Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File:                     pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier:          gYKyMmYO2cXX7fCrf9D7GC0FP7NAP7J1RYT46zGPUDo=
Subject key identifier:   53:5C:22:8F:F5:CC:E2:71:66:B3:C9:6D:57:26:B4:CE:D7:D9:4D:C0
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer:       /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial:       019041898465CE148048141366E9AAD18738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number:          AC
Signing time:             Sat 22 Jun 2024 20:00:49 +0000
Manifest this update:     Sat 22 Jun 2024 20:00:49 +0000
Manifest next update:     Sun 23 Jun 2024 20:00:49 +0000
Files and hashes:         1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: HQNhyUDuezzHdCN74E6hzeYghnp32anNTrhlLYKZWK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:84:65:ce:14:80:48:14:13:66:e9:aa:d1:87:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
        Validity
            Not Before: Jun 22 20:00:49 2024 GMT
            Not After : Jun 23 20:00:49 2024 GMT
        Subject: CN=535c228ff5cce27166b3c96d5726b4ced7d94dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:e2:da:8c:7b:0f:18:92:b0:b7:86:3d:c5:
                    e3:fd:f7:76:79:7c:1e:27:be:a8:88:11:5a:93:ed:
                    c4:92:b1:a0:19:54:aa:02:7d:4c:47:97:a0:96:da:
                    17:c8:96:de:72:dc:55:87:d6:a4:15:7a:83:54:c3:
                    53:c5:03:a9:f0:39:0c:a2:5c:6e:43:b6:2e:b0:e2:
                    77:ce:5d:ba:5f:77:08:a9:3b:33:d6:19:34:8f:9e:
                    65:f4:6b:48:78:29:18:f2:3b:3a:e9:f3:5a:2c:59:
                    ca:19:88:fb:25:15:41:f7:40:06:2a:f5:d5:78:f9:
                    da:28:e7:4a:a3:9a:ab:d1:1f:b9:a5:53:f5:4d:71:
                    ea:1a:d7:d8:7b:27:28:3c:4e:4a:49:a0:ef:02:ef:
                    17:5e:c4:4f:3f:46:48:74:1f:d6:5e:61:9a:17:a9:
                    9a:8a:2c:bd:16:ac:29:1b:a5:a5:22:34:fc:c7:1c:
                    07:1b:ed:74:aa:18:5a:ed:10:b0:f4:f5:a6:e9:c2:
                    32:bf:56:2e:3a:0a:e1:e1:a7:bf:1e:d3:de:e5:6a:
                    2b:36:ee:00:4c:e3:89:7e:04:26:73:da:b1:3c:2e:
                    c2:96:51:7c:e5:3c:bb:60:c3:78:26:4e:de:84:d9:
                    ef:39:58:e0:b0:f4:05:9c:2b:42:11:df:63:5d:51:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5C:22:8F:F5:CC:E2:71:66:B3:C9:6D:57:26:B4:CE:D7:D9:4D:C0
            X509v3 Authority Key Identifier:
                keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b0:48:de:c5:f5:3e:80:f6:14:95:1d:c2:31:ff:76:01:84:
         53:1e:dc:b9:09:88:7c:c3:58:9c:f4:7c:0a:6e:02:c4:b4:de:
         55:02:bd:7c:72:8d:c1:4c:2f:a8:20:05:e6:dc:ca:55:c6:65:
         e3:11:72:cf:d1:2f:cb:6a:35:79:19:51:1c:b7:80:15:93:6a:
         78:05:3c:95:a8:eb:71:e9:c9:21:c4:69:bc:a7:8a:22:5e:f5:
         f7:cb:8d:82:81:90:7f:e9:ca:fd:fa:97:60:9c:58:ee:43:6e:
         4c:66:c3:20:f2:2f:7c:8b:b0:1d:56:1b:77:78:21:6b:6e:45:
         84:de:a1:5c:49:8a:b4:53:31:27:38:e0:38:39:64:a8:bc:99:
         d5:98:d7:ef:29:85:af:ea:8d:77:74:d0:32:db:36:eb:ff:19:
         d9:21:36:4e:b1:6d:bd:f3:f0:a9:5c:7b:ae:c7:91:11:cf:12:
         20:5f:ea:59:89:12:9e:8c:1e:0c:a4:b6:63:89:6e:7a:f4:86:
         d4:37:e6:fa:d1:64:8c:7c:84:9c:57:0f:0b:11:62:86:f5:2e:
         7c:b1:bc:a6:2b:cf:e8:f8:36:21:d1:0f:87:22:8e:66:70:94:
         4d:6f:fe:4c:ea:a4:b0:46:2e:a8:ac:93:e0:d4:76:96:72:24:
         49:f6:1e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBiYRlzhSASBQTZumq0Yc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzIyODY0ZTM5MjBlMTYwYWQ5Yjg0ZmYwMWRhODY2YWE0
MDk3ODUwHhcNMjQwNjIyMjAwMDQ5WhcNMjQwNjIzMjAwMDQ5WjAzMTEwLwYDVQQD
Eyg1MzVjMjI4ZmY1Y2NlMjcxNjZiM2M5NmQ1NzI2YjRjZWQ3ZDk0ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FDi2ox7DxiSsLeGPcXj/fd2eXwe
J76oiBFak+3EkrGgGVSqAn1MR5egltoXyJbectxVh9akFXqDVMNTxQOp8DkMolxu
Q7YusOJ3zl26X3cIqTsz1hk0j55l9GtIeCkY8js66fNaLFnKGYj7JRVB90AGKvXV
ePnaKOdKo5qr0R+5pVP1TXHqGtfYeycoPE5KSaDvAu8XXsRPP0ZIdB/WXmGaF6ma
iiy9FqwpG6WlIjT8xxwHG+10qhha7RCw9PWm6cIyv1YuOgrh4ae/HtPe5WorNu4A
TOOJfgQmc9qxPC7CllF85Ty7YMN4Jk7ehNnvOVjgsPQFnCtCEd9jXVHgawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNcIo/1zOJxZrPJbVcmtM7X2U3AMB8GA1UdIwQY
MBaAFKXCKGTjkg4WCtm4T/AdqGaqQJeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUt
NTRjODg5MGRmZjJkLzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUtNTRjODg5MGRmZjJk
LzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7BI3sX1
PoD2FJUdwjH/dgGEUx7cuQmIfMNYnPR8Cm4CxLTeVQK9fHKNwUwvqCAF5tzKVcZl
4xFyz9Evy2o1eRlRHLeAFZNqeAU8lajrcenJIcRpvKeKIl7198uNgoGQf+nK/fqX
YJxY7kNuTGbDIPIvfIuwHVYbd3gha25FhN6hXEmKtFMxJzjgODlkqLyZ1ZjX7ymF
r+qNd3TQMts26/8Z2SE2TrFtvfPwqVx7rseREc8SIF/qWYkSnoweDKS2Y4luevSG
1Dfm+tFkjHyEnFcPCxFihvUufLG8pivP6Pg2IdEPhyKOZnCUTW/+TOqksEYuqKyT
4NR2lnIkSfYe4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:59:45 2024 by rpki-client on console-fra.rpki-client.org