Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
File:                     PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json)
Hash identifier:          iK2rV4tKULLj0PjoF+8Uq2JWONC/hqMM4Soj8Y6HyqA=
Subject key identifier:   BD:C2:5E:4F:48:C2:DC:53:71:D5:F8:2E:BC:42:AB:F8:AB:70:E5:D6
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Certificate issuer:       /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial:       018F87B6E005D547A1EF8F1879DD0B200771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
Manifest number:          110B
Signing time:             Fri 17 May 2024 18:00:59 +0000
Manifest this update:     Fri 17 May 2024 18:00:59 +0000
Manifest next update:     Sat 18 May 2024 18:00:59 +0000
Files and hashes:         1: L5nDAgGkK7uCaE1bGCox0GZ5joY.roa (hash: ku9VjnQgeJWChaBQJoN34nAy0AhOziPKyus9EAukEBs=)
                          2: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: JlLy3zorsOD3+ipbYooXAQVGxodhNLk2pR69nhp7EkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:e0:05:d5:47:a1:ef:8f:18:79:dd:0b:20:07:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
        Validity
            Not Before: May 17 18:00:59 2024 GMT
            Not After : May 18 18:00:59 2024 GMT
        Subject: CN=bdc25e4f48c2dc5371d5f82ebc42abf8ab70e5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:98:86:1c:83:91:2a:af:38:29:bc:84:3e:
                    2e:66:d2:66:31:2e:68:51:bb:6a:b5:1a:e6:1c:bd:
                    90:8b:c3:d3:da:9d:89:1d:bb:65:a6:54:6e:03:97:
                    00:db:3c:54:0d:13:71:92:80:9a:3d:98:0b:27:1b:
                    00:c2:38:5c:80:36:83:02:e0:90:95:dc:04:90:87:
                    c9:d9:d8:74:73:a9:73:41:10:20:35:37:08:bc:a3:
                    a4:40:71:55:b3:4a:79:df:47:01:c3:53:3d:5a:af:
                    21:39:e4:e2:93:e6:fd:16:49:14:74:34:70:0b:b4:
                    3e:95:f1:7c:f9:34:7b:8f:f9:8d:d4:e6:d2:08:b3:
                    68:e5:55:95:76:28:fe:4e:29:65:a2:dc:fe:f4:f4:
                    cf:39:c9:20:9b:f5:06:4b:ff:04:0f:31:ed:13:b0:
                    3f:cc:3a:a0:0f:7a:7a:dc:c8:d0:23:dc:a7:1b:fb:
                    d7:c7:c7:a9:6b:fc:2f:80:16:cd:a1:46:f6:cf:71:
                    94:bd:1c:a9:ce:d1:bd:04:77:bd:da:32:a0:1e:8f:
                    36:8a:7d:f0:1d:f3:27:01:b1:c8:e6:b8:2d:1b:dd:
                    4d:3b:c1:21:9a:74:85:e7:88:44:5c:ba:d3:68:5d:
                    74:3c:ef:28:1a:10:cb:ca:2d:96:5f:53:c7:80:5a:
                    22:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C2:5E:4F:48:C2:DC:53:71:D5:F8:2E:BC:42:AB:F8:AB:70:E5:D6
            X509v3 Authority Key Identifier:
                keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:fb:45:ee:5f:3d:fa:34:7c:a0:37:b7:67:81:3b:be:81:
         ae:a5:1a:1d:58:7a:c9:55:bf:ee:5e:5c:25:4b:a6:5f:35:05:
         2f:37:a5:0b:78:4e:28:96:31:56:7a:23:7d:7f:3f:24:8a:24:
         aa:91:89:38:66:46:3c:03:9e:aa:70:6b:c2:1b:0d:44:91:c4:
         8c:b4:28:7e:7a:a0:46:df:b5:35:a9:4b:91:95:eb:bd:2a:b1:
         34:d2:91:93:57:4f:b3:59:04:18:a3:3d:f7:f9:ef:15:5d:40:
         3a:cf:29:17:9f:92:2c:df:bc:01:5e:56:92:d5:b0:a3:67:88:
         e2:d7:a0:53:29:73:c5:f4:56:9e:ff:64:04:82:33:44:3f:68:
         ba:20:81:9c:8a:9e:e5:2a:08:35:28:ea:ec:72:81:fe:97:50:
         4a:4b:4c:23:0b:c4:30:0f:b3:e2:18:d2:91:e0:5a:b9:ea:17:
         e7:8f:b2:49:ff:5b:53:be:6a:34:69:28:99:06:39:0e:96:dc:
         5d:c6:2d:68:b5:7a:52:fe:fa:cb:32:9d:0b:84:d8:7a:b8:a4:
         ea:5e:bd:73:52:c9:e5:b9:23:79:49:39:f0:18:75:54:5e:cc:
         c9:d2:83:74:f6:64:48:8b:57:2b:d8:13:a9:10:8d:b5:bf:5b:
         54:7b:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:32 2024 by rpki-client on console-ams.rpki-client.org