Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
File:                     PEHqRBeKcCxQcAACPRSp-cRyYOY.mft (raw, json)
Hash identifier:          HQOOm35xJxl+OmeP52MCcyxjNUMYLL1azlfNp3v0ktA=
Subject key identifier:   9D:2F:A7:40:A4:96:B7:7B:43:A9:DB:CE:5F:CC:EB:5F:BD:D8:C6:C1
Authority key identifier: 3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
Certificate issuer:       /CN=3c41ea44178a702c507000023d14a9f9c47260e6
Certificate serial:       019038F666D1615CD9636283BF58EF0E4D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
Manifest number:          0BD8
Signing time:             Fri 21 Jun 2024 04:03:10 +0000
Manifest this update:     Fri 21 Jun 2024 04:03:10 +0000
Manifest next update:     Sat 22 Jun 2024 04:03:10 +0000
Files and hashes:         1: PEHqRBeKcCxQcAACPRSp-cRyYOY.crl (hash: yCNqFWEJy+55DoZFpC75xzci6gnX/EzA8MiQX8pUMXA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:f6:66:d1:61:5c:d9:63:62:83:bf:58:ef:0e:4d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c41ea44178a702c507000023d14a9f9c47260e6
        Validity
            Not Before: Jun 21 04:03:10 2024 GMT
            Not After : Jun 22 04:03:10 2024 GMT
        Subject: CN=9d2fa740a496b77b43a9dbce5fcceb5fbdd8c6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:05:fb:45:06:fb:83:f9:13:1b:49:a2:b1:
                    03:46:c1:3f:37:06:be:33:0b:ed:5a:57:31:96:9d:
                    a8:82:35:e3:7e:b1:62:4e:64:f6:6b:c8:9a:c1:ff:
                    5a:4a:3d:6d:1b:59:86:63:f2:17:d5:60:29:e7:88:
                    de:e1:58:3f:d2:5f:f7:3e:94:9f:2f:1d:22:dc:ce:
                    94:cb:6e:f7:dd:e1:2a:e5:7f:df:fa:39:8c:56:68:
                    3a:bc:1e:f4:0f:61:97:12:9d:83:d7:2b:da:29:06:
                    70:5b:c2:49:da:e1:34:25:20:ef:86:00:36:17:87:
                    3b:85:89:03:0f:58:b5:ad:1d:38:76:d5:d5:45:8f:
                    fb:7b:98:48:1e:67:6c:03:92:bc:1c:4e:d2:f7:dc:
                    f7:5d:66:c6:6e:d6:d0:16:bc:0a:b2:bd:e3:af:51:
                    22:da:5a:38:eb:97:81:bf:0b:b4:b4:57:ed:0e:ef:
                    77:67:73:fa:7a:3a:19:56:ce:96:29:8c:46:93:a5:
                    a9:b4:08:15:fa:ac:0c:d2:6b:1e:0f:af:c3:0b:23:
                    ed:e1:c2:b3:61:51:26:d4:61:31:90:1f:6a:6d:95:
                    74:e2:f7:2a:ed:c3:c0:d1:9c:70:7b:7c:7e:87:19:
                    d7:fd:ab:fe:41:68:da:1b:23:7b:da:65:75:e4:ca:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2F:A7:40:A4:96:B7:7B:43:A9:DB:CE:5F:CC:EB:5F:BD:D8:C6:C1
            X509v3 Authority Key Identifier:
                keyid:3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:7e:de:fd:34:e7:3b:20:e3:5e:98:65:59:b7:dc:50:28:
         bf:c3:32:a6:3d:98:18:08:a2:50:02:e2:1e:c6:3b:17:16:f4:
         d5:7f:2f:ff:8c:87:29:42:2a:1e:f7:17:ff:15:68:a8:b7:65:
         0c:9f:b8:b2:65:bc:4f:ab:f7:07:a1:1e:29:36:55:2b:b8:e1:
         3f:9f:96:71:a3:53:22:5f:36:a2:9f:ff:eb:68:5e:e2:74:f4:
         6c:29:81:72:80:3b:a6:71:b3:f4:66:1e:d0:dd:51:7e:3a:61:
         53:e1:ee:8e:a7:e3:89:e2:96:69:8f:64:5b:ba:eb:a7:a7:6e:
         16:d6:46:f2:0d:88:78:5a:29:da:27:89:69:03:9b:cb:aa:62:
         05:e5:e7:56:8f:75:67:6b:79:3d:8f:bf:ac:9b:2c:80:4d:22:
         0c:13:61:84:3b:ab:39:ad:72:83:2e:9a:60:4a:72:a1:e9:90:
         a7:96:49:72:19:23:b3:e4:a5:c8:00:05:fd:98:72:2f:58:42:
         f6:e1:35:92:18:5c:ef:b4:b1:db:32:f7:f1:da:b2:33:a9:8b:
         ef:06:f3:a4:26:c6:48:55:7a:c2:f5:dc:a7:66:a3:63:81:fe:
         db:a5:88:e5:7a:53:f5:f3:e6:d0:3c:56:bf:56:42:cd:f4:4d:
         82:ac:59:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA49mbRYVzZY2KDv1jvDk1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNDFlYTQ0MTc4YTcwMmM1MDcwMDAwMjNkMTRhOWY5YzQ3
MjYwZTYwHhcNMjQwNjIxMDQwMzEwWhcNMjQwNjIyMDQwMzEwWjAzMTEwLwYDVQQD
Eyg5ZDJmYTc0MGE0OTZiNzdiNDNhOWRiY2U1ZmNjZWI1ZmJkZDhjNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+MF+0UG+4P5ExtJorEDRsE/Nwa+
MwvtWlcxlp2ogjXjfrFiTmT2a8iawf9aSj1tG1mGY/IX1WAp54je4Vg/0l/3PpSf
Lx0i3M6Uy2733eEq5X/f+jmMVmg6vB70D2GXEp2D1yvaKQZwW8JJ2uE0JSDvhgA2
F4c7hYkDD1i1rR04dtXVRY/7e5hIHmdsA5K8HE7S99z3XWbGbtbQFrwKsr3jr1Ei
2lo465eBvwu0tFftDu93Z3P6ejoZVs6WKYxGk6WptAgV+qwM0mseD6/DCyPt4cKz
YVEm1GExkB9qbZV04vcq7cPA0Zxwe3x+hxnX/av+QWjaGyN72mV15Mo6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0vp0Cklrd7Q6nbzl/M61+92MbBMB8GA1UdIwQY
MBaAFDxB6kQXinAsUHAAAj0UqfnEcmDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEVIcVJCZUtjQ3hRY0FBQ1BSU3AtY1J5WU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xNDQ5NDEtMTM1NC00ODY5LWFhYzIt
NzQ3MjUxZTQ5MjQyLzEvUEVIcVJCZUtjQ3hRY0FBQ1BSU3AtY1J5WU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xNDQ5NDEtMTM1NC00ODY5LWFhYzItNzQ3MjUxZTQ5MjQy
LzEvUEVIcVJCZUtjQ3hRY0FBQ1BSU3AtY1J5WU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvt+3v00
5zsg416YZVm33FAov8Mypj2YGAiiUALiHsY7Fxb01X8v/4yHKUIqHvcX/xVoqLdl
DJ+4smW8T6v3B6EeKTZVK7jhP5+WcaNTIl82op//62he4nT0bCmBcoA7pnGz9GYe
0N1RfjphU+HujqfjieKWaY9kW7rrp6duFtZG8g2IeFop2ieJaQOby6piBeXnVo91
Z2t5PY+/rJssgE0iDBNhhDurOa1ygy6aYEpyoemQp5ZJchkjs+SlyAAF/ZhyL1hC
9uE1khhc77Sx2zL38dqyM6mL7wbzpCbGSFV6wvXcp2ajY4H+26WI5XpT9fPm0DxW
v1ZCzfRNgqxZmA==
-----END CERTIFICATE-----
Generated at Fri Jun 21 05:23:12 2024 by rpki-client on console-fra.rpki-client.org