Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File:                     PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier:          J0lpCdoEOkWr3zsIx9SjNOeovgNOQHPFF3gQD1lrXfY=
Subject key identifier:   FF:7B:33:F5:55:F8:53:EC:0A:BF:A2:B0:90:4C:D7:E9:B8:9C:52:E1
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer:       /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial:       018F88249AA48B39C72FDE7ABB4F6B1674A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number:          0390
Signing time:             Fri 17 May 2024 20:00:51 +0000
Manifest this update:     Fri 17 May 2024 20:00:51 +0000
Manifest next update:     Sat 18 May 2024 20:00:51 +0000
Files and hashes:         1: Jg-zjGl2wokSK8aqIFgsoTH25W8.roa (hash: jK3piW2tTNLCayDVeq5txur4OuQnEonMvAN5As4QprY=)
                          2: M_WfuBxmPqxcsEpMuyHQMgn7iO8.roa (hash: D56guXifG0M4fvvQ/CCheW3KayRKVAjS3/u9zGX865k=)
                          3: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: yqHCU4J8PSuc2hFt6UFZ/L7FnVGkixM2ek6tIgfiZXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9a:a4:8b:39:c7:2f:de:7a:bb:4f:6b:16:74:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
        Validity
            Not Before: May 17 20:00:51 2024 GMT
            Not After : May 18 20:00:51 2024 GMT
        Subject: CN=ff7b33f555f853ec0abfa2b0904cd7e9b89c52e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:88:56:84:e6:e1:89:bc:d7:6f:64:ff:9e:
                    81:e7:ec:d8:49:08:d1:76:82:c6:85:5b:44:8a:42:
                    a7:2b:94:a4:59:91:b4:85:02:b3:48:33:4e:92:66:
                    d3:98:c3:43:23:85:08:24:4c:54:52:51:3e:96:b7:
                    02:d8:23:b9:50:f7:76:27:38:be:3a:64:03:1e:ca:
                    96:17:a7:58:dc:4e:64:62:82:4c:87:15:59:50:e8:
                    7d:eb:cb:aa:5e:8c:df:a7:36:51:6d:00:ec:0e:4c:
                    5a:11:b6:5e:5b:93:fe:b0:67:18:5e:b0:5c:c1:26:
                    f9:95:20:53:d9:97:34:b2:25:c5:98:dc:41:ba:fe:
                    42:ed:ab:a1:08:f8:0e:08:8a:30:2d:c7:08:0f:60:
                    37:1a:4e:5a:f8:98:d3:a0:43:68:f1:92:29:21:5b:
                    3c:44:14:77:33:d3:97:e8:49:d9:9b:21:39:2e:17:
                    97:f1:90:8a:b6:c7:ac:8d:41:cc:ca:56:a1:4e:e7:
                    39:a3:79:84:2c:ba:39:2c:ad:f5:93:b6:24:28:87:
                    fa:07:03:a1:63:14:da:3c:65:cc:7a:bd:e5:0b:06:
                    04:21:af:88:da:c4:c5:28:e0:f3:5a:04:82:54:35:
                    c0:52:da:85:82:a5:ab:04:34:af:5b:42:f7:5b:3c:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7B:33:F5:55:F8:53:EC:0A:BF:A2:B0:90:4C:D7:E9:B8:9C:52:E1
            X509v3 Authority Key Identifier:
                keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:42:57:5d:a0:9f:1d:a4:e2:28:83:60:9c:47:46:8a:94:02:
         d2:08:a1:02:2f:fd:9b:c1:1d:47:c0:ea:2d:86:a1:ee:8d:b0:
         17:90:13:bd:c6:95:6d:c9:f0:8e:48:20:5b:e6:26:5f:69:7a:
         3c:69:18:b1:3b:e3:16:7f:c9:57:25:35:9a:de:ba:eb:8c:99:
         6a:8f:13:9c:c5:f4:1c:20:55:3d:75:9b:8c:d8:5e:0c:9a:4d:
         19:ee:5c:8c:be:dc:9c:a1:88:cf:68:c1:19:ec:d9:2c:43:f4:
         dd:a3:6b:97:1f:33:92:6d:39:67:00:22:c3:fa:e8:cd:d7:20:
         63:e1:d6:24:ac:e1:2a:ab:de:42:8c:30:15:bf:ad:59:14:b6:
         02:ba:de:8d:22:8e:59:bd:0b:88:14:b5:9c:7e:41:b6:74:2c:
         22:f2:3d:d5:b3:49:a6:c2:66:f0:d3:82:a9:c2:61:6c:25:60:
         cc:f6:0a:89:4b:02:85:de:d5:59:6e:43:c7:b0:67:74:c2:ca:
         b5:71:8d:23:b7:ec:03:c7:30:87:2e:14:0b:ba:04:f3:77:e1:
         e9:0f:66:16:bb:2a:bb:ae:9a:e1:aa:90:97:28:8c:28:8f:51:
         5b:3d:a3:37:f5:e2:6d:ba:03:f9:0f:5d:d0:b8:19:28:3e:a8:
         10:af:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:27 2024 by rpki-client on console-ams.rpki-client.org