Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File:                     Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier:          lnRPG8+KwtqlIgJD4rODCbdQAMLTqD11iu0/bV+1Sn0=
Subject key identifier:   93:E1:11:86:EE:AD:B5:56:1D:4A:2E:55:03:6F:B0:0D:DE:36:29:DF
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer:       /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial:       01901E8FC14E0F8DB3A348847987F92D879C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 01:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:55 +0000
Files and hashes:         1: B6nEQBRj8pQ4jFB_XCwGXWk3g8M.roa (hash: GUY4nPj43Px2Q5EJ0RIkvpMD1HgKX4QGu2BGQQRSKjc=)
                          2: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: Cb+NnfqTnGnpLMv6l6eTOeLfd1wtFMqPfw7eQkESiaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c1:4e:0f:8d:b3:a3:48:84:79:87:f9:2d:87:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
        Validity
            Not Before: Jun 16 01:00:55 2024 GMT
            Not After : Jun 17 01:00:55 2024 GMT
        Subject: CN=93e11186eeadb5561d4a2e55036fb00dde3629df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f1:1f:b3:e5:ae:d5:7f:45:0f:0f:4f:de:ca:
                    3a:e2:b3:60:49:fa:8c:de:44:a8:68:fe:1d:ba:55:
                    70:57:84:a6:06:ec:1a:b7:4d:69:04:68:0e:bf:71:
                    2c:b1:a1:1b:9b:95:5d:1c:6d:fa:42:41:f3:5d:4f:
                    db:b6:b0:5b:02:40:46:18:ec:14:d1:e9:8b:6f:29:
                    10:51:91:df:bd:b4:29:ba:25:48:c2:3a:85:03:7b:
                    4b:71:64:3f:fc:dd:61:dd:ee:5d:91:df:17:0b:f1:
                    5b:8b:e8:ac:b3:bc:f9:1c:f4:89:e9:c3:d1:a4:ea:
                    b3:89:d6:f1:ea:2e:28:d7:f7:44:ba:6b:26:94:a7:
                    af:c8:60:af:2a:0d:ff:d5:18:ad:56:9c:a2:eb:8d:
                    08:45:f6:a4:2d:02:03:79:34:fd:3b:0b:89:c1:c1:
                    d4:d4:98:4f:8e:0b:2d:54:cc:46:21:89:a0:c1:12:
                    27:03:9d:72:fb:e4:f1:87:81:09:7f:77:68:a4:5b:
                    8b:a3:66:b8:92:73:a1:f8:30:97:d3:1b:23:9d:36:
                    b0:c8:b6:96:c5:4c:24:82:d6:68:d0:1e:8d:44:40:
                    4d:7d:cd:22:06:2b:f8:c0:e0:e2:1b:8e:ae:58:a6:
                    c9:73:a7:83:80:f6:b7:9f:0d:22:e8:d8:a7:39:cc:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E1:11:86:EE:AD:B5:56:1D:4A:2E:55:03:6F:B0:0D:DE:36:29:DF
            X509v3 Authority Key Identifier:
                keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:45:0b:c0:bc:25:1e:ca:12:e9:82:67:7a:07:8d:29:ed:e5:
         02:a8:5a:3c:ca:dc:b7:bf:6b:9f:99:c6:0e:13:23:c1:18:44:
         70:ca:83:a8:bb:fa:e2:7a:eb:f5:a4:47:19:28:e0:9f:bd:be:
         88:02:05:d1:ff:6d:6f:28:0e:f1:67:c1:6f:f9:7d:91:bb:b0:
         1d:7e:26:88:32:3e:1d:a7:03:0a:55:f8:ef:1d:da:94:23:78:
         64:76:b2:2e:4e:f6:e1:74:1f:2a:9a:35:ef:75:9d:74:29:41:
         ab:72:74:de:a2:81:d9:05:4d:fa:19:17:c4:e1:29:c5:79:5c:
         e5:9b:21:2e:ad:3d:92:57:e2:93:73:21:fa:c9:82:df:6a:c3:
         5b:b5:a2:fe:b7:4f:32:1a:95:ce:ee:11:84:b6:cb:bc:f5:73:
         58:85:44:11:3f:1d:b7:e0:66:70:34:93:0a:59:c5:2a:a6:bd:
         80:2d:6e:9f:51:aa:e6:d3:a1:7a:96:bd:c5:64:d2:dc:05:69:
         5b:7f:a3:5c:ab:3a:84:34:5d:52:e6:4b:ad:7c:6d:2d:40:6c:
         8d:04:a0:70:98:54:bb:1f:d3:c1:56:cf:fa:5a:93:25:b4:bf:
         77:45:5c:16:f8:1d:68:01:40:ec:f8:d4:d3:40:ea:a4:d5:96:
         75:7b:3c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej8FOD42zo0iEeYf5LYecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzlmYjBkMTM1NTJhYWQwNGYzYWFhZWI1OGQ0ZGQ0ZTdj
ZjQwZjAwHhcNMjQwNjE2MDEwMDU1WhcNMjQwNjE3MDEwMDU1WjAzMTEwLwYDVQQD
Eyg5M2UxMTE4NmVlYWRiNTU2MWQ0YTJlNTUwMzZmYjAwZGRlMzYyOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fEfs+Wu1X9FDw9P3so64rNgSfqM
3kSoaP4dulVwV4SmBuwat01pBGgOv3EssaEbm5VdHG36QkHzXU/btrBbAkBGGOwU
0emLbykQUZHfvbQpuiVIwjqFA3tLcWQ//N1h3e5dkd8XC/Fbi+iss7z5HPSJ6cPR
pOqzidbx6i4o1/dEumsmlKevyGCvKg3/1RitVpyi640IRfakLQIDeTT9OwuJwcHU
1JhPjgstVMxGIYmgwRInA51y++Txh4EJf3dopFuLo2a4knOh+DCX0xsjnTawyLaW
xUwkgtZo0B6NREBNfc0iBiv4wODiG46uWKbJc6eDgPa3nw0i6NinOcxzPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPhEYburbVWHUouVQNvsA3eNinfMB8GA1UdIwQY
MBaAFD7J+w0TVSqtBPOqrrWNTdTnz0DwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgt
MmNiNmUzZmRmOWNkLzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgtMmNiNmUzZmRmOWNk
LzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUULwLwl
HsoS6YJnegeNKe3lAqhaPMrct79rn5nGDhMjwRhEcMqDqLv64nrr9aRHGSjgn72+
iAIF0f9tbygO8WfBb/l9kbuwHX4miDI+HacDClX47x3alCN4ZHayLk724XQfKpo1
73WddClBq3J03qKB2QVN+hkXxOEpxXlc5ZshLq09klfik3Mh+smC32rDW7Wi/rdP
MhqVzu4RhLbLvPVzWIVEET8dt+BmcDSTClnFKqa9gC1un1Gq5tOhepa9xWTS3AVp
W3+jXKs6hDRdUuZLrXxtLUBsjQSgcJhUux/TwVbP+lqTJbS/d0VcFvgdaAFA7PjU
00DqpNWWdXs8Pg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:24 2024 by rpki-client on console-ams.rpki-client.org