Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
File:                     PuzUyqmjpXcV49XWa8zXGFr-QNo.mft (raw, json)
Hash identifier:          jMterS8wyUyIgzHqpFd4EBLRaIR+CKpepDCnkcYWdZg=
Subject key identifier:   1E:9A:48:E2:A7:20:9A:94:91:06:E5:59:FA:26:88:75:C5:52:B1:A3
Authority key identifier: 3E:EC:D4:CA:A9:A3:A5:77:15:E3:D5:D6:6B:CC:D7:18:5A:FE:40:DA
Certificate issuer:       /CN=3eecd4caa9a3a57715e3d5d66bccd7185afe40da
Certificate serial:       018F87EDD2FA89AC2C6F1C2F953E40FC3D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
Manifest number:          1181
Signing time:             Fri 17 May 2024 19:01:01 +0000
Manifest this update:     Fri 17 May 2024 19:01:01 +0000
Manifest next update:     Sat 18 May 2024 19:01:01 +0000
Files and hashes:         1: PuzUyqmjpXcV49XWa8zXGFr-QNo.crl (hash: gRaNFDui8UGnHDLPL9FHLcmndYw7ywhXlnbiGidXtYQ=)
                          2: _qRr_hYypyBPLYoGSzYhoIebQgs.roa (hash: mXfpkQOOejnhb2BZNrE/tm/lroZTBepBrnyt2Girav8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:d2:fa:89:ac:2c:6f:1c:2f:95:3e:40:fc:3d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eecd4caa9a3a57715e3d5d66bccd7185afe40da
        Validity
            Not Before: May 17 19:01:01 2024 GMT
            Not After : May 18 19:01:01 2024 GMT
        Subject: CN=1e9a48e2a7209a949106e559fa268875c552b1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:1a:ce:32:d6:03:53:4a:48:d6:d8:e7:67:
                    7e:58:d2:1e:2a:26:84:e3:0e:b7:2a:31:1e:00:d8:
                    29:cb:ba:f3:36:e7:2a:ef:e2:bb:bb:b2:bc:02:67:
                    67:71:ee:22:29:62:16:ab:49:7d:c7:eb:51:63:38:
                    f2:32:ee:c6:13:37:77:96:ad:26:71:3c:41:52:10:
                    d1:bc:18:05:d9:af:f6:28:40:4e:00:27:04:95:16:
                    c9:e9:8c:bc:f7:ea:bf:2b:69:f5:81:63:fb:69:31:
                    c1:f8:2b:6f:e0:6b:89:15:f3:ba:ac:33:a7:6b:3f:
                    f1:73:57:32:14:f3:7d:c5:da:29:22:92:de:3f:e4:
                    2e:89:5f:f9:73:bb:b2:c8:55:b9:54:be:5a:0a:40:
                    e8:89:83:ba:cc:2e:5f:14:3c:70:98:a6:4e:de:ed:
                    2d:d6:93:b2:2f:d1:64:37:e4:e2:85:f5:c3:11:bf:
                    70:1c:74:b0:71:82:bf:24:98:00:85:30:5b:34:68:
                    4e:38:ff:97:c9:26:dd:59:a7:be:1e:54:b5:4c:a2:
                    3a:e7:50:40:00:eb:50:ba:0a:87:16:ed:e6:20:89:
                    a3:8c:8d:c3:28:71:6c:c1:1f:81:e2:12:bb:58:86:
                    5a:92:40:d0:ba:4e:ec:b3:1f:7e:ba:12:cd:aa:19:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9A:48:E2:A7:20:9A:94:91:06:E5:59:FA:26:88:75:C5:52:B1:A3
            X509v3 Authority Key Identifier:
                keyid:3E:EC:D4:CA:A9:A3:A5:77:15:E3:D5:D6:6B:CC:D7:18:5A:FE:40:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:31:9e:dd:ff:8c:d2:46:34:48:4a:55:8f:b0:76:7b:26:8e:
         92:01:49:ef:de:0f:93:0a:ae:d7:1a:96:04:37:fb:6f:67:e4:
         63:ec:a2:0c:b0:e9:87:0f:17:44:e5:46:56:f7:48:d8:f6:fd:
         44:ed:dc:ad:a8:71:f5:3f:2a:4c:71:92:de:2c:af:9e:9d:6c:
         cd:c6:48:b4:5c:23:46:0f:d8:a6:12:05:35:bd:ff:cb:3d:e3:
         ff:4b:cc:90:87:3b:86:88:e7:d1:57:d5:16:f6:7d:ed:cc:46:
         45:51:9c:71:9b:60:70:aa:2e:91:af:62:a4:f1:5a:41:f5:2e:
         bc:4d:ea:1c:85:eb:a9:0c:84:58:27:6b:cd:e1:b2:8c:68:05:
         e5:44:8c:d8:0b:af:7b:95:a2:6a:97:b9:2f:ca:42:70:16:3c:
         9f:30:a4:70:10:ff:05:3f:5f:a7:09:2f:10:4a:4c:c3:c0:98:
         5e:2e:a7:ac:8b:0d:5d:70:d9:3b:c9:0d:8d:21:a1:2c:23:11:
         d5:ca:7e:07:65:3d:1a:29:47:d8:af:ee:dc:bb:76:6a:a3:8c:
         b4:ae:29:af:65:90:79:23:fd:48:ef:d5:0d:7f:b2:8c:27:84:
         cb:9d:cb:86:72:e4:75:3f:c2:9a:01:4e:8a:31:6e:a6:9f:5b:
         6f:9c:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:23:22 2024 by rpki-client on console-ams.rpki-client.org