Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File:                     pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier:          fMqv/d1feb5OelIRXKqyYoDREsNpFzmQc58QV+Eh8Ek=
Subject key identifier:   90:F0:88:A6:A3:0F:5A:33:96:04:1B:0D:29:67:26:32:73:A2:67:D5
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer:       /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial:       018F874AFD58F7776918DFE6F41701A5AC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number:          041A
Signing time:             Fri 17 May 2024 16:03:09 +0000
Manifest this update:     Fri 17 May 2024 16:03:09 +0000
Manifest next update:     Sat 18 May 2024 16:03:09 +0000
Files and hashes:         1: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: hdJ+gnZ3kPLzr9tztuuKykDQejHDP8eg+vkpZ/hcQAc=)
                          2: qGV9L6j6i3GKxeClR7BW09uAd4w.roa (hash: LKn49sP5Sh98xv8aX80m1R9axViF8fZD9afescA5UUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:fd:58:f7:77:69:18:df:e6:f4:17:01:a5:ac:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
        Validity
            Not Before: May 17 16:03:09 2024 GMT
            Not After : May 18 16:03:09 2024 GMT
        Subject: CN=90f088a6a30f5a3396041b0d2967263273a267d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ae:24:f5:d9:7c:8e:e1:02:6a:07:82:45:e6:
                    27:0a:64:23:91:19:0b:c7:d4:e2:8e:c6:15:b6:17:
                    5d:da:85:68:3f:97:8b:5b:ef:38:93:f1:dc:95:f4:
                    6c:c3:b6:ce:c7:f3:2f:d9:ff:f3:87:89:86:76:e0:
                    c4:d4:ca:39:88:96:21:1f:cf:b6:ee:ac:fe:68:19:
                    28:b5:10:fb:3a:ca:cf:29:28:0d:4c:89:55:06:28:
                    d9:eb:8c:55:7c:86:cf:3f:7e:3e:d7:6d:a0:a9:61:
                    5c:36:5c:1b:fa:6d:5b:e1:18:28:93:e5:39:86:37:
                    54:3d:5d:d7:8b:c3:86:62:6e:6a:45:17:2a:7f:a8:
                    90:d3:2f:79:c4:e6:f1:9a:bd:99:1e:8f:d2:e5:1b:
                    9b:bf:ac:d3:5d:e2:d4:ee:48:ac:e2:62:23:3c:45:
                    9f:27:e4:c8:1c:bc:ba:70:90:e2:f6:eb:0b:47:3a:
                    04:53:1d:f7:03:1e:07:60:79:07:e6:89:8f:d3:00:
                    3f:9b:17:70:ed:0a:c9:9d:1a:a0:f3:67:9f:28:f7:
                    f5:14:be:40:ca:40:2c:d1:28:3b:37:34:16:7a:36:
                    81:5e:b4:01:2b:4d:fc:5f:7b:b5:1a:d6:c1:fa:8a:
                    73:30:7f:ce:33:49:64:80:f4:c7:13:79:c0:cd:c4:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F0:88:A6:A3:0F:5A:33:96:04:1B:0D:29:67:26:32:73:A2:67:D5
            X509v3 Authority Key Identifier:
                keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:23:ed:f8:a3:e1:24:13:ac:f3:da:6c:4b:21:01:d1:be:
         b3:d6:11:20:83:b6:60:44:f2:82:bd:42:fe:1c:ed:a8:7b:81:
         f5:90:19:dc:4d:6d:02:f9:75:0e:ba:c9:ce:20:2b:31:b5:ca:
         36:bf:bc:ed:7e:73:e9:60:3f:1d:6a:a6:bc:c4:62:cf:1a:d4:
         0d:88:22:55:0c:3c:4d:3d:7d:83:3d:d6:fe:89:2b:31:ff:a9:
         65:2c:0c:e2:2a:74:23:6d:f6:10:9d:22:26:e6:33:4b:18:0f:
         8d:a9:3d:35:e1:8f:54:eb:a7:e5:de:16:aa:db:5a:a6:c7:d9:
         fc:17:2e:9e:ad:36:fc:01:41:41:14:9c:97:ca:87:6c:59:d6:
         63:c3:84:18:18:fa:08:fa:52:11:b4:04:b7:df:68:6b:d3:bb:
         51:f0:45:9c:ac:e3:05:b5:ec:e8:b1:9b:ef:14:e0:61:ce:bf:
         b6:75:58:33:d8:1f:20:2b:e4:ad:73:24:47:25:52:f3:9c:27:
         25:b1:89:fa:f1:42:f0:08:c0:00:67:88:4d:2f:2a:06:f3:1f:
         52:85:5f:eb:c8:ea:00:6e:12:90:b9:39:8f:b0:78:64:6d:f3:
         b7:49:9a:7e:18:8a:94:bb:b0:73:a4:d5:66:8e:73:11:95:df:
         1d:18:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:18 2024 by rpki-client on console-ams.rpki-client.org