Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File:                     PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier:          48lImSNo5V9ohnLJr1wiJfUqamhHhvChWGw8cD0tuCc=
Subject key identifier:   04:05:30:9D:B6:B5:5F:7F:51:4F:EE:BF:45:15:93:7F:44:3F:22:F3
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer:       /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial:       018F87B60A981C7FB88CB7C12B35991BBD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number:          0D4D
Signing time:             Fri 17 May 2024 18:00:05 +0000
Manifest this update:     Fri 17 May 2024 18:00:05 +0000
Manifest next update:     Sat 18 May 2024 18:00:05 +0000
Files and hashes:         1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: h5P+Ot+HKDLuF01PLShOGn30F5Lb2OwSB/yr+k2vhC0=)
                          2: xjlvGVJLbh-pvMFZWPDJhCh2598.roa (hash: djVtZ5WxrEshsM4bxYIIPqQuSqG78TxDVF0bYMpVX2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:0a:98:1c:7f:b8:8c:b7:c1:2b:35:99:1b:bd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
        Validity
            Not Before: May 17 18:00:05 2024 GMT
            Not After : May 18 18:00:05 2024 GMT
        Subject: CN=0405309db6b55f7f514feebf4515937f443f22f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:22:bc:b1:ce:07:ca:e7:c1:ae:48:d0:30:
                    6a:a8:8f:5d:9d:08:d1:69:df:e7:b9:1d:35:f1:a3:
                    5b:fa:e6:a4:7b:58:1c:ff:00:37:67:34:c8:e8:53:
                    66:99:50:48:d3:b6:0a:95:7d:4a:0f:21:4a:7a:23:
                    a6:fd:8d:89:b8:7e:9c:2e:51:52:94:b2:48:f1:e1:
                    69:3e:21:11:f8:98:df:97:a5:25:af:4e:31:98:19:
                    74:d5:78:6d:54:00:79:f6:87:f5:7f:a0:60:ee:0b:
                    cf:0a:50:0a:7d:0c:2c:6e:1f:8f:24:74:5c:08:6f:
                    7c:e6:d7:82:90:4e:ff:fb:53:f4:5d:78:2c:67:3a:
                    e2:b9:4a:bb:d3:8d:ee:01:e0:14:95:f2:63:f5:ce:
                    ce:cb:24:96:3e:16:5c:90:98:75:e6:81:40:7a:2f:
                    e9:d8:de:62:76:c6:24:8f:dd:2c:43:81:42:4d:5d:
                    07:4e:2a:07:6c:23:84:2e:7f:80:41:29:40:1f:95:
                    a5:c7:38:62:8c:b8:3d:f5:cf:a5:69:b2:a7:5b:48:
                    ad:8c:3f:20:90:31:5d:72:40:8e:b6:2a:38:23:35:
                    b2:0a:cc:43:61:e0:a3:2d:09:cc:e1:05:95:21:3d:
                    17:12:89:f6:84:02:4d:6a:92:8b:ee:47:cc:60:e2:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:05:30:9D:B6:B5:5F:7F:51:4F:EE:BF:45:15:93:7F:44:3F:22:F3
            X509v3 Authority Key Identifier:
                keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:1a:19:24:d4:69:be:eb:bc:ef:c7:c0:4c:ea:42:20:53:43:
         43:26:63:ea:3c:4a:ba:91:5c:ba:bb:3c:4c:6e:73:c4:bc:26:
         86:2c:a2:14:28:72:cf:50:95:3c:92:32:86:1c:be:6f:a4:e8:
         0c:e1:ef:72:c3:d3:9d:b8:11:d1:5d:bd:d3:3a:2c:bb:c7:ff:
         fc:22:8b:17:1b:1b:b2:5d:5c:ea:4a:94:1b:3d:bb:9d:ec:c2:
         c2:7c:10:1e:fc:f9:b4:97:8f:11:1a:63:d6:c7:42:34:3c:2c:
         00:d3:15:3b:e6:d3:0d:d9:63:31:e6:38:7e:b7:c5:08:ad:40:
         24:f2:20:d7:38:30:22:3f:4b:a5:a8:63:21:5a:45:fd:d9:22:
         24:ec:37:b5:59:2d:5d:2d:52:96:01:60:c0:95:a4:8b:9a:76:
         2f:81:49:ec:6f:b7:36:0a:3e:da:c7:8f:4d:80:1a:a1:e4:75:
         42:49:34:53:4b:51:69:fb:8c:9b:3e:ee:af:7f:fe:52:db:3a:
         b5:f2:25:94:e9:1e:34:a3:ea:49:24:72:41:91:13:c3:f1:a3:
         fe:ce:8c:a7:2f:04:c8:46:ce:56:fc:d5:bd:6d:3e:8e:9d:3f:
         14:91:b8:40:41:1a:3c:6d:69:bd:dc:78:02:23:41:30:e4:f7:
         a8:17:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:33 2024 by rpki-client on console-ams.rpki-client.org