Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
File:                     pcJJ62-mtduvarnes6d3juDrNIc.mft (raw, json)
Hash identifier:          QHNYcGpdXIrqdsebXkgJZ5rCzvaSC7bozcyE8ybOMss=
Subject key identifier:   84:FE:2C:05:CB:44:F1:85:C7:42:72:BB:D5:FB:7A:F5:D8:D1:D8:32
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Certificate issuer:       /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial:       018F836DF3947B7895EF3CF7649F7F9DACD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
Manifest number:          010D
Signing time:             Thu 16 May 2024 22:02:52 +0000
Manifest this update:     Thu 16 May 2024 22:02:52 +0000
Manifest next update:     Fri 17 May 2024 22:02:52 +0000
Files and hashes:         1: Sd94T89hO5dphjDfer4lbc9jvw4.roa (hash: Swy7jNdaiwUyuv5dS5rv9JVRUI4LEy6McZiMCM5YEpA=)
                          2: ZmTv6PoYY--aJPG20SaemnUbI5E.roa (hash: k2gxgu3fzWe99hcU+pYPAEeOh6H7kCYlDn4YJmehlLo=)
                          3: pcJJ62-mtduvarnes6d3juDrNIc.crl (hash: 5GEJ5MLA+v0ych5lBkmz9687t8ps8H3J+UbxIIpruhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:f3:94:7b:78:95:ef:3c:f7:64:9f:7f:9d:ac:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
        Validity
            Not Before: May 16 22:02:52 2024 GMT
            Not After : May 17 22:02:52 2024 GMT
        Subject: CN=84fe2c05cb44f185c74272bbd5fb7af5d8d1d832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:d9:1a:06:27:ca:c0:99:0e:45:e4:12:38:
                    ca:82:4f:05:08:a4:c8:08:d3:0d:71:a4:02:97:f8:
                    1e:e7:79:f7:6f:f1:75:84:8d:f3:e5:60:54:b3:d0:
                    69:58:93:b4:e0:67:8a:50:60:60:bc:1d:87:dc:4b:
                    02:68:8e:46:0a:86:fa:03:4e:3e:48:a2:fb:47:a9:
                    47:79:65:45:9f:ac:89:db:b2:e8:5f:7a:16:e3:1b:
                    27:c1:4e:f5:c2:4d:20:12:e2:cb:43:1e:f2:27:b3:
                    76:db:db:80:6e:b1:7f:60:ad:19:d9:36:0c:99:ca:
                    c4:89:4a:19:86:a1:12:b9:c8:f5:8b:d1:e8:49:11:
                    be:78:08:5c:c4:2f:22:ad:65:63:07:9e:78:56:11:
                    52:bc:02:6b:08:69:85:af:e0:2d:5e:7e:78:be:9a:
                    2d:dc:8f:48:11:39:be:aa:d0:c6:e9:a8:16:ce:79:
                    c0:7c:b3:68:59:0f:d6:5e:0f:87:45:7a:df:e1:2d:
                    21:d2:f6:a9:94:51:b1:e7:65:b1:1e:ee:e7:ec:68:
                    a9:e5:44:1f:14:91:03:8e:86:96:c5:b0:58:7b:62:
                    0e:27:93:e5:2c:d7:01:44:55:36:6f:65:70:76:24:
                    8e:56:01:24:c5:18:81:42:62:16:85:0b:d8:07:a4:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:2C:05:CB:44:F1:85:C7:42:72:BB:D5:FB:7A:F5:D8:D1:D8:32
            X509v3 Authority Key Identifier:
                keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:30:6c:09:a3:49:4c:f8:c1:b1:15:ef:9f:a0:dd:fb:ae:8d:
         10:0a:5f:2e:b1:06:f4:97:36:81:49:92:16:07:e5:2e:8c:e9:
         f1:2d:46:4e:55:86:9d:a0:c0:7d:f9:e4:4a:7a:27:f9:af:bf:
         c4:0a:82:d8:80:8f:04:27:bb:8b:7a:04:a7:fd:75:9a:4d:99:
         08:38:78:63:37:a2:5e:23:57:b2:5e:87:f1:63:36:7b:97:03:
         78:85:8e:80:61:43:4e:72:7a:15:ad:68:b8:e9:4c:23:7b:6f:
         36:b8:6e:09:0d:56:13:dd:6a:a0:ec:e0:63:35:ae:02:01:77:
         f3:d4:7a:26:0e:27:25:50:7f:99:4a:b8:73:72:42:8c:c2:81:
         a7:62:01:2b:22:89:18:11:62:1a:ab:98:5e:04:3e:6d:77:26:
         32:8d:c0:bf:d7:3c:60:9f:cb:7d:9d:99:f8:45:06:c2:c2:a4:
         63:7e:f7:e1:fe:73:d6:ad:e8:23:06:ca:a4:f3:2f:bc:60:58:
         90:35:26:3b:9a:15:4b:c9:20:37:a4:aa:e7:c2:56:56:86:84:
         64:80:a0:42:a8:57:20:88:9e:b0:8b:91:91:03:77:11:56:e3:
         a1:ff:30:42:f2:93:5e:8e:86:6f:78:ea:f4:6e:9b:20:f4:f2:
         55:2c:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:53:40 2024 by rpki-client on console-ams.rpki-client.org