Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File:                     PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier:          nrZdtjW6hqxORZY/l3lkERiUAKCH4J/vQbzvF5JOGLQ=
Subject key identifier:   0F:85:DA:7E:03:8A:5E:40:FF:DC:6C:6B:62:BC:B2:9D:62:21:58:05
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer:       /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial:       018F847E3E6F8602CA6FFD18954EEEC4B533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 03:00:17 +0000
Manifest this update:     Fri 17 May 2024 03:00:17 +0000
Manifest next update:     Sat 18 May 2024 03:00:17 +0000
Files and hashes:         1: 3fzCxQynwPm7h72QaV4oVvuZScc.roa (hash: z7nn6GGxYdOo5u0q1Tc7AZLTAkWZlu3y8jgNqA0Y9IA=)
                          2: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: rjDbqNnchhHLaGMaOd3ajyQRaAjF2hCiF2q24Bb9S9w=)
                          3: y8mM_BVHlYbND8RrwVTiOPoFeUI.roa (hash: IeLTbLGFpq7iTGGNRj0E1ODlPNZu7ptkSbfRRyIW5dA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:3e:6f:86:02:ca:6f:fd:18:95:4e:ee:c4:b5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
        Validity
            Not Before: May 17 03:00:17 2024 GMT
            Not After : May 18 03:00:17 2024 GMT
        Subject: CN=0f85da7e038a5e40ffdc6c6b62bcb29d62215805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:39:82:28:19:0a:04:82:0d:23:58:5c:64:
                    11:2c:01:fb:17:5b:6f:cf:a3:37:a8:dd:c5:1d:61:
                    5c:c9:5c:c2:95:eb:ce:b7:07:b0:43:c8:53:5c:79:
                    89:3d:ed:47:15:28:10:6d:94:f5:46:e2:4e:b8:14:
                    19:f4:98:68:4f:9a:8e:9f:3c:0a:c1:73:d1:9c:da:
                    3a:d6:c7:f0:30:2e:b3:27:d4:9d:ec:93:76:3b:e7:
                    4f:ec:56:50:20:cb:09:b4:18:34:11:e9:e0:b0:e7:
                    80:a3:c1:ed:8c:0a:0b:8c:30:01:9f:36:d1:a9:2a:
                    5a:1f:88:48:57:93:de:27:3e:66:67:19:71:48:bd:
                    cd:f8:24:43:74:48:22:da:23:55:2c:eb:83:e0:b9:
                    74:93:ee:ed:20:0a:20:ec:b1:09:06:35:bd:80:7c:
                    27:eb:a1:e4:98:8e:fc:9c:c7:b2:a0:1c:28:56:37:
                    00:0a:1d:e6:86:e7:46:18:81:c4:d5:12:6f:41:6e:
                    2c:2b:2c:8c:26:09:0f:8e:e5:c8:10:0e:ff:85:0c:
                    26:70:5f:90:4a:49:85:b2:39:46:e9:18:9c:69:11:
                    d6:cb:55:9a:73:b3:ca:3f:ac:93:5c:be:98:ad:59:
                    ec:90:61:55:49:36:34:d6:10:45:df:f2:60:c4:18:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:85:DA:7E:03:8A:5E:40:FF:DC:6C:6B:62:BC:B2:9D:62:21:58:05
            X509v3 Authority Key Identifier:
                keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:be:0b:e3:27:06:da:cb:dc:12:0f:f6:de:9a:79:e2:14:9d:
         f5:4c:48:15:9f:59:c5:ff:9e:0f:5b:5a:07:d4:dd:9a:28:74:
         0e:f5:d4:38:17:27:70:f9:e5:01:86:49:0f:78:4e:15:6b:53:
         50:a9:fb:80:48:75:5c:15:64:7f:19:46:32:58:d3:68:2a:65:
         35:7f:d3:a6:76:31:2e:58:d9:ee:4b:e8:61:84:b7:33:f9:98:
         9b:c1:b7:6e:0c:6d:14:7c:3b:be:17:f8:af:68:df:70:65:46:
         9c:97:31:3a:fb:4d:25:79:0d:48:07:16:52:13:07:0c:91:49:
         7b:8d:35:1e:4f:70:61:96:cc:1e:e6:4a:c2:22:da:15:7e:fc:
         2c:82:86:1d:54:85:dd:23:b0:a2:a1:85:3b:7f:d4:07:f4:c3:
         f6:70:54:50:db:a7:49:bb:e5:fc:0a:f7:ae:1f:74:1c:ea:5d:
         a5:32:f9:26:4b:73:e6:7b:5b:5e:6d:76:78:82:2f:48:c7:65:
         aa:df:2b:62:c0:f0:1b:95:d4:15:92:ab:18:0e:8b:d0:ab:bf:
         69:28:a2:a4:3a:34:d6:9b:86:bb:65:25:25:e5:f7:4d:7c:20:
         60:27:83:97:03:bc:80:05:4b:f3:12:26:11:86:c7:e7:da:f9:
         c2:ff:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:00:08 2024 by rpki-client on console-ams.rpki-client.org