Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File:                     PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier:          3Ux6IEWF3K+dpFh2sCw1zCgaWJzChpf16A8PHJcLtes=
Subject key identifier:   BD:62:B4:AE:6A:A6:10:A5:93:D3:64:53:1D:BA:A5:39:02:D0:CF:CE
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer:       /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial:       018F7E0EC5AFAAE9973834E9C57AA4CECE91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number:          1181
Signing time:             Wed 15 May 2024 21:00:48 +0000
Manifest this update:     Wed 15 May 2024 21:00:48 +0000
Manifest next update:     Thu 16 May 2024 21:00:48 +0000
Files and hashes:         1: EgTM9Yn5CpfpdGH1TDkTGBINaI8.roa (hash: a/Zcy8lBwvKXDeBR8bg7j7UwZI9wUGdUnJ1q+F4+pKU=)
                          2: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: fPS8RfQuc95LB3Ar2RrPbPV4I7iK24eu+DPD3rCbz0U=)
                          3: PzyWasGB3fgYPLnHKRED5BpExn4.roa (hash: podctX/ZUIGZQSvPPYrgnB6gyctDW96iMwwvCwHQNRE=)
                          4: ZVsEcdv49ncHDzzfV4Q2PktA35M.roa (hash: 1T7xwsvMJa6+SPAms6k+oweNQlGFZAgCBX5HTzBwmTY=)
                          5: c7-PGtjvlEiboxh4b3GZQw9vmqk.roa (hash: 8ZiFWrFp7cV7YPnVWvgPp7mDRsguySfqBzM417FVivU=)
                          6: mY_PK31Sy60Cf9d-WVwhwtZCxLs.roa (hash: xUUKkxVQXTUDMtfJCLa3e3OsNHQPNx3XpOGA/mTxINE=)
                          7: oTP3JCCre0XnpwJhFt4oD62GHrA.roa (hash: e89AOwfOzQZkv9cUgz0uLP07chn8jZCAR5aQkNhvQNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7e:0e:c5:af:aa:e9:97:38:34:e9:c5:7a:a4:ce:ce:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
        Validity
            Not Before: May 15 21:00:48 2024 GMT
            Not After : May 16 21:00:48 2024 GMT
        Subject: CN=bd62b4ae6aa610a593d364531dbaa53902d0cfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:e1:ad:cb:5a:f5:23:1d:d9:f2:6a:40:76:
                    c4:0b:64:3f:0c:7e:0b:27:d9:8a:f4:e8:fa:8b:9b:
                    06:33:bf:54:3a:c3:07:c9:23:12:c5:9d:f5:d6:72:
                    c0:21:2a:2f:31:50:7a:b6:5f:8a:a2:e6:f3:8a:84:
                    3d:37:7e:74:2a:8f:ee:15:56:45:c0:be:a1:14:bf:
                    ac:c6:dc:b2:1c:a2:2e:82:7a:d2:df:a5:7d:d0:c9:
                    9a:79:33:dc:85:7e:95:db:fe:d6:c0:38:a9:e8:ba:
                    fb:6d:a3:dc:e9:b0:50:48:0b:a7:d5:d5:95:3d:e1:
                    e8:98:7f:8f:39:d1:90:ec:a6:1d:c4:4e:5f:d7:76:
                    d2:16:44:84:ae:a0:59:da:23:b7:a8:91:cc:07:90:
                    4c:ac:31:07:37:ca:24:ed:40:bf:3f:6b:a4:ed:ba:
                    be:8f:df:76:ab:75:96:bb:46:e9:c5:37:81:12:7d:
                    26:61:5f:c0:87:d5:46:01:82:a8:9b:ca:a8:43:f5:
                    bd:a6:5d:57:5f:7c:95:d6:c8:34:a3:90:cb:e8:7d:
                    a1:5a:3c:58:41:4a:31:43:73:45:2c:cf:4d:1e:05:
                    77:f6:52:f7:b1:fe:db:d5:78:f3:d6:a9:3a:5f:cd:
                    12:06:bc:2e:43:44:cb:c9:7f:1d:2d:6c:d2:18:ac:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:62:B4:AE:6A:A6:10:A5:93:D3:64:53:1D:BA:A5:39:02:D0:CF:CE
            X509v3 Authority Key Identifier:
                keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:25:e3:53:4c:83:a2:6e:bc:37:10:af:7a:1a:ab:b8:02:
         cf:77:32:7f:ae:4b:6f:86:32:8c:4d:b3:1d:c1:5a:d5:8b:ce:
         b6:f5:24:b2:63:ea:b9:4c:6e:cf:08:f8:e1:c6:07:73:a1:5b:
         98:78:e2:1b:ea:64:f8:ed:8b:fe:ba:1f:87:1a:bc:d0:b1:26:
         a5:75:17:4b:b9:b8:b0:6e:79:c6:48:98:6a:f2:90:99:96:a8:
         7c:1b:d4:fd:cb:78:97:c2:98:6b:b3:18:2a:7f:1c:2e:55:e3:
         75:e3:69:fd:07:01:45:bd:67:21:2d:7f:b8:77:3a:81:62:d8:
         ea:76:99:9c:65:58:67:3d:3d:d0:fd:6f:0f:50:a1:00:58:fd:
         20:30:d2:25:66:26:dd:9d:39:a6:d3:d5:e0:be:da:c1:fc:18:
         ab:5f:59:37:85:9c:25:85:ad:31:9a:fb:63:9b:65:1e:5d:74:
         7d:d9:a5:a1:79:b1:ae:e4:10:75:72:88:93:23:0f:ae:8b:88:
         ca:fe:3d:33:50:4d:00:53:57:46:32:5b:15:68:34:32:a7:fc:
         3f:1a:54:94:3f:48:c0:25:73:d3:69:b9:ad:3b:21:35:86:4d:
         7f:3d:c1:04:de:1b:25:4b:1c:9b:42:18:dc:cf:94:c7:06:9a:
         36:b9:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 23:15:33 2024 by rpki-client on console-fra.rpki-client.org