Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File:                     pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier:          gaCHEzG75XhFb79WOMW2DxauJpSJSFs3o969jlcjT5I=
Subject key identifier:   57:0D:BD:9B:2E:DB:69:2D:0A:B2:CA:D5:58:19:9C:88:51:71:05:88
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer:       /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial:       018F6B643BBB0F4F38C38E05D4D5D6F986E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number:          1170
Signing time:             Sun 12 May 2024 06:01:21 +0000
Manifest this update:     Sun 12 May 2024 06:01:21 +0000
Manifest next update:     Mon 13 May 2024 06:01:21 +0000
Files and hashes:         1: 8CJsaFw6l6-8nyhM9ciYflrJwsc.roa (hash: /v4kWbOAV1ajYosLUNQfl7KAIkiStEzbmQCDQwONUU8=)
                          2: CuuWOocDvFqCF5ZT5AZxC6Mz54g.roa (hash: ouXvUF+5/+WIV/e52TzomEamU9rcTPag9MdphuuuhH4=)
                          3: HgbQa1fNvZe-dVZWi2DOms051dk.roa (hash: GmCkfeA03yN4PIyQDHMiqyI9xl4ThmqHmHIhMn+XJdM=)
                          4: jgY1BMU4TC9gH19GHJhCIZVkOLI.roa (hash: 9ibPYcrTEI7sfHGj2G4Mu91aao0goraUGTGoGgrKhA4=)
                          5: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: /28ZJWJ9wqr5ffJ58M8EMw4vx6u0khFA1rQJMQoHelE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6b:64:3b:bb:0f:4f:38:c3:8e:05:d4:d5:d6:f9:86:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
        Validity
            Not Before: May 12 06:01:21 2024 GMT
            Not After : May 13 06:01:21 2024 GMT
        Subject: CN=570dbd9b2edb692d0ab2cad558199c8851710588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:45:db:5e:eb:be:29:b5:8d:30:62:cc:1d:
                    cf:64:61:85:d2:32:49:c8:5d:eb:9d:80:3c:f9:9d:
                    eb:a7:cb:d6:e9:dd:c1:ff:6a:0b:e5:b3:88:63:ec:
                    48:37:38:5e:cc:28:1e:72:db:0a:b7:dd:fe:f3:a0:
                    bc:48:9c:bb:a2:be:f4:3b:3f:2f:7c:64:9c:bc:9e:
                    07:8b:25:f2:ef:84:6d:0b:75:4e:4f:33:06:19:10:
                    ff:83:c1:b9:33:fe:22:03:2b:d7:f3:1b:ef:a2:ee:
                    70:0b:4d:d5:32:8c:b4:59:0e:99:f3:56:44:ca:17:
                    51:48:3b:f4:75:26:30:3e:7c:12:54:22:99:f5:5a:
                    f4:08:39:91:a8:0c:c4:7f:b3:ae:d9:4b:04:8c:77:
                    a3:c0:0b:4e:2c:52:7c:8f:d8:8c:17:04:04:97:ed:
                    f3:d0:a6:ef:81:77:56:9c:52:78:80:8b:aa:92:54:
                    db:1b:f7:39:da:da:87:06:14:8e:a3:86:90:c8:1d:
                    cb:7f:79:b7:40:48:29:34:46:1d:25:00:b5:6b:59:
                    32:56:3d:b4:09:d9:35:87:65:d3:08:20:c4:a4:6c:
                    1d:d3:af:cc:6f:0c:52:7b:d5:6d:3e:f1:d5:8d:47:
                    13:2c:fa:e7:cd:1f:76:11:b6:ec:67:30:94:64:c3:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0D:BD:9B:2E:DB:69:2D:0A:B2:CA:D5:58:19:9C:88:51:71:05:88
            X509v3 Authority Key Identifier:
                keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:74:9d:8f:36:6d:25:18:00:ac:73:ac:99:fd:bc:1d:34:a3:
         7f:a5:c1:c6:63:61:48:53:c2:71:9b:98:80:10:6c:fd:d3:c4:
         21:24:6f:3d:2d:5d:0b:f5:74:ca:09:08:15:8f:5d:f2:68:11:
         2a:87:1a:8c:76:54:fc:c1:f8:90:3c:4c:38:8a:00:fe:f1:0f:
         19:58:5d:87:cb:19:a2:d2:20:01:7e:e6:54:1d:c4:5e:b3:a5:
         0a:1b:54:f6:09:f0:60:01:f5:81:ea:d3:c6:13:57:54:08:44:
         da:43:8e:85:00:30:b8:88:67:0c:0b:9d:cf:9c:02:4b:ca:f9:
         12:b5:83:5f:c9:92:4b:b1:b8:08:d9:c0:65:28:a8:7b:8f:0a:
         4f:ce:a2:dc:c1:a3:ea:c8:b0:50:91:16:c9:d0:19:0c:7d:14:
         93:e7:d7:3f:e6:6a:94:1e:39:0b:e3:cd:34:37:1f:32:e4:7a:
         98:1d:fe:c3:7e:83:06:8c:29:e8:89:d9:59:6b:16:25:c8:86:
         9d:ca:f1:2f:e7:76:33:c7:e7:18:a0:fc:6e:7c:bd:cb:9a:95:
         d6:08:36:1d:32:93:e1:c8:de:71:ab:04:f8:47:43:73:ce:26:
         6a:95:fa:ed:88:fd:0d:47:90:2a:aa:cb:29:8a:36:76:c2:f9:
         89:b0:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 07:04:23 2024 by rpki-client on console-fra.rpki-client.org