Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File:                     PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier:          S+1FbCLJfuY5PEvGPRRxdB8ehEN0Y6fySX22gNV7dVs=
Subject key identifier:   A8:26:CC:18:7A:D3:30:04:A8:E2:B3:7A:B3:58:BD:47:A3:0F:19:9E
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer:       /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial:       018F87ED28A2ACF11BA3A8164E01A0C574B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number:          03C6
Signing time:             Fri 17 May 2024 19:00:17 +0000
Manifest this update:     Fri 17 May 2024 19:00:17 +0000
Manifest next update:     Sat 18 May 2024 19:00:17 +0000
Files and hashes:         1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: KxACl4VcOCgmaROhoa0WNdp/UWvCqHQRBlWl6kfmjDg=)
                          2: jn-UtAWCTo-cubFZcSv3X-paMM8.roa (hash: 1a47sB5lihbWSK9/YMtuDow/nQsXKloGoLM/G7XVMQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:28:a2:ac:f1:1b:a3:a8:16:4e:01:a0:c5:74:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
        Validity
            Not Before: May 17 19:00:17 2024 GMT
            Not After : May 18 19:00:17 2024 GMT
        Subject: CN=a826cc187ad33004a8e2b37ab358bd47a30f199e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:14:02:5e:d4:8e:17:77:b7:0c:64:5c:03:
                    b0:3e:a4:5d:94:c7:3a:a3:52:04:b7:07:26:7d:2c:
                    e4:cf:fc:2e:30:8f:24:78:eb:e2:a2:8f:d9:0b:08:
                    53:68:31:4e:22:49:c1:30:17:72:5e:8c:08:8e:ec:
                    cf:17:cf:a7:49:01:ac:96:65:57:fe:8c:12:96:61:
                    88:ea:3a:31:29:c6:fa:9c:70:37:71:99:3b:c0:67:
                    7f:a4:00:ed:8d:78:18:57:9a:93:4e:b0:c1:87:fc:
                    a8:b7:dd:1c:ce:79:0c:f9:1d:b8:e0:12:f9:03:57:
                    a5:7c:45:fc:e2:64:54:7f:e5:b7:4e:52:25:84:9d:
                    c4:b3:4b:7b:2e:1f:0c:ab:f9:ca:cd:2b:17:cf:13:
                    1e:a1:18:02:b5:16:2d:2e:ed:46:ea:c3:f8:cb:ff:
                    f9:3e:dd:d8:d1:a5:bc:67:d6:16:87:cb:2c:b0:9d:
                    b8:fc:8c:ef:73:3b:e1:10:1c:5a:52:47:d0:e8:6f:
                    c3:0a:65:f0:e0:80:e1:28:12:3b:74:64:e8:f5:a1:
                    03:b4:fe:10:65:05:d7:d7:46:f4:ff:19:e4:26:c6:
                    da:0f:67:14:13:5e:98:aa:c3:ae:68:5e:d7:b3:ff:
                    b1:83:d7:c4:bc:8d:5c:92:48:df:b4:3e:ff:7d:dc:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:26:CC:18:7A:D3:30:04:A8:E2:B3:7A:B3:58:BD:47:A3:0F:19:9E
            X509v3 Authority Key Identifier:
                keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f2:a5:11:56:1c:c7:51:f0:e1:58:5d:35:0f:ee:0f:77:cf:
         ed:63:63:f3:87:6b:ee:ac:7e:04:fa:c5:8b:3a:32:fc:cb:a3:
         bc:37:36:56:2a:72:42:d7:cb:7d:c7:f6:0a:ba:e8:85:47:d3:
         f9:63:df:50:e0:71:63:26:f7:12:63:ec:56:d8:02:b7:27:d9:
         2b:10:f7:da:d2:9b:ad:57:7c:6f:69:81:fd:d0:8a:72:ff:01:
         a7:48:be:f3:5c:1c:49:53:5e:34:84:57:bc:04:17:56:82:ec:
         d4:2a:b2:a6:28:16:74:f5:a9:70:b2:e2:e5:55:a6:16:5d:f6:
         36:0c:85:ff:e5:bd:32:98:c1:cb:a5:90:fa:c3:5a:84:23:d4:
         01:e8:ac:ab:ab:19:dd:f9:55:da:2e:04:91:63:a7:24:d8:e7:
         07:32:a7:e5:b9:97:a0:c1:ed:e4:2e:2a:99:00:9c:1b:c9:24:
         40:a5:ca:36:bf:74:9a:86:35:1e:33:fd:ef:67:e1:e4:8e:80:
         99:00:fc:67:89:40:f4:ff:80:f1:21:ee:ba:c5:85:47:b8:8d:
         14:2f:8f:fb:cc:6f:f3:0e:bf:87:20:13:2a:ec:60:04:ba:c7:
         36:67:3c:42:3b:a6:6f:9b:19:9d:5c:e2:e4:08:99:c4:f0:f7:
         9e:f5:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:32 2024 by rpki-client on console-ams.rpki-client.org