
                          6: l0xsmMPMgpLmwQ8zpKNBBATIac8.roa (hash: aOPESxXVYUNdi0j7zkg1gI6qYEdMj4kJnJJdubeOhBA=)
                          7: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: 5jzYuh7yp1IFOw1RxvNXknkIOTCUzKzIufGezP2VHyA=)
                          8: zK266U-vL5-NMbLhKjURYfmZ9pg.roa (hash: y6DJPd0k/srRwBNDjjaAoDnbOEh2s3Alzzfr+d75FSY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:1e:85:21:37:03:58:87:23:b4:7e:7d:ca:7c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
        Validity
            Not Before: May 19 04:00:31 2024 GMT
            Not After : May 20 04:00:31 2024 GMT
        Subject: CN=1a50d8697b86cb45d19481cf658a7d9dcb2915c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:ac:ab:14:86:b0:2d:c8:5e:ad:b4:cd:6b:
                    e2:5f:dc:b5:e5:e3:0d:15:9f:ae:bd:04:f7:21:71:
                    e5:c2:eb:b1:53:94:f6:60:f5:87:08:1f:02:4e:89:
                    18:40:ee:df:4d:f9:b1:71:5b:c7:4d:49:7e:5d:7d:
                    cb:4d:af:2b:d4:73:ca:08:25:8a:d0:f4:63:13:ba:
                    d3:04:0a:63:df:69:09:14:d2:01:d8:1f:b7:b3:e6:
                    13:e9:82:f9:54:00:78:88:36:c1:7d:ca:09:7f:f4:
                    39:02:01:80:66:ca:f4:df:fe:18:18:ed:90:07:5b:
                    d7:65:40:88:23:f0:85:6b:d5:b2:ad:74:e0:75:0b:
                    f2:c4:28:4c:f7:78:cd:e8:0d:3b:2c:0a:4c:db:1d:
                    21:e0:1c:5f:ac:75:97:c1:93:36:2b:20:05:48:f3:
                    bf:21:76:68:fa:f8:e2:b3:1e:d8:ca:91:17:00:aa:
                    f8:52:f5:ee:c3:7b:00:24:e0:c8:52:ef:35:a9:c4:
                    03:df:c7:5f:b4:e7:78:08:31:bf:f8:f7:6d:a9:02:
                    6d:00:63:04:fb:c3:77:05:61:c9:f0:7a:a8:54:9e:
                    40:49:5b:af:e2:f9:0d:33:40:0d:d9:85:d3:02:ff:
                    db:28:87:c3:7a:b6:62:7c:39:a9:50:5a:48:30:91:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:50:D8:69:7B:86:CB:45:D1:94:81:CF:65:8A:7D:9D:CB:29:15:C2
            X509v3 Authority Key Identifier:
                keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:13:f3:aa:17:a3:36:9e:6e:56:94:61:93:80:a4:7d:98:
         55:12:55:5c:37:e1:e3:c1:09:25:2c:57:54:ec:da:ba:9c:2a:
         93:de:8e:72:5e:8e:0f:d2:88:f5:30:82:d3:9c:91:e2:7b:18:
         b9:17:07:fa:08:9a:df:b6:5b:49:84:e3:f5:ef:94:99:78:f8:
         ad:77:8e:53:e0:68:ec:eb:f1:e8:8f:0e:c2:66:bd:2e:dd:9e:
         78:ed:49:d2:e8:b5:ea:cc:51:34:58:7e:8d:f1:15:38:1f:7f:
         ef:83:22:1d:d2:1d:97:45:93:25:8e:99:98:0d:61:b8:3c:24:
         ff:ff:ed:ff:43:6b:6d:3e:38:96:9a:6c:30:c3:6e:e3:d4:cb:
         df:30:a6:b3:11:bb:0f:d6:05:92:ae:07:47:10:19:24:d1:77:
         52:0d:93:c5:cc:8a:77:e0:74:3a:3a:ec:37:5e:65:21:3d:26:
         f7:be:e1:48:85:80:e3:03:42:65:a1:ef:1c:82:27:bc:12:51:
         43:35:bc:6f:ab:20:6c:06:86:55:c8:dc:bf:6e:ee:59:52:9e:
         37:b9:34:90:8f:b8:79:0b:7b:60:dd:a7:28:a2:84:b1:23:dc:
         97:46:ba:9f:5e:ad:99:88:b7:7f:cf:b1:0a:91:8b:43:0e:57:
         db:d6:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:03:32 2024 by rpki-client on console-fra.rpki-client.org