Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
File:                     PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft (raw, json)
Hash identifier:          PkeQzHbsJGYL5/ynk/HhO18XB+UrtXUtuvPp3S977m8=
Subject key identifier:   A3:74:95:C6:AC:92:5D:F5:9C:66:05:8E:76:ED:60:0A:8B:99:5C:3B
Authority key identifier: 3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
Certificate issuer:       /CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Certificate serial:       018F88242D8623759D22E9D02F0581E85F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
Manifest number:          63
Signing time:             Fri 17 May 2024 20:00:23 +0000
Manifest this update:     Fri 17 May 2024 20:00:23 +0000
Manifest next update:     Sat 18 May 2024 20:00:23 +0000
Files and hashes:         1: CHjL2QHfmLPvuZT8IQCBdgRYnHw.roa (hash: zZZQf+gCM89mQ/A4IH3Fc+xA8fO30FVIZJWOMc5Ps28=)
                          2: PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl (hash: nmqzF+wVudSjmPP/YC99x9vihgfGhxx7Tjfh8euSGjs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:2d:86:23:75:9d:22:e9:d0:2f:05:81:e8:5f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
        Validity
            Not Before: May 17 20:00:23 2024 GMT
            Not After : May 18 20:00:23 2024 GMT
        Subject: CN=a37495c6ac925df59c66058e76ed600a8b995c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:bc:97:38:8d:a3:88:a5:94:0b:6d:7f:7d:
                    f7:fe:d2:b2:f2:17:f4:46:40:c8:b6:36:dd:c6:b8:
                    1f:25:cc:17:c2:b8:dc:9f:2e:ad:4d:b4:64:ec:87:
                    d0:c3:c9:04:71:c1:8d:01:e9:1f:9e:4d:e9:82:36:
                    66:e0:b1:bc:55:19:69:6b:5c:62:b4:b5:56:a8:f2:
                    c2:a3:d0:b3:8f:a2:33:14:3a:81:94:1d:01:16:95:
                    9f:a7:51:bf:26:18:b3:36:05:6c:0e:92:5e:26:76:
                    e8:92:df:db:1f:18:fa:c0:ea:1e:ee:b2:c6:25:b0:
                    5d:53:4c:f2:48:bd:5a:d9:8b:22:92:ab:45:0b:c5:
                    31:64:67:36:04:5c:5b:01:81:10:63:7b:35:92:16:
                    25:34:ad:16:90:95:b2:8c:5d:af:e6:0b:db:e9:68:
                    99:2d:f8:c4:f6:5b:a9:85:27:79:7b:f1:4c:44:ef:
                    20:be:bc:4a:27:f3:d8:3d:0b:29:5e:0c:74:24:4b:
                    58:ca:ed:41:ae:bf:55:09:f0:af:20:19:f8:81:63:
                    79:4a:19:ad:17:bb:d1:d8:28:95:d2:dd:28:7c:cd:
                    69:66:45:67:51:29:5e:41:e6:53:f1:b5:38:85:15:
                    54:9b:8a:79:cd:cb:64:5f:b6:c8:79:7f:8c:62:eb:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:74:95:C6:AC:92:5D:F5:9C:66:05:8E:76:ED:60:0A:8B:99:5C:3B
            X509v3 Authority Key Identifier:
                keyid:3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:78:64:54:b5:2c:6a:22:79:33:bb:55:42:2b:81:25:62:80:
         ee:e9:5a:13:18:3c:0a:42:ed:f2:da:d2:8e:ee:54:75:9d:ea:
         f6:95:9c:53:2f:f2:45:a9:ce:cc:6b:4f:cb:3c:85:ff:30:07:
         0b:8a:2d:bc:61:d2:ab:58:cf:22:62:b1:8c:69:51:6c:5c:2f:
         fb:b8:2c:3a:30:de:7b:84:3e:80:54:c8:5c:5b:29:30:95:0c:
         37:0d:43:65:86:10:6a:05:ef:10:31:52:4e:de:5b:96:ff:8d:
         60:b0:7d:48:85:1b:14:dd:b0:34:76:15:04:59:e0:09:5f:d1:
         c4:e6:da:f8:0f:fa:e3:46:c6:61:3f:7e:75:57:7d:e6:aa:ea:
         ef:ea:10:ef:27:0b:79:33:e8:1c:7e:97:a9:8c:48:97:07:b2:
         19:87:81:cf:87:b3:8d:ac:ee:20:89:6e:9e:ab:09:8e:be:27:
         86:55:76:1d:70:f4:f6:2b:57:88:4b:c9:b6:6f:4e:c3:8e:88:
         87:ac:3e:69:5a:24:be:38:ef:d2:dd:ef:6d:d0:a9:0a:02:ba:
         71:eb:23:15:21:22:4f:e2:31:2b:af:cc:b1:b3:5a:6c:ff:25:
         85:c3:e1:4c:c4:d2:c3:1d:a2:30:da:ee:88:2f:81:c7:d6:24:
         da:85:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:52 2024 by rpki-client on console-ams.rpki-client.org