Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          xiQmGgCFJq3Qm+QpkCYXVKUkHTlE26gXbei7pg7niWc=
Subject key identifier:   E3:F7:0D:AE:2C:08:A6:D4:26:59:66:75:E2:68:69:33:24:6E:59:5B
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       01901D463B7C5061E921387098E66F9D8B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          0134
Signing time:             Sat 15 Jun 2024 19:01:00 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:00 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:00 +0000
Files and hashes:         1: 1-ridWpw_Cy8sFUzhPJ7gmkBOmBY.roa (hash: VAy0Rt1K0o6BE6vYTKpzn9eipOFvLzLMCHpr4jLpd60=)
                          2: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: vhvLa98jtjDsWA4DHxypevCcDAsb1tIgHpmf25917FA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:3b:7c:50:61:e9:21:38:70:98:e6:6f:9d:8b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Jun 15 19:01:00 2024 GMT
            Not After : Jun 16 19:01:00 2024 GMT
        Subject: CN=e3f70dae2c08a6d426596675e2686933246e595b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:1d:ee:d7:09:64:6d:f3:fb:39:39:61:43:
                    fb:57:19:c2:55:4e:cb:d1:82:c6:39:ef:9d:b9:c6:
                    1f:50:22:39:58:a1:43:83:1f:aa:7e:15:22:c5:60:
                    80:08:e7:69:15:d6:f6:90:eb:24:f7:8e:f4:55:61:
                    8b:dd:2e:73:53:49:ce:d1:3b:0c:43:77:34:2e:d7:
                    59:a9:94:31:b2:86:d1:2a:48:3c:63:ca:ae:78:bc:
                    c7:29:c8:1d:9c:ac:24:b8:9d:b5:ce:01:ba:1a:d4:
                    0c:4a:ea:52:31:9a:b7:13:77:09:30:27:03:e9:0d:
                    43:df:11:a1:5b:ae:df:2c:4e:28:32:76:b3:c7:ed:
                    25:b0:0d:07:04:54:82:c6:1d:68:42:b8:d3:17:55:
                    f9:53:ab:60:f5:51:35:63:0f:e0:29:cf:8e:99:e4:
                    6a:e5:50:b9:9a:5e:a7:69:2f:43:50:68:86:51:cd:
                    10:86:ec:e8:f7:0d:7f:ff:77:7c:12:2d:8a:a8:10:
                    8b:29:c3:f8:ff:8e:32:30:c1:f0:b3:51:83:c0:db:
                    ed:7c:73:b4:be:ee:f2:fe:ee:0d:6d:d2:9d:b7:c9:
                    48:e8:30:db:2f:16:5e:5c:56:99:e1:9f:ce:93:ed:
                    fe:5f:47:e5:ee:98:82:68:cd:f9:af:2b:8e:ed:24:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F7:0D:AE:2C:08:A6:D4:26:59:66:75:E2:68:69:33:24:6E:59:5B
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:15:77:70:fe:be:30:01:9c:75:45:9b:40:85:d9:34:18:73:
         f3:3d:4e:d3:a0:be:c9:c1:4c:50:b4:bb:4f:fb:24:c1:76:6c:
         bd:a0:f0:aa:6d:e3:57:1f:2f:50:d4:d2:28:06:03:10:a4:70:
         04:5c:ee:95:76:0e:03:78:1b:86:f6:b2:4d:ad:e8:85:39:7c:
         8b:f7:a1:97:b7:41:a3:c5:83:a7:b2:9d:71:51:d4:a0:e6:9e:
         19:ea:ff:57:77:39:d1:40:98:0a:9d:db:de:45:38:78:ba:4c:
         0b:5e:31:a4:fc:bf:34:cb:d4:7f:0a:f9:dd:13:5d:e8:2b:a4:
         f7:4c:db:fb:9a:bf:d6:71:0f:41:07:73:15:45:a4:01:3e:cb:
         9b:8d:d9:95:cc:24:20:e4:3c:6b:96:a9:47:71:ca:55:ee:1e:
         f6:f1:d1:96:84:17:cf:e2:02:5f:a3:60:c6:69:31:2c:db:90:
         d4:e6:30:9e:93:ea:4d:08:6a:aa:72:cf:74:ea:24:ed:d4:97:
         a6:f9:33:74:c7:42:19:c3:66:bc:d3:44:1b:ed:75:6c:61:d2:
         ba:1f:20:0a:03:50:00:79:f2:58:9b:49:ec:8b:b0:9e:7e:97:
         99:7a:5e:09:c5:1e:17:be:7b:d0:d7:34:44:1a:93:67:68:d3:
         aa:27:af:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRjt8UGHpIThwmOZvnYtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjU5NWYyNjY1OWZjNzRkYjg4MzJkNWRhMjNiMGU5ZTM2
N2ZjYjMwHhcNMjQwNjE1MTkwMTAwWhcNMjQwNjE2MTkwMTAwWjAzMTEwLwYDVQQD
EyhlM2Y3MGRhZTJjMDhhNmQ0MjY1OTY2NzVlMjY4NjkzMzI0NmU1OTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uwd7tcJZG3z+zk5YUP7VxnCVU7L
0YLGOe+ducYfUCI5WKFDgx+qfhUixWCACOdpFdb2kOsk9470VWGL3S5zU0nO0TsM
Q3c0LtdZqZQxsobRKkg8Y8queLzHKcgdnKwkuJ21zgG6GtQMSupSMZq3E3cJMCcD
6Q1D3xGhW67fLE4oMnazx+0lsA0HBFSCxh1oQrjTF1X5U6tg9VE1Yw/gKc+OmeRq
5VC5ml6naS9DUGiGUc0Qhuzo9w1//3d8Ei2KqBCLKcP4/44yMMHws1GDwNvtfHO0
vu7y/u4NbdKdt8lI6DDbLxZeXFaZ4Z/Ok+3+X0fl7piCaM35ryuO7STktwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP3Da4sCKbUJllmdeJoaTMkbllbMB8GA1UdIwQY
MBaAFD8llfJmWfx024gy1dojsOnjZ/yzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yOTNjYmYtY2Q1Yy00ZWU4LWI3MWUt
ZjY2NjY5MDlkZDRhLzEvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yOTNjYmYtY2Q1Yy00ZWU4LWI3MWUtZjY2NjY5MDlkZDRh
LzEvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBV3cP6+
MAGcdUWbQIXZNBhz8z1O06C+ycFMULS7T/skwXZsvaDwqm3jVx8vUNTSKAYDEKRw
BFzulXYOA3gbhvayTa3ohTl8i/ehl7dBo8WDp7KdcVHUoOaeGer/V3c50UCYCp3b
3kU4eLpMC14xpPy/NMvUfwr53RNd6Cuk90zb+5q/1nEPQQdzFUWkAT7Lm43Zlcwk
IOQ8a5apR3HKVe4e9vHRloQXz+ICX6NgxmkxLNuQ1OYwnpPqTQhqqnLPdOok7dSX
pvkzdMdCGcNmvNNEG+11bGHSuh8gCgNQAHnyWJtJ7Iuwnn6XmXpeCcUeF7570Nc0
RBqTZ2jTqievWg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:02 2024 by rpki-client on console-ams.rpki-client.org