Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File:                     PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier:          OnnevidadqTO81Pnq8AchJyVevwJDY8fGCqY9TgTCPQ=
Subject key identifier:   18:77:5B:BC:E4:F3:F5:59:46:86:9E:D0:63:8F:2A:69:AA:B4:A7:C5
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer:       /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial:       018F885AD61CC3812DC57323FA1C69C85358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number:          10E6
Signing time:             Fri 17 May 2024 21:00:05 +0000
Manifest this update:     Fri 17 May 2024 21:00:05 +0000
Manifest next update:     Sat 18 May 2024 21:00:05 +0000
Files and hashes:         1: 6J-J8LZo94z6gE063U9AgVwDGt4.roa (hash: 8BoZffFQcM/CGtS3sVHPCj980ZnJQQvhJUUCSHQzeWw=)
                          2: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: OUmLP4ytKS7ghUDA0r5a9d4gNXm7mPG5+oux5ps4dbM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:d6:1c:c3:81:2d:c5:73:23:fa:1c:69:c8:53:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
        Validity
            Not Before: May 17 21:00:05 2024 GMT
            Not After : May 18 21:00:05 2024 GMT
        Subject: CN=18775bbce4f3f55946869ed0638f2a69aab4a7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:12:22:bd:c6:c8:43:16:a8:7f:84:af:e6:
                    37:92:b6:47:cf:63:79:a9:47:6c:d3:16:3e:cc:c5:
                    10:a3:d6:8b:7d:39:9d:c2:ff:38:44:d0:19:ee:c2:
                    f8:40:f1:53:47:9b:2c:67:dc:a6:1b:41:33:1a:b3:
                    d9:ad:e2:fa:1c:82:ce:f8:ea:c6:61:3f:e1:61:b5:
                    36:f3:83:f6:98:bf:08:19:c7:6e:b5:f5:5a:b4:33:
                    89:80:b0:5f:f4:cb:74:f7:21:82:70:41:3e:e5:a5:
                    23:08:b3:a1:2a:bf:b9:ef:b7:ff:0a:31:6e:21:39:
                    95:db:94:81:d0:9b:56:85:81:7b:60:87:26:02:27:
                    c0:b5:d6:26:c8:fa:4e:9b:9c:8f:91:fa:82:87:98:
                    56:ab:f0:52:fc:40:c0:1b:4a:e3:56:01:08:68:ff:
                    b9:04:64:6f:8e:b4:f6:1b:75:8e:07:74:ce:19:cb:
                    0c:3e:74:0b:c7:f4:ac:77:c7:62:95:59:90:03:d3:
                    8b:eb:1f:e2:09:8e:57:9f:ee:6c:04:a6:ef:f3:cd:
                    36:c9:21:22:75:4f:4e:25:56:08:a0:a9:db:3b:3b:
                    45:8c:c0:68:66:57:ad:bd:82:ac:3b:72:62:97:04:
                    f1:a7:99:5c:e4:18:ff:9d:78:38:b1:0f:6b:d5:6d:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:77:5B:BC:E4:F3:F5:59:46:86:9E:D0:63:8F:2A:69:AA:B4:A7:C5
            X509v3 Authority Key Identifier:
                keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:eb:97:5b:ec:54:0e:0c:42:d6:c7:ec:9a:59:c5:b1:55:
         ad:45:bd:76:96:8c:6b:bc:8e:15:71:c9:b0:64:f3:59:fd:a2:
         4d:08:25:54:44:93:c7:fe:2c:52:a5:d5:76:da:4c:b9:aa:97:
         0e:2b:c3:55:1c:36:96:56:d3:d0:82:99:fa:b0:c5:0d:64:6c:
         00:bf:39:8a:1e:4e:af:86:63:5c:42:41:b5:87:ea:d5:fc:26:
         63:fe:f4:8e:01:9b:a3:b8:09:3e:1c:de:68:a2:28:46:23:3e:
         d9:91:dd:0b:59:e0:b1:0b:f9:5e:8c:48:0c:c1:bf:96:e1:3b:
         f1:2f:a7:9f:e9:95:fe:29:e1:29:fd:95:bf:18:bc:34:70:0f:
         0b:4f:2d:5c:0f:d5:a1:26:35:9f:38:61:b3:a0:23:36:66:aa:
         86:2d:d9:32:54:62:be:7e:9c:6b:da:32:e7:2f:66:ca:28:5c:
         45:cb:67:e3:ca:69:4f:34:65:64:f0:3e:e4:be:10:32:22:80:
         cf:8e:79:75:fb:a4:43:b4:cd:d3:46:2a:a6:ba:de:b2:c6:d5:
         bd:b3:ec:de:6f:24:a8:c0:15:7e:35:32:37:08:87:00:62:9f:
         f1:91:b7:bf:ec:1a:02:11:c6:15:ab:b6:75:66:4c:75:68:2f:
         f0:54:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:43 2024 by rpki-client on console-ams.rpki-client.org