Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File:                     Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier:          fFxF1SuUYl426gQHAh/vIO/VTsksWbyBzaFO6dVhRSQ=
Subject key identifier:   ED:F7:F3:71:73:E5:44:A9:C8:A6:5E:26:68:76:2C:90:CE:F1:43:23
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer:       /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial:       018F885B3E12A6A1E9EEC36DACFAF734EBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number:          0E0D
Signing time:             Fri 17 May 2024 21:00:31 +0000
Manifest this update:     Fri 17 May 2024 21:00:31 +0000
Manifest next update:     Sat 18 May 2024 21:00:31 +0000
Files and hashes:         1: NgIqyBbr9FZQ87TP7arvQKj9pMc.roa (hash: EJaRajFsQL9HVbiGxqudLiOhYfZ72YBjmZRATIp9f64=)
                          2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: lHuI9bExE9jStK/YdyeRjlW9Aku12Cl8d8N+yH8clfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:3e:12:a6:a1:e9:ee:c3:6d:ac:fa:f7:34:eb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
        Validity
            Not Before: May 17 21:00:31 2024 GMT
            Not After : May 18 21:00:31 2024 GMT
        Subject: CN=edf7f37173e544a9c8a65e2668762c90cef14323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:47:d6:e0:5d:51:05:a6:af:d3:9a:3b:5b:
                    ad:8e:45:01:a5:5d:5d:95:e1:a1:15:00:fc:2e:33:
                    d3:2b:c6:c9:3e:37:ad:b8:a9:63:23:d2:ef:64:51:
                    59:8c:de:fd:25:f8:44:7b:28:04:9a:58:84:46:e6:
                    0b:c4:6f:af:37:b6:e1:bf:2b:40:15:b8:ba:2c:fd:
                    9b:d7:16:5e:d3:b2:9a:9b:5a:4c:92:47:b9:55:99:
                    35:3e:78:c3:12:07:05:70:ad:bf:3f:8c:48:86:06:
                    a6:6f:be:f5:ad:b8:30:9e:6b:e4:eb:0b:42:19:cc:
                    84:0a:60:39:b7:79:bc:8f:21:fc:9d:aa:0f:44:bb:
                    32:46:63:6e:a9:3c:77:64:37:8c:45:4f:3b:69:97:
                    93:ad:a9:eb:f7:70:98:48:25:cf:ff:94:f8:5e:46:
                    7e:a6:68:f1:ab:78:9e:35:b6:34:f8:25:51:9c:73:
                    3f:54:c3:a4:23:7e:9e:e3:49:e3:e4:79:05:b1:a6:
                    e5:6e:c5:d6:2b:be:1e:0c:a7:49:10:8d:c2:7d:c2:
                    a6:17:21:98:31:97:db:17:79:81:16:a5:7f:35:f5:
                    8a:5e:a7:ae:89:e3:e6:61:04:28:f4:42:26:93:14:
                    b6:5f:b6:fb:75:94:c2:f7:2e:7b:75:51:19:0f:dc:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F7:F3:71:73:E5:44:A9:C8:A6:5E:26:68:76:2C:90:CE:F1:43:23
            X509v3 Authority Key Identifier:
                keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f7:14:7c:b2:1f:44:2f:6d:dd:28:d5:60:dd:73:74:0e:54:
         ed:82:39:fd:92:57:c9:64:19:9d:23:c4:10:a5:cf:4f:b3:6e:
         eb:78:86:d1:0b:51:22:6c:cc:90:19:34:c1:5e:be:27:bc:87:
         38:ad:de:a3:eb:95:a5:c4:35:82:5e:4e:23:72:d7:d5:1c:76:
         b6:d3:0a:5b:80:28:d3:62:67:6f:a6:88:df:de:27:4b:74:9b:
         33:4c:5b:14:67:36:ec:ac:00:be:2c:44:d5:99:34:cc:a3:29:
         e5:80:88:b4:d9:ce:20:fd:0f:cb:66:2b:fd:fe:b7:d5:42:32:
         b5:7e:2d:ed:72:5f:07:b9:ba:58:67:78:da:8a:1a:15:4c:0d:
         7f:b6:21:a8:77:33:cf:ec:32:b4:4b:04:67:c3:25:20:bf:55:
         91:db:a1:c6:db:80:09:c7:a3:f2:9d:c3:ef:8f:78:8c:c4:76:
         9e:10:e6:74:63:b5:48:7f:fc:94:6b:61:1c:70:be:b2:f5:43:
         e7:85:f4:b2:b6:b3:98:7a:38:cb:01:65:d0:84:07:44:66:7c:
         96:29:ed:b0:d1:1f:ce:79:f9:60:1a:2f:f9:8d:45:22:d6:3d:
         7a:fc:4d:52:10:ae:f8:4d:22:24:11:d1:d5:48:5f:03:7b:b4:
         51:a6:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:20:57 2024 by rpki-client on console-ams.rpki-client.org