Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File:                     PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier:          p6pCMi1WaEMkqAhTSevPi+gq4KcnSxMHjM3b2/KXOIg=
Subject key identifier:   96:E1:3F:B9:33:F0:A5:72:36:76:13:9D:B7:4F:0F:EB:51:15:91:C1
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer:       /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial:       018F87498196D65681661A5C65DA2F1A2884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:01:32 +0000
Manifest this update:     Fri 17 May 2024 16:01:32 +0000
Manifest next update:     Sat 18 May 2024 16:01:32 +0000
Files and hashes:         1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: k2YLBmLXaUwnry7HxlTCKJBo9YTzhTKlljv5KRg3zuQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:81:96:d6:56:81:66:1a:5c:65:da:2f:1a:28:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
        Validity
            Not Before: May 17 16:01:32 2024 GMT
            Not After : May 18 16:01:32 2024 GMT
        Subject: CN=96e13fb933f0a5723676139db74f0feb511591c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:68:51:47:c5:3d:cb:7e:85:94:3d:5c:0d:
                    69:b0:7d:d1:0f:70:83:82:98:88:d8:d1:0c:33:08:
                    fe:17:66:95:e4:08:a0:99:a3:5c:1f:44:71:20:24:
                    7b:5f:bd:63:b2:b9:55:72:6e:4b:e4:5b:96:13:2b:
                    48:c7:db:0e:94:ba:31:0c:b2:30:34:77:af:c1:4e:
                    91:db:6b:20:e4:22:55:52:14:b0:bd:4e:d1:6d:cb:
                    c5:5d:a2:97:c4:99:72:fc:67:f0:67:11:df:22:f6:
                    17:7a:0d:19:f2:56:63:17:30:70:c2:43:d6:7b:cd:
                    19:fc:30:8e:85:23:ea:63:f6:a2:8b:3e:cc:76:27:
                    e3:2d:bc:84:a1:94:b7:78:5e:3d:69:ee:22:98:bf:
                    60:23:a0:0f:3c:47:2d:9c:00:45:d3:6d:33:35:87:
                    d9:6e:60:73:b8:24:14:97:0c:ed:7b:eb:4f:e7:06:
                    0a:f0:75:97:00:53:14:ea:f5:e2:31:59:08:7f:89:
                    ed:77:39:24:1c:e5:36:aa:23:c0:b6:17:0e:67:dc:
                    76:ac:5c:33:1c:0b:c2:de:2c:33:a0:64:36:25:3a:
                    ba:8c:39:6d:4f:58:d9:31:13:2b:59:f4:3b:43:3d:
                    50:64:5e:b9:b1:6c:10:10:20:c8:d4:3e:b6:f9:2f:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E1:3F:B9:33:F0:A5:72:36:76:13:9D:B7:4F:0F:EB:51:15:91:C1
            X509v3 Authority Key Identifier:
                keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:9b:d3:e1:9d:22:9f:54:53:5d:de:c6:40:01:32:b6:4c:
         5f:9b:36:09:c2:91:85:27:82:a8:1b:b6:a8:79:0d:13:ea:af:
         2e:b9:f9:05:e8:c4:78:43:2c:7f:d0:9b:4b:59:9a:ca:a5:a0:
         0b:6e:7f:c3:ea:a4:af:39:19:44:87:4e:c9:44:2b:25:c0:f4:
         5c:18:32:f8:c9:13:93:6e:c1:a3:0a:12:39:a9:88:b7:a9:fc:
         a0:15:99:47:ee:a6:25:cd:b8:16:23:af:35:fc:d0:56:10:69:
         61:c3:e5:29:7b:1c:b8:83:f9:4f:39:aa:ff:13:d9:c3:b4:65:
         ac:24:6a:02:39:e2:55:f9:95:de:7f:b6:2e:a4:fa:98:47:27:
         62:4b:27:22:57:bd:d5:00:fc:77:d9:c5:4d:91:8b:78:fd:3a:
         47:16:12:1e:7c:d5:47:98:a3:30:41:9c:33:ad:db:0a:85:83:
         1e:8f:8f:89:bc:0c:7d:64:ca:30:17:c2:e2:24:45:7d:0b:2d:
         0b:00:ac:15:da:4d:e1:48:2b:e0:10:48:ac:56:ac:45:df:4d:
         0d:ee:62:a1:72:38:9b:93:b4:73:75:fb:6d:d0:7c:db:33:7b:
         db:0f:80:17:1b:61:04:d5:d5:eb:e4:91:0f:8d:1f:32:b9:fb:
         3c:eb:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:32 2024 by rpki-client on console-fra.rpki-client.org