Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File:                     Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier:          q8zlSxPgOs8vawxW0cABoiUv8oqYLYV4YMws+XHpIZI=
Subject key identifier:   F2:9C:17:8B:3D:81:43:F0:0D:12:9D:8C:B0:75:5B:5F:A5:70:04:F8
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer:       /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial:       018F8636196AC6CB89C6D451D757D7BD0871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 11:00:43 +0000
Manifest this update:     Fri 17 May 2024 11:00:43 +0000
Manifest next update:     Sat 18 May 2024 11:00:43 +0000
Files and hashes:         1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: OXHTjt7023sCxbD2l0IYDSjy8vLcYja/0LpI2eAYIWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:19:6a:c6:cb:89:c6:d4:51:d7:57:d7:bd:08:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
        Validity
            Not Before: May 17 11:00:43 2024 GMT
            Not After : May 18 11:00:43 2024 GMT
        Subject: CN=f29c178b3d8143f00d129d8cb0755b5fa57004f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:fc:87:b3:b0:92:9a:5d:5a:c7:57:a1:8e:
                    00:81:50:78:73:7f:e9:40:4b:cb:49:d1:ff:dd:47:
                    67:1d:df:d9:d3:c5:f5:ec:ef:ac:10:a9:42:90:22:
                    4d:4b:a2:09:43:af:f4:e2:db:a2:48:3c:2b:15:20:
                    d0:68:ed:f0:8e:8f:ee:15:bf:f8:f4:df:72:da:7e:
                    92:6c:4c:10:9d:b3:a2:bb:ee:2d:bf:3f:8b:be:c9:
                    5c:d9:34:ea:d4:bf:33:d2:51:72:87:09:d2:d4:a9:
                    1e:b5:30:88:3e:ee:a6:f9:f0:43:96:1b:e7:9e:3f:
                    bb:72:cd:7e:1a:e0:3c:1d:88:83:c9:9d:b7:9a:c6:
                    55:32:72:cb:3b:03:39:32:54:92:29:98:06:8d:02:
                    88:e4:28:38:94:73:cf:3f:0c:b1:9c:88:65:e7:8e:
                    c8:a0:a7:0c:1d:b4:c5:fe:eb:6c:fd:a8:fb:b0:de:
                    76:2c:96:d2:c3:50:44:95:f8:94:14:1a:4a:49:75:
                    22:c2:13:00:eb:b1:5f:af:a6:c4:96:05:a0:57:39:
                    f8:d0:95:4e:f3:15:de:09:f5:64:74:52:9f:66:88:
                    de:57:68:bc:d4:13:ab:04:27:b9:30:be:c2:ff:68:
                    3e:27:75:f7:40:77:e0:d7:52:38:67:3e:16:09:d5:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9C:17:8B:3D:81:43:F0:0D:12:9D:8C:B0:75:5B:5F:A5:70:04:F8
            X509v3 Authority Key Identifier:
                keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:21:67:26:82:63:b3:e0:09:b6:f0:e7:a9:11:b7:52:4c:
         60:3c:ee:a4:18:63:30:db:ac:bf:b5:32:67:5d:a8:d2:1c:9a:
         31:36:67:4f:d0:d9:b6:ab:1d:81:eb:3e:10:d5:22:06:67:a6:
         02:31:92:da:92:32:da:36:ae:24:9f:45:6b:d4:92:82:03:b6:
         16:46:ae:90:01:9e:70:94:3a:f9:72:f0:7c:27:88:ee:2f:21:
         2e:e0:c4:8a:7d:57:32:07:15:63:2b:1b:32:70:f0:ec:95:04:
         94:68:86:42:a9:ea:ec:62:a8:07:5a:e4:f2:b6:f6:e6:45:03:
         02:44:a4:39:d9:dc:2f:50:c9:cd:78:6c:2c:90:4f:80:57:1c:
         f7:56:ad:fd:c8:4f:6e:92:8c:db:ac:8e:98:d5:2c:c5:c3:68:
         2b:5a:22:70:93:28:17:1f:92:71:90:fb:0d:0d:67:6c:d9:ca:
         6d:7f:0b:84:2b:39:64:b7:d5:93:e0:6d:35:c0:e9:07:14:ca:
         7f:ca:8a:7c:4e:69:f8:c3:e0:ef:eb:37:a1:11:43:d9:41:07:
         2d:50:b9:f5:bd:15:ec:78:e6:ee:c6:99:dd:25:46:64:15:16:
         e2:db:35:9d:3c:4e:38:95:e8:59:3b:3c:bc:a6:2d:2c:ba:66:
         92:02:e9:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNhlqxsuJxtRR11fXvQhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkY2Y0ZjBjMjc3M2VmOTg5MDBmOWMzNTkwNzVjY2E2MWQx
N2MwYjMwHhcNMjQwNTE3MTEwMDQzWhcNMjQwNTE4MTEwMDQzWjAzMTEwLwYDVQQD
EyhmMjljMTc4YjNkODE0M2YwMGQxMjlkOGNiMDc1NWI1ZmE1NzAwNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzv8h7OwkppdWsdXoY4AgVB4c3/p
QEvLSdH/3UdnHd/Z08X17O+sEKlCkCJNS6IJQ6/04tuiSDwrFSDQaO3wjo/uFb/4
9N9y2n6SbEwQnbOiu+4tvz+Lvslc2TTq1L8z0lFyhwnS1KketTCIPu6m+fBDlhvn
nj+7cs1+GuA8HYiDyZ23msZVMnLLOwM5MlSSKZgGjQKI5Cg4lHPPPwyxnIhl547I
oKcMHbTF/uts/aj7sN52LJbSw1BElfiUFBpKSXUiwhMA67Ffr6bElgWgVzn40JVO
8xXeCfVkdFKfZojeV2i81BOrBCe5ML7C/2g+J3X3QHfg11I4Zz4WCdURoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKcF4s9gUPwDRKdjLB1W1+lcAT4MB8GA1UdIwQY
MBaAFD3PTwwnc++YkA+cNZB1zKYdF8CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYt
M2JkZTczOTZiN2I0LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYtM2JkZTczOTZiN2I0
LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCwhZyaC
Y7PgCbbw56kRt1JMYDzupBhjMNusv7UyZ12o0hyaMTZnT9DZtqsdges+ENUiBmem
AjGS2pIy2jauJJ9Fa9SSggO2FkaukAGecJQ6+XLwfCeI7i8hLuDEin1XMgcVYysb
MnDw7JUElGiGQqnq7GKoB1rk8rb25kUDAkSkOdncL1DJzXhsLJBPgFcc91at/chP
bpKM26yOmNUsxcNoK1oicJMoFx+ScZD7DQ1nbNnKbX8LhCs5ZLfVk+BtNcDpBxTK
f8qKfE5p+MPg7+s3oRFD2UEHLVC59b0V7Hjm7saZ3SVGZBUW4ts1nTxOOJXoWTs8
vKYtLLpmkgLpBA==
-----END CERTIFICATE-----
Generated at Fri May 17 17:54:56 2024 by rpki-client on console-ams.rpki-client.org