Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
File:                     pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json)
Hash identifier:          hfAwgdZ69xl/vrxz8kZQ2RGh81xhD+3OlNICboKOqfE=
Subject key identifier:   FA:5A:93:F6:AD:BA:3D:75:E9:21:EC:46:EA:C8:CB:68:BD:11:C7:04
Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD
Certificate issuer:       /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
Certificate serial:       018F87487C10BC70D88BF1C4A1E46CD47BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:25 +0000
Manifest this update:     Fri 17 May 2024 16:00:25 +0000
Manifest next update:     Sat 18 May 2024 16:00:25 +0000
Files and hashes:         1: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: IsXGaATZClQcHSUhzIMivnJPtkwlUJ8TEptyFXXBK6Q=)
                          2: wsdImU5osLDNeTbL75PCA_LQQDE.roa (hash: wFpytJYQNF2tuPXbciTQ3G0hDteSKky4HDzGvHZjMIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7c:10:bc:70:d8:8b:f1:c4:a1:e4:6c:d4:7b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd
        Validity
            Not Before: May 17 16:00:25 2024 GMT
            Not After : May 18 16:00:25 2024 GMT
        Subject: CN=fa5a93f6adba3d75e921ec46eac8cb68bd11c704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:ff:b8:43:c0:94:2b:c0:35:d1:77:20:88:
                    cd:b0:5b:f0:fa:91:42:4a:98:35:c4:60:66:1e:a5:
                    9a:f6:d0:c1:03:d0:ba:23:53:f4:f3:7e:14:72:59:
                    f7:a7:70:1f:e5:cb:2b:57:ab:38:8e:4f:9c:ac:5e:
                    39:6a:e4:60:53:06:a6:28:2e:16:1c:e7:84:19:1c:
                    b9:ca:cd:fd:86:7d:48:47:39:4f:ac:2b:54:41:c4:
                    d1:71:24:00:97:5c:ef:33:fd:7e:96:1b:b7:cc:a1:
                    a5:e0:b5:ce:57:db:83:6d:4a:05:4f:e1:43:da:46:
                    2e:7b:ff:45:01:40:a5:0d:d0:26:3e:a3:55:e5:74:
                    0c:4c:67:41:b6:e6:ea:61:5a:5e:96:4d:2e:92:7f:
                    d5:90:a6:1c:16:fb:42:8a:de:1e:b3:6b:52:5e:d3:
                    86:90:b3:e0:c9:be:c4:0c:b3:dd:e9:cd:d9:04:d1:
                    12:07:1f:86:e2:7a:eb:2b:62:27:eb:99:95:22:d8:
                    58:f9:d8:73:6f:2e:57:da:74:cf:33:88:d3:1a:63:
                    47:8f:4a:6d:90:4a:cf:43:79:0d:d4:61:38:c2:fb:
                    35:aa:5b:79:0f:f3:29:84:22:da:2a:80:7f:d5:f5:
                    c4:5f:99:f2:55:02:1e:e2:f9:83:43:8a:70:78:c4:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5A:93:F6:AD:BA:3D:75:E9:21:EC:46:EA:C8:CB:68:BD:11:C7:04
            X509v3 Authority Key Identifier:
                keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:66:6f:d4:e7:40:64:b7:47:98:7f:17:23:e5:03:9c:f0:92:
         74:2f:05:90:8e:1f:03:7d:93:9e:c7:39:df:00:c1:bc:06:ab:
         62:d6:57:ac:52:cf:a8:e0:59:0d:9a:e2:be:21:52:bb:56:70:
         53:eb:65:81:ae:85:66:ca:ad:2d:f6:df:7b:c5:59:b4:5e:c9:
         ae:c3:37:88:61:73:88:6b:18:de:4d:9e:45:6a:7c:50:9d:3f:
         5f:7c:6b:d1:2b:a5:53:ed:36:c2:ea:96:9f:57:72:f4:8d:d8:
         1c:ba:25:cf:43:27:a7:be:04:68:65:23:57:4f:b8:13:57:f2:
         e7:13:5f:12:60:ec:4d:9a:b2:89:d8:bb:d9:1c:4f:a2:6f:1e:
         5b:8b:d6:0a:83:49:db:4d:54:c8:cb:ca:d3:b0:38:0a:1c:82:
         62:dd:68:96:fa:c5:e3:a2:dc:59:c6:5d:38:f4:71:0f:fe:46:
         df:32:5f:d3:37:e3:39:f3:91:51:3d:73:9f:21:98:5a:fd:f3:
         f2:f2:67:cc:93:22:cc:95:e0:ae:fa:20:55:1f:72:a1:a1:df:
         99:2f:10:9d:94:82:d2:8c:18:2f:e9:be:d9:41:74:02:8e:1f:
         a9:e8:9f:e9:85:e8:f1:e3:da:5b:c3:98:ec:97:ee:0d:18:41:
         d8:73:dc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:37:36 2024 by rpki-client on console-fra.rpki-client.org