Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          Tu8bT2kMhqne1DC+f7FIAk8Ql3xYxHzmcCsxb08IjWU=
Subject key identifier:   F3:A4:3D:14:EF:B4:BD:C8:20:F4:9D:86:E3:10:F3:E8:C9:0D:34:5F
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       018F87B698D310E8C4AE01D413E5B0E8727D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:41 +0000
Manifest this update:     Fri 17 May 2024 18:00:41 +0000
Manifest next update:     Sat 18 May 2024 18:00:41 +0000
Files and hashes:         1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: h0q+CkneCS9REm4NceQJvFzlgJO9o4cu62r2V6VwMfE=)
                          2: tZr1mRUT5WVDSTOZrtWl-benvkI.roa (hash: ygW3CH+Gpi0XqwD9BFNVk6zliFA8ROp1qIgzYB0jql4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:98:d3:10:e8:c4:ae:01:d4:13:e5:b0:e8:72:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: May 17 18:00:41 2024 GMT
            Not After : May 18 18:00:41 2024 GMT
        Subject: CN=f3a43d14efb4bdc820f49d86e310f3e8c90d345f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:c5:f5:a0:a7:70:67:64:ec:7b:bb:60:33:
                    39:42:39:47:02:ca:f9:f0:fc:8f:30:a6:0a:76:0d:
                    a4:46:62:1d:b5:d6:69:e0:ae:f6:a5:5c:2d:d2:27:
                    d3:69:23:ba:d6:27:54:29:16:c6:b8:19:97:c6:89:
                    8f:02:b2:1f:6c:c8:fd:8a:54:cf:5d:9f:55:88:91:
                    7b:f1:c3:d5:32:41:4f:31:53:d5:52:bd:3e:a8:f6:
                    c1:e0:63:81:9c:9c:13:a3:7a:e8:cd:2b:4f:14:8f:
                    75:2a:c1:ba:12:aa:1e:86:c2:73:82:97:fc:da:71:
                    27:a5:c6:c1:38:37:73:e8:88:06:a8:ee:af:19:3d:
                    f9:a0:2a:5e:80:75:4d:df:e7:2b:ed:63:90:14:56:
                    2a:c5:45:fb:73:00:38:6c:41:9e:90:cc:d7:2e:55:
                    20:84:a8:c4:73:2c:4b:28:d3:42:f5:84:4f:8b:6e:
                    c6:38:4f:25:06:5b:cb:10:4a:ac:25:ce:a4:92:98:
                    65:fb:8c:d4:e0:8f:41:94:6c:6a:7e:57:87:07:bd:
                    5a:2d:8a:30:87:1d:cc:d2:48:ee:0f:07:7a:39:10:
                    db:04:6a:0b:1d:4e:c0:2d:c5:c1:60:e5:1c:e4:1c:
                    94:f0:75:4d:be:2d:5b:3a:5c:95:e0:06:12:fb:d1:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:3D:14:EF:B4:BD:C8:20:F4:9D:86:E3:10:F3:E8:C9:0D:34:5F
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:35:71:14:7b:b9:f0:0f:64:49:a5:b3:1f:ff:b4:d2:78:61:
         3a:aa:d2:1e:3d:dd:8c:a3:8b:e2:15:ae:15:23:27:6b:19:b8:
         46:e9:1f:d1:63:1f:66:4f:dd:1c:21:a4:52:92:d8:b2:a9:cd:
         55:84:c8:19:a7:20:21:f6:71:67:6a:9e:53:8e:81:e1:9d:2b:
         88:7b:2e:8c:c6:fa:03:15:e4:27:d4:7d:fc:76:2f:f3:b7:3a:
         2c:5a:16:0a:b2:52:f2:41:f3:a2:69:c4:c3:fb:c8:d5:0e:2c:
         21:b1:00:6d:4b:86:18:11:66:3f:00:a2:6d:c1:e0:1f:3f:87:
         91:d6:8c:f9:45:4c:9f:25:04:8d:2f:16:1d:38:d0:90:8b:f9:
         52:44:6f:9d:a6:07:d4:6b:e2:3d:7f:2c:a7:95:46:f5:e4:82:
         7f:d8:10:b5:e1:3e:29:87:68:9d:77:41:6a:f4:ac:45:16:ba:
         29:44:0f:ab:e1:15:61:32:54:7e:3c:33:81:9f:58:7e:8d:41:
         b4:a4:45:84:61:84:39:74:20:d1:6a:dd:4a:c1:4b:92:82:ad:
         8b:db:ea:50:6f:a0:1b:7e:12:1a:c2:9e:dd:ce:38:c8:33:a3:
         85:03:d9:62:00:ec:9f:17:e8:bc:82:53:6f:22:46:cc:cc:56:
         c2:44:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:40 2024 by rpki-client on console-fra.rpki-client.org