Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File:                     PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier:          YnVYeOm3Te+UV2RbcH05k4G1hTYKllxH8bul1LXExrQ=
Subject key identifier:   8D:1C:3A:8D:99:1A:F2:E3:DF:B7:19:89:D4:12:1F:43:E2:86:19:AB
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer:       /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial:       018F87484156C78878886F482243FE998EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:10 +0000
Manifest this update:     Fri 17 May 2024 16:00:10 +0000
Manifest next update:     Sat 18 May 2024 16:00:10 +0000
Files and hashes:         1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: 1olilXLCffKFZ+KMguiHvsnuqrI+cfZper57Qh0V+Q8=)
                          2: VevHPwAB1iJyPKAMEf-9jonQkw8.roa (hash: 4/+GFUHa73gsaLJx3C+/KNKqa6wmzJjBpqrLYFHIP6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:41:56:c7:88:78:88:6f:48:22:43:fe:99:8e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
        Validity
            Not Before: May 17 16:00:10 2024 GMT
            Not After : May 18 16:00:10 2024 GMT
        Subject: CN=8d1c3a8d991af2e3dfb71989d4121f43e28619ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:4c:7a:78:c9:2f:f8:b3:37:9d:c7:a2:fa:
                    08:27:52:86:81:5d:8e:de:44:47:ed:c7:48:26:fa:
                    d0:f7:8f:1b:ff:af:60:74:30:9a:df:f1:8f:63:c5:
                    18:ec:8a:80:39:31:c0:e4:7d:f1:70:33:e8:8b:a4:
                    46:6e:0d:e1:94:ea:11:0f:e0:6c:79:75:02:ab:19:
                    77:0e:b6:e2:e3:ff:0f:5f:8f:f7:47:7b:f6:13:33:
                    82:16:f5:3b:43:62:7b:60:71:1c:6d:b2:4e:c9:6a:
                    8f:dc:ef:3e:72:de:f5:3a:32:c9:3c:0e:e6:33:7d:
                    3f:f8:90:de:9e:11:33:16:b4:7c:7a:97:31:38:92:
                    dc:a2:28:1d:71:f7:85:df:77:a6:47:a7:3e:a9:26:
                    16:e4:27:fa:e5:71:c3:f7:cf:44:4b:55:23:0b:3b:
                    8c:7c:ea:7b:61:57:48:5d:d6:ee:19:5b:33:4c:79:
                    5b:d4:64:c1:ed:63:ad:a8:04:c0:85:6f:93:a9:64:
                    de:8b:4c:c6:0c:2a:48:5b:39:5b:fd:72:4b:3a:85:
                    fb:be:93:bc:74:a6:71:35:ed:bc:db:fb:fd:7a:2f:
                    f6:5c:35:04:41:61:26:a0:95:43:e9:c6:75:59:e6:
                    9c:bc:06:b6:28:75:cf:01:cb:7d:2d:16:bc:92:11:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1C:3A:8D:99:1A:F2:E3:DF:B7:19:89:D4:12:1F:43:E2:86:19:AB
            X509v3 Authority Key Identifier:
                keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:90:42:88:f4:92:f3:4f:c8:30:4e:e1:4a:58:13:ad:09:2f:
         7a:80:a9:e3:fd:47:4d:70:ff:1b:7d:79:46:da:c7:24:35:e1:
         32:63:e2:37:3a:c2:57:98:d7:1f:cd:a5:78:a7:4d:d7:e7:e5:
         9c:7b:04:54:06:b9:9d:34:d1:b3:77:1b:65:8e:29:53:07:58:
         35:e5:01:0a:66:4c:67:ed:cf:10:8f:09:a0:99:12:8e:cd:91:
         3e:8d:86:f8:09:3d:83:5d:6c:f4:38:d1:21:dd:b8:67:8e:99:
         8e:c2:9b:7a:af:4c:1d:65:71:fe:d1:6e:9b:cb:de:62:bf:60:
         4e:3c:e6:be:d5:93:7d:b1:f8:7e:40:a9:40:32:c7:85:87:0a:
         ed:8a:fa:36:14:f2:d0:59:66:e7:35:3d:ce:1b:fd:38:20:65:
         67:34:f3:c2:89:6d:85:98:ec:bb:0d:57:96:3c:8c:96:87:b5:
         5f:7c:6a:73:d1:41:9d:9e:72:c5:1f:db:89:85:6c:bb:55:43:
         f7:5d:22:72:7f:af:18:90:4d:27:13:5a:2a:26:03:c0:a2:a4:
         fd:62:15:e2:7a:16:f4:2e:99:93:a6:14:0c:2b:5b:3e:d7:39:
         38:36:5f:6a:3f:fb:00:1e:ff:22:a9:72:fe:a6:81:85:b3:2f:
         9c:f4:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:24 2024 by rpki-client on console-fra.rpki-client.org