Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File:                     pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier:          gYxtkWMxWs8A/p0PvYHk6DRWDV/ugWx81TrAc7Djy/Y=
Subject key identifier:   9A:CF:B8:29:8D:D1:29:7A:B7:0C:30:68:83:DC:33:2C:FC:79:8B:33
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer:       /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial:       018F885B4D30730524C23B9559DE495BA258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 21:00:35 +0000
Manifest this update:     Fri 17 May 2024 21:00:35 +0000
Manifest next update:     Sat 18 May 2024 21:00:35 +0000
Files and hashes:         1: Ld6H9qvu2mlR2NBjvRsZ6zjmfi8.roa (hash: uk02gk6uMo1nx0+/0fwbJJM/68DWBqyTURMNl3fa9XI=)
                          2: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: 9ifsZ4vSDwi64wZ6HQAovVYnSJ+BN1xAxqZOLkSbz+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:4d:30:73:05:24:c2:3b:95:59:de:49:5b:a2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
        Validity
            Not Before: May 17 21:00:35 2024 GMT
            Not After : May 18 21:00:35 2024 GMT
        Subject: CN=9acfb8298dd1297ab70c306883dc332cfc798b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ba:f2:04:25:63:c1:f2:71:fa:79:72:e0:8c:
                    5c:80:5f:02:a2:6e:7f:44:6e:7a:0b:23:99:05:cf:
                    c3:ac:fa:87:2e:89:a9:5d:01:01:31:59:50:e5:c5:
                    a6:26:fa:39:3b:f4:f2:99:6d:b0:77:65:15:95:4e:
                    a0:79:a8:61:e1:1b:ce:e8:85:f5:cc:a1:5b:4a:b1:
                    27:fa:bf:b7:64:41:8c:87:81:e3:e0:e9:8d:8f:13:
                    b8:cf:0a:4d:a1:14:f1:e0:d4:1b:51:6b:30:6d:c2:
                    66:4a:a7:33:df:9d:36:ac:c1:62:51:87:e1:59:25:
                    c2:cd:9f:69:29:4f:d4:3f:a3:63:bd:40:68:7f:59:
                    4b:f0:c1:c7:8f:91:8d:20:20:c2:ba:55:cc:2f:b7:
                    a9:f4:05:01:94:4d:51:43:44:a6:91:28:41:66:4d:
                    8e:f0:e3:b0:7d:97:9f:0f:97:09:37:04:63:60:20:
                    4d:a3:58:42:9a:55:71:21:54:17:1e:4f:d2:52:01:
                    de:44:7d:79:48:e2:97:1b:f6:15:06:18:31:a3:a8:
                    be:2c:b3:67:dd:61:bf:7b:d8:53:2c:ab:f3:54:a7:
                    de:10:e5:fb:96:2b:e0:e5:9f:30:86:b5:bd:67:2e:
                    8e:0a:5e:82:5f:6f:6d:64:35:bf:6f:6c:11:ec:eb:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:B8:29:8D:D1:29:7A:B7:0C:30:68:83:DC:33:2C:FC:79:8B:33
            X509v3 Authority Key Identifier:
                keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:16:37:4b:82:a6:fa:fe:11:85:a1:ce:de:8a:7f:1d:ac:
         64:b6:a4:59:d2:4d:c9:9f:d8:5e:79:87:dd:ec:1f:1c:f6:57:
         77:fc:bc:2f:8a:f0:64:9d:23:34:07:07:fd:c9:14:6f:d6:8d:
         a4:4e:e1:98:73:6f:24:a3:84:b7:7d:4d:5b:8a:5d:fb:ca:1d:
         30:d0:46:11:f1:26:13:f7:7f:bb:e7:ed:1c:fa:f4:bd:7b:1b:
         27:35:d2:76:e0:8c:dc:2b:ba:62:69:37:da:27:13:fd:84:87:
         d3:b5:1a:b8:32:ea:c8:19:d4:ff:54:45:84:d7:ae:00:a3:68:
         27:ce:45:0f:6a:2d:83:ae:b0:bd:a4:b6:40:0b:52:13:5c:fe:
         04:9a:bb:10:eb:ee:ee:48:dc:25:e6:73:48:d3:91:ec:6d:af:
         4c:d0:58:9f:40:95:c4:39:f7:f9:c8:b8:81:76:cf:38:69:0d:
         57:89:8e:66:42:47:fe:98:e9:71:51:54:8a:2e:e8:2d:5b:c4:
         03:d3:7b:76:b4:c5:b0:07:83:8a:10:ee:99:44:53:07:6c:07:
         e4:a5:e5:4e:7a:39:0a:50:5a:f6:2e:37:8b:69:65:4a:26:a0:
         14:0d:76:9b:22:cb:e1:4b:a8:d8:25:fb:67:d8:23:75:a2:ef:
         29:5a:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:20:15 2024 by rpki-client on console-ams.rpki-client.org