Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File:                     Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier:          Cg98V7jGHwNi8vn6SH/OSIr/fayKBvx3/HfT6KVVCcE=
Subject key identifier:   A6:E8:39:41:28:D6:D1:06:7F:7D:6F:6A:40:C5:6A:A0:1B:B2:3A:E4
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer:       /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial:       018F87EDB11547BE0E9294036920A6E9523E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number:          0F37
Signing time:             Fri 17 May 2024 19:00:52 +0000
Manifest this update:     Fri 17 May 2024 19:00:52 +0000
Manifest next update:     Sat 18 May 2024 19:00:52 +0000
Files and hashes:         1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: pkzQtMgf91QdgNnVnmCZmoupkeMJLZl0uAYW2wLe6KU=)
                          2: Wzqa0TNzjVTHhNGdM0fB_JzAXtI.roa (hash: xUHRo/eTAWz4jqGp9jdSFZUrKVkC7UNjqQ0YD4rZ0f4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:b1:15:47:be:0e:92:94:03:69:20:a6:e9:52:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
        Validity
            Not Before: May 17 19:00:52 2024 GMT
            Not After : May 18 19:00:52 2024 GMT
        Subject: CN=a6e8394128d6d1067f7d6f6a40c56aa01bb23ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:33:ea:75:fa:ed:e1:f7:66:02:aa:57:94:35:
                    dc:28:e6:86:45:ef:50:e1:a4:12:46:f4:92:7a:cc:
                    e2:ba:8f:20:6f:d8:d2:06:32:6e:c6:41:e5:a7:80:
                    bd:ca:cb:f7:c7:ea:34:bc:bf:c8:07:42:a1:93:c2:
                    6f:80:af:14:e6:88:b0:43:9d:06:bf:77:9b:30:c2:
                    50:93:74:8b:46:a7:56:ce:cd:fa:fd:42:8a:97:29:
                    46:85:71:c3:58:7d:1c:2f:c5:2b:9c:21:f0:9d:8b:
                    e4:fa:0d:4d:95:98:09:cf:08:bc:63:fc:c3:8b:d1:
                    f9:84:78:c4:1b:29:b4:57:9c:4b:89:41:ef:67:7b:
                    68:77:75:e6:72:0f:3d:e0:31:7d:ab:b6:7c:25:06:
                    ff:4d:0a:1c:ac:f2:c1:b9:3c:a8:36:02:4b:43:cc:
                    d0:39:a8:5c:99:a9:10:7a:17:12:ce:5f:f7:fb:27:
                    e7:e5:88:4c:8d:29:20:78:b3:41:1b:f4:6c:37:5f:
                    95:1e:59:69:8a:4b:be:44:f6:4f:34:a1:01:c1:3b:
                    58:e4:7b:0e:7e:e3:c3:6d:21:fb:76:02:cf:79:94:
                    a9:c3:f9:f5:fa:d0:fe:a2:94:04:20:e4:ad:a2:7d:
                    3e:d8:87:64:7b:e0:c3:e8:3a:d1:1c:ca:3f:ac:6b:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E8:39:41:28:D6:D1:06:7F:7D:6F:6A:40:C5:6A:A0:1B:B2:3A:E4
            X509v3 Authority Key Identifier:
                keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:64:5b:0d:9b:49:e8:d0:0e:47:2c:22:1c:f0:66:5e:a8:
         f5:fa:f1:ec:e9:04:46:14:14:40:8d:b9:32:d4:99:a9:50:e8:
         60:ed:cd:fa:58:00:8f:0f:eb:46:f0:27:be:65:21:ad:9b:38:
         b1:d5:87:c4:cd:65:d7:2d:c2:54:85:a9:43:db:ac:97:2d:b4:
         43:2b:e4:19:80:d8:64:39:7c:3b:88:1a:05:f0:b2:b1:6f:b6:
         c8:9e:0b:fd:4c:6c:3f:f1:25:3f:d8:ee:d0:53:3e:39:02:c4:
         43:2c:a8:bf:1f:dc:e9:ad:ac:5c:12:18:f0:8f:10:e7:df:94:
         79:b4:e6:e7:f8:cb:68:aa:68:68:99:ca:cb:0a:f5:9b:09:87:
         63:a4:b7:fa:39:7e:6c:a4:cf:a7:56:86:ac:91:f4:52:29:53:
         40:79:76:b9:bf:8c:85:80:41:19:af:43:24:e4:f4:48:a7:ed:
         b5:e7:a1:58:82:93:ad:8b:57:bf:61:2b:10:34:85:11:06:2e:
         e0:21:8e:cc:3c:9d:3d:6b:09:7f:a7:58:83:5a:61:94:47:d7:
         56:62:65:3c:70:1b:46:6a:6c:14:d0:0b:b7:c1:ca:18:91:24:
         12:c2:a8:3f:3a:30:a6:45:ae:18:6d:a8:b3:51:71:1d:50:43:
         c1:28:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:01 2024 by rpki-client on console-ams.rpki-client.org