Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File:                     PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier:          0XiytuBOFsHM+ff5HLm9k+O3B+v7kjeW9UC/VfaKWRo=
Subject key identifier:   56:FE:6A:D4:FA:86:CB:B5:F7:AC:EF:A5:B3:49:1B:DE:A2:84:38:82
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer:       /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial:       018F8749AE1C62C694A5F45CC5EB2629C530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:43 +0000
Manifest this update:     Fri 17 May 2024 16:01:43 +0000
Manifest next update:     Sat 18 May 2024 16:01:43 +0000
Files and hashes:         1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: Dw0tU8COJuRAK58rn3mElNssS6NJ+0TbQVoQYSpoxpk=)
                          2: jeq3mi8mIHRlEMaSCQhsrmXKO8g.roa (hash: 2oF7N7yTOxtyVqWqVHVYMJ2Ef9T/1aes9oCTIwVHYWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ae:1c:62:c6:94:a5:f4:5c:c5:eb:26:29:c5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
        Validity
            Not Before: May 17 16:01:43 2024 GMT
            Not After : May 18 16:01:43 2024 GMT
        Subject: CN=56fe6ad4fa86cbb5f7acefa5b3491bdea2843882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:48:71:19:a1:a9:b5:2a:7a:e1:90:7b:f7:
                    42:34:bb:2c:a6:c4:e5:e6:02:c1:7f:6b:6e:79:09:
                    dd:00:8c:c5:c4:d4:e9:a4:28:1c:56:a2:04:00:d9:
                    1e:f9:94:69:7c:9e:90:ce:85:e2:ee:f8:36:c9:bf:
                    eb:c7:e9:b4:ab:1e:79:9f:48:bc:b6:a8:48:2d:66:
                    2b:82:a8:47:ba:c7:24:64:71:a1:87:94:4d:e0:ff:
                    e4:af:65:54:16:a1:cd:c2:95:5e:77:40:c7:92:8a:
                    6a:d6:7a:ad:9b:a2:9e:7a:c6:7a:60:de:b3:67:2d:
                    49:8a:b5:64:67:87:b0:a9:34:58:35:12:da:05:31:
                    19:b1:bf:bb:9d:a5:c7:82:b4:49:b8:f3:d2:7e:1c:
                    52:10:d9:fe:5f:25:09:7d:11:81:d4:48:b5:fd:dd:
                    77:56:d9:b5:62:20:5a:7b:c2:03:a0:f4:f6:96:fb:
                    5e:c6:92:db:f6:97:9d:4f:be:fd:ee:34:13:3f:29:
                    07:93:c1:dc:ae:84:b0:a3:d8:6a:dd:e4:25:54:6e:
                    82:40:60:be:dc:5e:78:08:57:57:1f:a2:20:6d:51:
                    0b:ba:ee:4a:03:86:22:bc:b2:c0:53:63:7d:75:f8:
                    14:72:f0:e5:c9:98:e9:4c:3b:ec:27:77:46:5f:f4:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FE:6A:D4:FA:86:CB:B5:F7:AC:EF:A5:B3:49:1B:DE:A2:84:38:82
            X509v3 Authority Key Identifier:
                keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fe:e9:84:ba:3d:77:6e:9c:35:cf:be:5c:96:5c:9d:2d:fd:
         ca:03:bf:16:cf:f9:23:35:fd:92:60:3f:c9:74:86:75:0a:a1:
         f7:7a:f5:9e:64:11:34:32:40:25:c4:33:d4:14:da:7c:67:14:
         2d:7e:de:21:ce:17:02:50:24:62:a2:58:97:b5:e9:52:08:7f:
         10:e2:1a:b1:d5:77:e1:6f:75:09:92:8c:31:43:2a:73:37:75:
         57:1a:32:c0:15:b8:5d:96:10:5b:14:7c:09:a2:b6:90:22:09:
         9a:be:1c:b6:b4:53:18:31:d2:f1:22:2c:9c:0a:0d:f6:ee:46:
         00:2c:3c:98:62:6a:50:f2:d3:ef:d5:a6:05:d0:9a:a5:41:71:
         0c:2b:be:36:8b:92:b1:4e:4a:db:5e:7f:d0:19:f4:27:30:2b:
         a8:03:b8:67:f1:53:a7:20:c1:b9:a1:14:ba:67:24:c5:89:2a:
         50:cd:5f:4e:b9:07:b4:cc:be:fb:ea:f7:45:cf:df:c1:8e:3c:
         ed:4b:97:ac:1b:30:31:4e:e7:56:1e:51:1a:45:49:33:54:45:
         df:f3:ce:8f:2e:aa:5e:8d:d1:74:f7:ac:88:f7:8c:20:8c:7d:
         66:42:ed:05:a3:13:e6:fb:b5:da:53:ed:3b:2d:3a:37:ca:7b:
         8f:19:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:29 2024 by rpki-client on console-fra.rpki-client.org