Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
File:                     PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft (raw, json)
Hash identifier:          mQr/arF0OWK6t+MARVC0uwtvgnNHYR+S0+yKHNueAXo=
Subject key identifier:   17:FA:0F:90:81:E7:81:16:B9:A7:BE:33:D6:7C:8E:42:73:7C:6C:69
Authority key identifier: 3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96
Certificate issuer:       /CN=3d563e205ad217433709b200a0dcd30c70961c96
Certificate serial:       018F87496D3EBF02677F81B300E111588091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:01:27 +0000
Manifest this update:     Fri 17 May 2024 16:01:27 +0000
Manifest next update:     Sat 18 May 2024 16:01:27 +0000
Files and hashes:         1: PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl (hash: 64HUosNQ66Fo8J44EqU8a21G+MDI+Wz/BCBJ5vQh2hQ=)
                          2: mw1Us-tykZ27vYTMAQNKqofPEH0.roa (hash: DpqJZu/r7pGC1sawcIF7y9frIsRLAVBmOl4ArgWnue8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:6d:3e:bf:02:67:7f:81:b3:00:e1:11:58:80:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d563e205ad217433709b200a0dcd30c70961c96
        Validity
            Not Before: May 17 16:01:27 2024 GMT
            Not After : May 18 16:01:27 2024 GMT
        Subject: CN=17fa0f9081e78116b9a7be33d67c8e42737c6c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:0d:3f:4b:34:a1:5f:bc:3b:ea:80:14:e9:
                    68:39:11:d7:79:64:65:4a:82:a6:d8:8f:96:93:2d:
                    1b:10:63:15:9c:08:fa:ce:ea:cb:66:17:c2:44:ab:
                    7f:76:b5:37:2d:e0:4c:97:6e:6b:07:f9:02:14:81:
                    a5:c8:b3:4c:48:af:3e:86:f2:fa:91:47:2b:c6:6c:
                    21:28:ee:3f:da:c1:b0:f2:cf:7b:1d:0d:3b:4d:cc:
                    a0:37:48:74:ad:70:af:3c:58:3a:d4:32:4d:4c:39:
                    d9:c1:7e:04:0f:75:15:e2:77:06:2d:ad:23:d3:00:
                    f5:69:74:10:7a:30:ad:56:a3:0e:1c:08:de:c9:bb:
                    ef:9a:15:97:eb:3a:80:70:2d:6c:2a:ed:4e:0c:5f:
                    a4:86:fd:64:1a:26:1f:14:5f:58:62:8c:2e:51:4e:
                    62:82:d5:56:68:9c:07:da:e2:d0:56:55:40:a2:6b:
                    cb:99:b7:79:55:cd:b0:81:82:e4:df:b8:03:24:e6:
                    a1:d5:2c:3d:74:8c:4e:01:c7:c5:2d:99:b6:f0:18:
                    db:81:ed:6d:ab:f4:04:7c:ad:5c:33:9b:44:fa:88:
                    3e:11:ee:1b:8a:02:7a:fe:ce:79:d9:3a:43:62:88:
                    49:52:18:8f:4a:3d:27:89:78:cb:8f:74:59:f5:24:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FA:0F:90:81:E7:81:16:B9:A7:BE:33:D6:7C:8E:42:73:7C:6C:69
            X509v3 Authority Key Identifier:
                keyid:3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:be:eb:b4:07:1e:12:3f:2c:4b:1c:c1:13:e3:94:8e:64:
         96:53:c5:07:f1:1f:b0:1a:fd:22:ea:c4:99:7a:cc:1a:b3:62:
         ad:93:5b:99:b9:92:6f:ea:c3:ad:a7:03:b2:40:9c:8c:ad:e9:
         e4:af:d2:7f:1a:55:99:ee:01:ea:8a:4b:2a:19:ff:52:5b:45:
         5a:a0:23:56:0c:59:73:92:0d:3a:1e:41:f8:2c:d4:24:ab:ce:
         15:92:ae:4b:6a:1a:6a:2f:a8:b4:ef:e1:28:a1:b7:1c:8b:85:
         de:48:24:87:24:68:f3:4b:1a:74:19:75:b0:9d:a2:75:d6:89:
         ca:20:90:8f:30:69:5a:2a:f1:6e:a5:d9:f1:59:5b:b7:8e:50:
         c5:0b:3a:7c:98:b8:b0:7c:a0:0d:6c:a5:6d:4a:ea:20:b5:cc:
         c4:eb:9a:6f:d6:94:d3:12:f2:f2:4c:8b:e5:25:2f:23:68:e6:
         f9:e2:ef:ac:78:44:38:7d:47:d8:52:08:53:a2:0c:37:a1:de:
         e1:79:3a:14:d8:eb:ce:65:a0:c7:ac:5a:69:8b:5d:07:86:d8:
         67:00:04:02:62:15:b1:cc:23:a2:73:f3:04:78:63:51:fb:14:
         84:bb:37:4d:2a:2c:c3:51:5d:55:cf:0b:0b:98:11:da:9f:7a:
         6f:6d:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:46 2024 by rpki-client on console-fra.rpki-client.org