Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File:                     pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier:          lR5aJys9RC3/72F/K3Z7shCyflHccc6lhS/jdZXR4tQ=
Subject key identifier:   F0:9C:9D:B7:8B:BE:28:5B:96:C7:F3:49:E2:DE:F9:3E:91:65:8E:B4
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer:       /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial:       019356892194A84DB996DAEAE8C0B7821400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number:          12C5
Signing time:             Sat 23 Nov 2024 01:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:47 +0000
Files and hashes:         1: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: 8EafpVZvBwswo+WI2KBJg0ub81I7oUMo76wNs5zrVOw=)
                          2: tJspN-rqArJvHDalck5RGTca6vI.roa (hash: Hm75VhAxDykvE69Xvh7ZB2+emaZmyrzcVVi3WRxuIlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:21:94:a8:4d:b9:96:da:ea:e8:c0:b7:82:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
        Validity
            Not Before: Nov 23 01:00:47 2024 GMT
            Not After : Nov 24 01:00:47 2024 GMT
        Subject: CN=f09c9db78bbe285b96c7f349e2def93e91658eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:66:98:1f:bb:d4:35:c7:b3:ee:1a:3f:fd:
                    f9:82:71:43:7d:52:5a:a3:b2:9a:da:77:c5:d4:db:
                    9b:c4:5c:b0:69:d4:57:7c:d3:7a:10:30:69:76:6f:
                    27:db:a3:ee:17:ac:1a:cd:e4:e1:27:14:b8:7f:42:
                    ab:56:a6:13:15:7d:fb:be:1e:1c:79:1d:d5:f6:9f:
                    df:60:0e:3e:af:4d:23:7b:6c:d0:b5:e9:50:87:2f:
                    4a:36:89:e7:3a:c6:78:4c:49:61:05:4d:f6:21:d9:
                    e1:b3:c3:7b:bd:45:e6:22:7a:e8:06:75:55:92:50:
                    44:9a:fe:b7:04:be:64:ba:99:a2:01:a0:4b:0a:49:
                    dd:db:68:22:ce:80:61:29:a1:b5:92:49:7b:21:89:
                    24:92:5e:17:01:8b:32:4c:d5:d8:cd:ea:a0:09:63:
                    f7:5e:5c:29:92:5c:27:a0:5b:38:bf:b0:6c:b1:a3:
                    14:23:64:ca:a0:54:df:81:06:27:79:52:e8:ca:6a:
                    f4:aa:60:ba:f9:b6:be:9c:a7:a6:59:4b:44:02:7b:
                    21:9d:bf:05:bd:8b:5b:74:23:c3:19:86:30:40:97:
                    10:cf:f7:ef:43:e2:67:e1:aa:29:b7:64:33:c7:39:
                    7b:c3:2b:7d:bf:2f:ed:b4:ed:f3:7f:e7:4d:53:d8:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9C:9D:B7:8B:BE:28:5B:96:C7:F3:49:E2:DE:F9:3E:91:65:8E:B4
            X509v3 Authority Key Identifier:
                keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:f5:75:e7:27:9f:6b:1d:9a:f8:3e:5a:38:04:13:5a:e1:
         56:2d:58:a5:80:08:03:c2:ce:76:ce:5a:44:99:00:18:09:f7:
         35:db:ea:77:1b:6c:3d:78:93:7b:52:d8:f6:04:fd:44:1a:7d:
         73:70:e4:b6:a2:fb:89:2b:80:2a:1c:aa:d3:3c:bf:c0:4e:53:
         2b:1a:f4:70:be:9f:f9:be:20:a9:f1:4b:54:b9:d0:31:44:0e:
         ce:88:cc:fc:a7:6a:02:02:ea:df:93:89:ed:e3:19:61:23:a5:
         9a:e3:d0:a3:bc:de:c1:95:80:61:da:75:60:b6:1c:73:5e:28:
         2c:cc:da:39:98:54:2c:1a:99:83:14:90:f4:61:57:a0:d1:fa:
         fd:5e:e1:73:77:56:98:09:35:33:43:1e:0e:a4:4a:bd:62:05:
         1d:4f:ef:7c:37:7c:ee:93:36:3e:ad:49:06:7f:e8:8a:c7:f0:
         e6:12:f4:8c:36:d6:fb:6e:a0:2b:cf:85:e7:21:5d:1b:a3:06:
         be:05:70:57:88:27:de:f9:dc:e9:8f:d8:ec:de:82:37:0e:52:
         68:6d:1f:d0:f9:18:ce:09:8d:e8:7b:98:d1:ad:b3:0b:84:f2:
         02:b1:3d:63:3e:da:9e:dd:ae:b5:32:f0:37:d2:8d:f0:a9:6c:
         2b:14:5c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:45 2024 by rpki-client on console-ams.rpki-client.org