Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File:                     pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier:          2XsRNZfUO1ug6I+/K2esqTjlMyLWbUhFUxqE2obyPDQ=
Subject key identifier:   3B:E3:89:E9:49:79:5A:A7:F1:0D:80:D2:9E:AF:00:3A:AB:D6:BB:E0
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer:       /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial:       019358776B53DF8325011D508810EFF3E640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number:          0BD0
Signing time:             Sat 23 Nov 2024 10:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:41 +0000
Files and hashes:         1: Xk9rUIFUBW30gDAyg_gxbiD-Ttc.roa (hash: zrBJjzuVBEEhe4sS2r5Tp/P7z+hAi6gokzsX4FhJR2E=)
                          2: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: kt5jBcM49Nq2SIdaWzAl1Pfo9L1nLFnaIA2CDUsIRoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:6b:53:df:83:25:01:1d:50:88:10:ef:f3:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
        Validity
            Not Before: Nov 23 10:00:41 2024 GMT
            Not After : Nov 24 10:00:41 2024 GMT
        Subject: CN=3be389e949795aa7f10d80d29eaf003aabd6bbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:b6:33:79:02:02:c0:44:95:69:bd:99:98:
                    12:15:e4:e7:2c:5e:a0:0d:3a:69:d5:a1:07:47:74:
                    2f:fc:bb:c7:5a:dd:85:a1:60:91:19:7c:26:f4:4d:
                    16:91:41:da:47:17:e3:65:35:cd:d7:ed:2b:6a:3d:
                    86:fb:d3:ba:ad:09:af:4d:a7:3f:ce:d5:7d:e1:9b:
                    83:24:4a:26:46:77:b4:d6:68:a8:fe:52:cf:ee:06:
                    c8:d9:14:a2:9f:9f:9e:1b:8c:75:62:5f:a1:c7:10:
                    43:d1:da:fc:e5:00:c7:34:14:d5:ee:a8:dd:1f:4d:
                    25:3d:32:ad:36:b7:66:25:bd:c1:41:bf:c9:1d:64:
                    41:b2:2b:2c:40:96:86:16:18:d3:82:df:f0:7a:1c:
                    6f:9d:f1:28:a4:e8:62:28:9a:ec:ba:c3:8d:1f:84:
                    1c:23:23:4d:26:36:d4:11:c3:a4:07:84:69:54:53:
                    ab:03:6b:bb:b6:65:ee:e7:57:c2:39:3f:0c:a7:51:
                    c4:c9:50:1e:d0:1c:ac:8a:84:fc:79:c9:fe:8c:e6:
                    c9:57:35:04:1a:8a:a5:66:cf:4c:02:fe:55:39:96:
                    14:09:43:a1:1d:23:0c:f9:b5:6f:33:9e:89:0f:f4:
                    f1:77:83:58:7d:4b:ae:87:a8:fd:61:0d:53:7d:0d:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E3:89:E9:49:79:5A:A7:F1:0D:80:D2:9E:AF:00:3A:AB:D6:BB:E0
            X509v3 Authority Key Identifier:
                keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:eb:20:37:b8:fb:d2:e9:e7:95:3e:e7:a0:2b:d1:e6:fa:
         86:a5:73:76:59:48:a0:0d:90:c1:30:c8:c4:47:2b:99:2b:67:
         c9:f4:b3:73:2c:c9:26:fe:15:67:f1:25:3b:2c:cf:f3:17:d0:
         25:29:2e:7b:03:6a:cf:49:01:1b:35:90:7e:3e:49:a0:cc:ef:
         dc:95:22:06:4f:00:d8:d3:76:22:45:3f:d0:3f:6f:81:62:54:
         58:84:94:fb:86:46:0c:70:f2:d7:b5:34:4c:ca:6f:b1:b5:a9:
         af:c1:af:d2:cf:bf:46:0a:af:ed:fb:c1:16:e8:17:5a:ee:b2:
         38:85:3c:39:70:be:7f:d9:84:f2:bc:49:c7:6b:63:97:7a:a8:
         50:da:32:3b:4a:7a:60:9c:37:1c:9c:b4:c7:eb:2d:dc:6b:d2:
         db:1f:c5:46:23:d3:0e:64:52:46:8d:6d:ff:9f:de:c5:9e:dc:
         18:3a:17:8f:d7:76:d7:55:e3:49:31:6a:f4:fb:a0:56:00:5a:
         86:73:b5:20:69:3e:3e:07:8f:e8:86:a2:4c:49:48:52:f2:79:
         16:8b:00:67:ad:5b:d9:31:bb:fc:73:20:53:35:8e:f0:c4:3b:
         79:c2:cb:ca:31:cf:9c:c5:fb:6b:4d:f4:6c:fa:ac:ce:2f:4a:
         86:d6:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:04:31 2024 by rpki-client on console-fra.rpki-client.org