Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File:                     PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier:          D2rfTukJVp96pUnsgc9m2p+q923mEEvs4gZxLOLl6fk=
Subject key identifier:   4E:8F:22:59:6F:D3:6C:B6:B4:8A:D9:EE:A2:29:B2:60:47:B3:1E:3A
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer:       /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial:       01935764FC257EDBFEA296326BBFC5DD31B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number:          0E98
Signing time:             Sat 23 Nov 2024 05:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:56 +0000
Files and hashes:         1: OMJUyu0VSz2Q3sRO6KH5YjRTBlI.roa (hash: aJDvuD/tFuJMemwKR7dcqu1hucDUsD4bdzkws4sij9I=)
                          2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: /XV+ZL3hpH72taa+VS9PQ/X4jwlQhIlvdooOrBtcyL8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:fc:25:7e:db:fe:a2:96:32:6b:bf:c5:dd:31:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
        Validity
            Not Before: Nov 23 05:00:56 2024 GMT
            Not After : Nov 24 05:00:56 2024 GMT
        Subject: CN=4e8f22596fd36cb6b48ad9eea229b26047b31e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:92:bc:fd:16:b9:fb:80:c7:eb:e7:9a:15:
                    40:31:b1:8c:28:7f:18:04:bf:74:4e:f8:63:10:9f:
                    1e:fc:56:a0:8e:4f:60:4f:1e:d7:d8:72:a8:05:56:
                    31:c2:1c:4f:32:39:89:45:58:03:fb:06:42:28:91:
                    47:6c:8b:0a:4b:26:a8:83:8b:7b:b3:7c:09:45:a4:
                    0c:9b:5f:c7:15:d5:f1:a8:41:e8:41:a6:6e:6e:e2:
                    3e:23:ec:31:eb:d8:70:6b:84:7b:89:4d:54:9f:5a:
                    3a:66:23:95:aa:37:d5:4f:9c:36:dd:6a:d3:5d:6d:
                    b1:48:d8:cb:09:2d:ed:35:e8:22:88:b3:8a:b1:f4:
                    df:31:56:aa:06:89:04:96:72:a3:fe:d4:e8:15:54:
                    de:bb:4f:a8:9d:50:98:0c:1d:69:e6:d3:f2:15:46:
                    f7:ee:f9:3c:96:3a:cf:7e:e6:8d:2c:f4:2a:63:2a:
                    c4:7e:c6:b6:0b:25:ce:50:a4:da:65:d1:0e:d4:35:
                    b4:e1:01:44:4f:94:bc:eb:27:64:f9:61:0b:07:38:
                    c9:9d:e3:fa:6b:13:3d:43:1b:0e:c5:57:40:9e:2f:
                    08:d3:a2:17:6d:0c:ee:16:38:d3:4f:1a:ba:1c:bc:
                    17:d5:6b:af:f6:bb:24:8c:1f:21:74:e0:f2:0a:28:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8F:22:59:6F:D3:6C:B6:B4:8A:D9:EE:A2:29:B2:60:47:B3:1E:3A
            X509v3 Authority Key Identifier:
                keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:29:d5:c5:bb:6e:21:63:a0:31:bf:4a:1d:fd:45:29:0f:01:
         6e:13:de:f6:75:66:93:12:7d:67:59:46:0b:6c:51:a3:79:29:
         04:31:0b:00:87:96:60:bd:53:50:75:a4:0c:6f:0b:35:8e:c0:
         e1:96:fd:b6:be:3c:42:bf:25:cc:fc:d5:e2:9a:5e:6f:c9:43:
         24:f6:37:4c:5f:03:bb:1a:8d:cb:cf:27:c4:60:d2:05:fb:08:
         7e:b4:04:6d:70:96:dd:1f:ae:b4:13:df:64:45:8a:f5:aa:50:
         25:8c:86:31:4f:87:20:85:27:24:f0:21:52:a8:c4:26:1c:84:
         43:1e:c7:6e:f2:ca:48:93:d2:fc:26:df:92:15:14:0f:df:e4:
         a6:d2:35:82:e3:de:1a:47:24:2d:90:4c:d9:91:a9:15:6d:2f:
         12:23:34:b3:75:10:50:f2:81:8d:cb:1c:de:07:4a:73:37:2b:
         6f:67:e9:4e:27:08:9a:0c:43:a9:30:8e:5c:a9:a5:4f:90:9b:
         31:2c:5f:eb:91:2f:7a:b0:c2:b2:d3:e3:95:fe:81:3b:eb:83:
         e2:d3:55:91:c5:d0:57:8a:82:8d:a7:0f:6d:15:38:f2:c9:e1:
         56:f3:2c:55:c8:5e:13:8d:84:99:bc:2c:e9:52:55:fc:b0:08:
         87:03:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:56 2024 by rpki-client on console-ams.rpki-client.org