Manifest

$ rpki-client -vvf rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.mft
File:                     05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.mft (raw, json)
Hash identifier:          g5TpVWi0mJ8T0GLEVXi5NrRkIuLwTkeyvBa9ikcIMLk=
Subject key identifier:   99:35:CA:D7:BF:69:30:9D:46:CD:1D:57:DE:A7:58:A4:F9:2C:6D:06
Authority key identifier: 05:C9:6A:1B:8C:43:C6:C3:5C:AE:40:8D:6C:8C:85:29:23:DD:B1:BA
Certificate issuer:       /CN=05c96a1b8c43c6c35cae408d6c8c852923ddb1ba
Certificate serial:       2442311FC570D6CD7A679D47394CF9CA68432B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BclqG4xDxsNcrkCNbIyFKSPdsbo.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.mft
Manifest number:          0105
Signing time:             Fri 17 May 2024 20:30:40 +0000
Manifest this update:     Fri 17 May 2024 20:25:40 +0000
Manifest next update:     Sat 18 May 2024 21:11:40 +0000
Files and hashes:         1: AS209025.asa (hash: sK+1SvCMbKLwxd+JnzsAfr99AtEsCY5qj+W8jF+bnFM=)
                          2: 05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.crl (hash: 7UOgeeMia6MQNy/7HK5ORN0EUC2Qg7hRQBGLHI5GJSI=)

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.crl
                          rsync://rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BclqG4xDxsNcrkCNbIyFKSPdsbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:31:1f:c5:70:d6:cd:7a:67:9d:47:39:4c:f9:ca:68:43:2b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c96a1b8c43c6c35cae408d6c8c852923ddb1ba
        Validity
            Not Before: May 17 20:25:40 2024 GMT
            Not After : May 18 21:11:40 2024 GMT
        Subject: CN=9935CAD7BF69309D46CD1D57DEA758A4F92C6D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:14:fe:c5:b5:96:a7:fa:bc:d5:58:8b:81:
                    c8:81:ba:b6:a1:f6:36:38:ba:ee:ce:a1:f4:71:83:
                    f3:b3:f3:4e:0f:f8:97:ac:c3:0f:cd:df:fb:9c:a3:
                    a4:ae:73:af:7f:e4:92:45:a9:0c:9e:ac:70:2c:6b:
                    ac:0c:52:9a:e3:37:95:0e:2a:d8:6e:3e:63:18:b0:
                    b1:4d:40:fd:e0:28:d7:c6:6d:ea:96:06:16:78:a1:
                    42:d8:f4:7f:b8:3d:19:05:dd:62:6b:da:2f:e1:4e:
                    72:52:0a:21:8d:74:58:d9:58:cd:26:df:ed:1b:2f:
                    d7:ca:81:5a:a7:61:a8:f3:84:0f:ff:63:3d:55:fd:
                    10:ee:62:0e:93:76:39:5d:1f:0c:a0:28:7e:ef:6d:
                    c3:29:8b:7b:d6:f9:87:73:dc:44:26:51:c6:ad:fe:
                    63:3b:99:52:93:c2:04:98:b9:7f:26:5a:7b:30:49:
                    d4:dd:e8:86:4c:06:9f:f7:e3:9c:f6:32:92:3a:e6:
                    ae:5a:c8:0b:91:9e:a2:5c:aa:e2:4c:eb:98:8b:dc:
                    d1:c8:d9:1b:1b:14:f3:4f:e6:dc:f1:03:a4:bb:7e:
                    dc:72:80:23:3b:fd:57:34:78:15:87:89:cc:34:e9:
                    04:e7:9a:06:ee:bc:93:62:cd:63:a5:dc:94:82:9d:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:35:CA:D7:BF:69:30:9D:46:CD:1D:57:DE:A7:58:A4:F9:2C:6D:06
            X509v3 Authority Key Identifier:
                keyid:05:C9:6A:1B:8C:43:C6:C3:5C:AE:40:8D:6C:8C:85:29:23:DD:B1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BclqG4xDxsNcrkCNbIyFKSPdsbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:dc:4e:a2:35:83:45:f5:50:d3:9e:61:93:6e:4d:ec:a3:54:
         fc:3f:eb:4e:09:de:41:43:9b:1a:00:3e:08:8f:6e:1c:10:0b:
         95:1f:b1:db:12:04:df:d0:74:72:da:35:7c:6e:c0:17:24:2b:
         d7:8d:43:14:41:29:87:e3:2f:4f:f5:5b:36:7a:9c:05:c3:7d:
         d7:d7:a9:45:2f:15:c0:1d:11:a1:b0:27:18:8d:1a:c0:25:ab:
         19:dc:b2:f1:fd:33:f8:f3:8d:eb:f1:21:18:79:41:7f:12:29:
         0c:8b:fd:ab:64:30:e6:17:eb:84:64:f9:c5:55:35:f9:e2:32:
         b0:65:e8:d8:92:34:21:25:a7:4b:85:9b:0b:67:50:9b:99:f3:
         b2:2d:da:e3:2f:d6:6f:66:2f:4a:cb:b2:9e:94:a0:88:29:ac:
         6a:39:78:cb:89:9e:24:6a:77:e5:2e:71:57:95:90:d7:7b:9a:
         67:c0:08:17:6f:2c:df:20:59:09:91:63:fa:b7:20:b6:46:70:
         84:2f:72:64:b4:2c:8e:03:90:18:01:65:a4:9c:b6:45:ee:d7:
         38:eb:d7:1a:e1:19:4b:79:f4:f5:f1:12:9b:bd:a4:49:e7:87:
         01:3a:05:78:02:36:b4:17:08:d2:c7:85:8b:6c:ec:2f:7c:c3:
         85:f5:57:45
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUJEIxH8Vw1s16Z51HOUz5ymhDKzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVjOTZhMWI4YzQzYzZjMzVjYWU0MDhkNmM4Yzg1Mjky
M2RkYjFiYTAeFw0yNDA1MTcyMDI1NDBaFw0yNDA1MTgyMTExNDBaMDMxMTAvBgNV
BAMTKDk5MzVDQUQ3QkY2OTMwOUQ0NkNEMUQ1N0RFQTc1OEE0RjkyQzZEMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1BT+xbWWp/q81ViLgciBurah
9jY4uu7OofRxg/Oz804P+Jesww/N3/uco6Suc69/5JJFqQyerHAsa6wMUprjN5UO
KthuPmMYsLFNQP3gKNfGbeqWBhZ4oULY9H+4PRkF3WJr2i/hTnJSCiGNdFjZWM0m
3+0bL9fKgVqnYajzhA//Yz1V/RDuYg6TdjldHwygKH7vbcMpi3vW+Ydz3EQmUcat
/mM7mVKTwgSYuX8mWnswSdTd6IZMBp/345z2MpI65q5ayAuRnqJcquJM65iL3NHI
2RsbFPNP5tzxA6S7ftxygCM7/Vc0eBWHicw06QTnmgbuvJNizWOl3JSCnUSBAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUmTXK179pMJ1GzR1X3qdYpPksbQYwHwYDVR0j
BBgwFoAUBclqG4xDxsNcrkCNbIyFKSPdsbowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5uYXAucmUvcmVwby9wb25nZXJ5LzAv
MDVDOTZBMUI4QzQzQzZDMzVDQUU0MDhENkM4Qzg1MjkyM0REQjFCQS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0JjbHFHNHhEeHNOY3JrQ05iSXlGS1NQZHNiby5j
ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3Jwa2kubmFw
LnJlL3JlcG8vcG9uZ2VyeS8wLzA1Qzk2QTFCOEM0M0M2QzM1Q0FFNDA4RDZDOEM4
NTI5MjNEREIxQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCM3E6iNYNF9VDTnmGTbk3so1T8P+tOCd5B
Q5saAD4Ij24cEAuVH7HbEgTf0HRy2jV8bsAXJCvXjUMUQSmH4y9P9Vs2epwFw33X
16lFLxXAHRGhsCcYjRrAJasZ3LLx/TP4843r8SEYeUF/EikMi/2rZDDmF+uEZPnF
VTX54jKwZejYkjQhJadLhZsLZ1CbmfOyLdrjL9ZvZi9Ky7KelKCIKaxqOXjLiZ4k
anflLnFXlZDXe5pnwAgXbyzfIFkJkWP6tyC2RnCEL3JktCyOA5AYAWWknLZF7tc4
69ca4RlLefT18RKbvaRJ54cBOgV4Aja0FwjSx4WLbOwvfMOF9VdF
-----END CERTIFICATE-----
Generated at Fri May 17 21:11:05 2024 by rpki-client on console-ams.rpki-client.org