Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File:                     PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier:          nyrecPWSCjN0Hvuqzdle8vLWnczVraSWmUJgC4RU7/0=
Subject key identifier:   5B:FA:1E:2B:DB:94:05:75:8F:61:0C:58:BF:49:77:B5:8E:B9:E7:47
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer:       /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial:       01901DEB132645C81445FFC4461A92FD3ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number:          024E
Signing time:             Sat 15 Jun 2024 22:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:03 +0000
Files and hashes:         1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: HY0KLA+FUURJBinmTmGxfcnozw35JtTZU8jwpYiR7Kk=)
                          2: iNdwPl_S2mrmuCe0zg2vuvQ1yfs.roa (hash: 0ekT060M2CjB5qlgETix9D/ZTEXAPHvu9lHv6OO1W48=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:13:26:45:c8:14:45:ff:c4:46:1a:92:fd:3a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
        Validity
            Not Before: Jun 15 22:01:03 2024 GMT
            Not After : Jun 16 22:01:03 2024 GMT
        Subject: CN=5bfa1e2bdb9405758f610c58bf4977b58eb9e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:96:9c:90:d1:4a:d7:cb:7b:fa:0b:59:a9:
                    2a:40:ec:63:15:28:c4:cb:7e:ea:17:16:63:74:74:
                    eb:44:69:d7:19:e8:d6:38:20:08:2b:b9:1b:24:95:
                    a8:60:e5:bd:7f:3b:5b:95:0c:a0:26:d7:d0:eb:c1:
                    20:33:87:8c:3f:ae:86:6c:b2:72:5b:be:f0:51:df:
                    d4:45:f3:12:74:8d:fd:49:ac:f8:41:b3:d7:41:d6:
                    b5:b8:1e:82:85:61:64:47:12:8e:54:6e:cd:31:3c:
                    ad:93:36:61:81:37:6d:1b:73:ad:cd:c2:c1:30:80:
                    db:9f:5d:69:77:91:9b:d6:03:5a:58:b6:fd:e6:43:
                    7f:06:1b:3f:fb:4a:7f:c7:dd:c2:c7:09:72:a2:94:
                    84:95:86:e8:2e:9f:89:dd:bd:df:21:92:21:07:6d:
                    df:11:12:24:99:81:48:d2:1e:aa:17:2e:16:5a:28:
                    52:c9:b3:2b:a9:51:fb:71:aa:73:dc:7e:8b:97:f0:
                    3f:9d:2d:63:29:26:5e:39:d0:26:6b:42:cc:3a:0a:
                    3b:d4:5f:d5:e3:a9:77:9a:48:1f:bd:85:eb:55:af:
                    9a:d2:6f:82:9f:93:6e:71:1b:9d:78:bd:20:d8:27:
                    90:21:bc:a7:25:66:6f:74:42:1a:08:a3:2b:06:db:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FA:1E:2B:DB:94:05:75:8F:61:0C:58:BF:49:77:B5:8E:B9:E7:47
            X509v3 Authority Key Identifier:
                keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:52:09:a5:bd:7d:7c:f7:50:6b:ab:d7:17:fb:55:7f:83:a1:
         ea:bb:a9:b8:94:10:e5:f2:5c:4b:83:97:a7:96:eb:d7:ba:21:
         12:a9:7f:17:ec:ca:0e:a5:23:8a:dd:d6:09:a9:25:7a:54:be:
         18:1c:88:fe:76:5c:f2:7f:c1:c1:e1:d6:de:0b:a0:a2:60:c3:
         08:a7:cc:90:d0:8c:13:61:02:16:e7:ad:fe:44:71:42:78:72:
         95:60:1e:bd:d1:65:b7:76:10:55:a8:e7:e2:19:05:1d:07:11:
         e5:a6:67:e9:d5:23:a0:59:59:16:14:7d:7b:4d:a3:dd:db:af:
         8f:cf:da:df:b4:e9:07:01:25:3a:04:85:38:ac:76:84:6d:df:
         92:d4:e8:cc:a3:4e:e4:75:5f:aa:c9:9a:c9:f0:17:81:fc:c9:
         75:f5:d4:1c:32:70:97:89:20:df:0e:ba:75:bb:5a:c1:a2:d4:
         a7:a0:b7:d6:e8:ba:5b:78:2a:f1:28:57:b0:7c:8d:f9:81:b6:
         98:2e:28:20:7d:9b:5a:bb:3d:fd:86:04:4c:7c:39:53:fc:f1:
         76:30:49:f3:2e:38:2f:8a:12:36:a8:b0:7c:f4:08:13:c1:39:
         8f:16:8c:d4:cd:0a:6b:e9:3d:7f:f8:37:6e:77:41:bc:28:98:
         4e:e1:85:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6xMmRcgURf/ERhqS/TrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1
Y2ZhODgwHhcNMjQwNjE1MjIwMTAzWhcNMjQwNjE2MjIwMTAzWjAzMTEwLwYDVQQD
Eyg1YmZhMWUyYmRiOTQwNTc1OGY2MTBjNThiZjQ5NzdiNThlYjllNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP6WnJDRStfLe/oLWakqQOxjFSjE
y37qFxZjdHTrRGnXGejWOCAIK7kbJJWoYOW9fztblQygJtfQ68EgM4eMP66GbLJy
W77wUd/URfMSdI39Saz4QbPXQda1uB6ChWFkRxKOVG7NMTytkzZhgTdtG3OtzcLB
MIDbn11pd5Gb1gNaWLb95kN/Bhs/+0p/x93CxwlyopSElYboLp+J3b3fIZIhB23f
ERIkmYFI0h6qFy4WWihSybMrqVH7capz3H6Ll/A/nS1jKSZeOdAma0LMOgo71F/V
46l3mkgfvYXrVa+a0m+Cn5NucRudeL0g2CeQIbynJWZvdEIaCKMrBtuCMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFv6HivblAV1j2EMWL9Jd7WOuedHMB8GA1UdIwQY
MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It
MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm
LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1IJpb19
fPdQa6vXF/tVf4Oh6rupuJQQ5fJcS4OXp5br17ohEql/F+zKDqUjit3WCaklelS+
GByI/nZc8n/BweHW3gugomDDCKfMkNCME2ECFuet/kRxQnhylWAevdFlt3YQVajn
4hkFHQcR5aZn6dUjoFlZFhR9e02j3duvj8/a37TpBwElOgSFOKx2hG3fktTozKNO
5HVfqsmayfAXgfzJdfXUHDJwl4kg3w66dbtawaLUp6C31ui6W3gq8ShXsHyN+YG2
mC4oIH2bWrs9/YYETHw5U/zxdjBJ8y44L4oSNqiwfPQIE8E5jxaM1M0Ka+k9f/g3
bndBvCiYTuGFeA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:54:23 2024 by rpki-client on console-fra.rpki-client.org