Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File:                     PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier:          k+x29ysppC1K1g8fAWsLKRlRkcEfQCqaB6aBsb7J9AM=
Subject key identifier:   91:AA:32:AF:06:72:6A:C7:7E:B3:B7:DD:7E:ED:5D:1A:C3:C8:44:3F
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer:       /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial:       018F885B18C471F6DBD518F43C8EB320EFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number:          59
Signing time:             Fri 17 May 2024 21:00:22 +0000
Manifest this update:     Fri 17 May 2024 21:00:22 +0000
Manifest next update:     Sat 18 May 2024 21:00:22 +0000
Files and hashes:         1: 9NE76IikFTwAkTyDCCKrSeG9Pfk.roa (hash: 7c8fDsuY1fGey1bF9sm0j3DM8bkDcr2ESfsaRPP7P5A=)
                          2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: X/6cVm2mCtTjjP9KtS4H05OdSEQDGGMMUCQjUVBP7bw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:18:c4:71:f6:db:d5:18:f4:3c:8e:b3:20:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
        Validity
            Not Before: May 17 21:00:22 2024 GMT
            Not After : May 18 21:00:22 2024 GMT
        Subject: CN=91aa32af06726ac77eb3b7dd7eed5d1ac3c8443f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0f:9d:01:5a:0c:4c:a3:71:51:c8:26:2a:15:
                    aa:07:5a:57:fa:fb:ca:53:b9:c1:12:33:91:9a:e5:
                    27:53:1d:de:6e:45:f5:ec:ac:f8:f9:4f:bb:22:da:
                    95:fc:75:46:2e:fa:eb:86:fd:b7:f7:74:6c:e7:7c:
                    08:38:70:d2:26:6e:cc:1d:9e:f4:19:63:8e:ea:2d:
                    36:41:0c:57:90:70:57:ed:af:da:26:64:da:9b:25:
                    b8:69:b9:38:c3:74:e3:75:68:e4:c7:46:f6:64:c2:
                    81:da:e3:1f:f0:ce:83:02:f7:3b:e7:30:05:96:aa:
                    69:47:17:4a:1f:d1:6f:7c:6d:55:e2:61:7f:f3:c0:
                    e6:7d:d5:7f:dc:cf:5c:de:b7:89:2d:5d:ab:27:9d:
                    75:b2:63:18:fe:15:3b:ca:bb:43:7e:15:43:e4:cc:
                    bb:51:d4:ae:1c:21:48:77:26:78:7a:68:b8:2f:da:
                    9b:35:de:3f:25:ab:3e:36:70:e2:6b:2b:19:f5:e9:
                    ba:99:68:b5:95:0a:c6:f0:d5:76:9b:77:db:56:a4:
                    30:82:ad:1a:42:16:7e:bb:45:6f:eb:ce:53:3a:7e:
                    d5:90:24:1a:28:36:9f:5c:1d:c6:ba:63:77:dd:12:
                    a8:41:91:51:75:ea:c1:76:8d:1f:60:2c:a8:65:f1:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AA:32:AF:06:72:6A:C7:7E:B3:B7:DD:7E:ED:5D:1A:C3:C8:44:3F
            X509v3 Authority Key Identifier:
                keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:ed:03:57:29:63:72:1a:c7:6e:4d:af:92:77:8e:21:82:
         0f:86:d9:ec:c5:4d:95:93:68:58:83:b1:07:6a:11:b9:82:44:
         26:ef:f3:73:71:2c:a8:49:0f:b5:53:0d:69:c6:de:dc:58:90:
         24:25:1d:d1:c0:24:e7:5b:77:25:6c:09:ab:cd:fb:e6:36:91:
         e2:3a:06:f6:49:97:e9:ba:a7:48:26:4c:6d:c5:f3:d2:89:44:
         4c:84:36:a2:cc:45:a5:b0:b3:57:4a:04:39:24:94:a5:4f:07:
         3a:30:e8:0b:ca:c2:10:41:7a:d5:bd:1e:1e:90:88:7a:55:1e:
         d3:43:d7:f5:77:e9:d9:1e:fd:d5:c8:0a:46:72:77:48:73:39:
         6a:39:db:55:e2:74:ac:c9:42:9d:5f:de:c9:48:29:fe:53:3e:
         39:ab:fc:29:13:d1:9d:eb:a5:fe:a0:39:63:ee:2d:ca:85:37:
         55:94:03:c8:e7:4e:d1:62:f9:03:47:e0:0e:89:fa:aa:e5:53:
         71:11:f8:c1:4c:e3:72:ad:bf:45:79:38:09:79:b2:d2:58:a3:
         3f:28:30:4b:1e:21:07:12:fb:47:54:ca:7c:3b:d3:d5:47:7b:
         00:12:61:e7:2e:e7:ff:98:e7:23:f2:76:53:01:92:3d:4c:a7:
         c0:27:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:05:13 2024 by rpki-client on console-ams.rpki-client.org