Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File:                     pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier:          ohSsPOFoUh776nka8idJlH2x8S2yYRTiH+pfy2KIiqo=
Subject key identifier:   D3:9E:67:CA:93:F4:3C:89:29:47:30:4D:A2:E3:91:71:F8:CD:94:79
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer:       /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial:       018F86A3EB2B3CC3107980B3BDDDB4ABA1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number:          01C6
Signing time:             Fri 17 May 2024 13:00:40 +0000
Manifest this update:     Fri 17 May 2024 13:00:40 +0000
Manifest next update:     Sat 18 May 2024 13:00:40 +0000
Files and hashes:         1: LRar0FDfUkJZRjaiGpB_smjzDFk.roa (hash: HvLAVJBU/sQ3W3mLHk4q8CvfZe7e9nOzavEgcqxiGPg=)
                          2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: Vjk5fN0vlxeLHKfEU6FDiRaMTCsRIJepSKQewkrOQp8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:eb:2b:3c:c3:10:79:80:b3:bd:dd:b4:ab:a1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
        Validity
            Not Before: May 17 13:00:40 2024 GMT
            Not After : May 18 13:00:40 2024 GMT
        Subject: CN=d39e67ca93f43c892947304da2e39171f8cd9479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:da:91:51:fe:37:ea:11:8c:ac:fe:29:50:
                    17:53:8c:ac:9e:50:5c:8a:f6:79:db:9c:f2:15:cd:
                    85:f4:b6:8d:89:4b:6c:5b:a5:7d:7b:50:a4:51:21:
                    ea:4a:b9:bf:7c:7c:dc:48:2a:e2:1d:c0:9f:4b:0d:
                    c8:f7:c2:bb:65:07:80:cd:4a:7c:e3:d9:4a:2b:6b:
                    74:75:40:82:32:47:f5:bd:1e:83:73:1e:14:79:29:
                    17:2b:0f:4b:22:4c:10:03:7f:03:0c:97:90:4d:65:
                    5d:0f:ac:36:49:5f:c1:25:a2:07:86:25:77:17:63:
                    28:7e:0b:7f:1d:11:0c:24:c2:bc:03:6a:21:82:be:
                    e3:88:58:a0:f4:9f:e3:dc:72:a4:01:b3:5b:c2:c4:
                    cf:bb:74:87:a1:ed:18:60:b8:fb:f3:e6:95:1e:99:
                    34:e4:45:25:d4:7c:30:50:4b:ac:f8:ba:ae:7f:b1:
                    11:48:85:52:f8:36:65:13:78:a0:d4:eb:e2:5e:d1:
                    26:07:c9:04:d1:57:c1:3e:ff:e4:0a:6d:09:f2:8f:
                    54:96:7c:0c:eb:ab:5d:30:e8:b5:64:3a:d6:73:47:
                    03:8e:dc:1d:f9:3f:d8:51:c1:d9:22:9e:89:7b:df:
                    ad:48:ce:2e:cc:e7:45:45:73:4a:36:3b:61:49:8f:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:67:CA:93:F4:3C:89:29:47:30:4D:A2:E3:91:71:F8:CD:94:79
            X509v3 Authority Key Identifier:
                keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:86:3e:84:28:99:f2:90:5b:b3:65:aa:f8:7d:5d:69:83:
         8d:18:3e:55:8f:ef:d9:e6:b8:44:de:08:17:bc:3f:a8:b4:e8:
         5b:c0:bb:b2:9a:fe:05:7c:d6:f7:56:36:06:c3:36:33:7a:6f:
         b1:86:ad:75:43:c1:82:a1:cb:a5:98:3b:d3:bd:a7:74:c7:1a:
         8c:fd:ba:4f:e1:a2:f3:f8:19:db:da:4a:e2:93:39:eb:86:a0:
         8d:53:5b:fb:96:6a:78:36:5c:62:09:4e:b4:99:48:fa:49:87:
         61:2f:c9:7a:8c:64:2d:04:e6:18:a1:33:ef:50:2f:50:e6:6d:
         1c:50:d1:7a:a1:ed:f3:32:f4:8b:35:6a:4f:96:60:74:ed:a5:
         1f:24:8a:36:81:16:23:ae:f9:15:11:63:c9:4b:f5:76:01:5f:
         1d:a9:e5:98:1f:81:69:01:f3:be:4e:f7:b0:69:c9:43:25:b1:
         07:14:9a:0d:7c:69:a5:a5:40:9d:59:65:41:7b:dc:d9:49:b8:
         4d:3a:39:39:52:c4:c7:ba:c7:91:5b:b8:41:bf:4d:fc:54:d9:
         96:08:17:fc:42:40:5f:35:4b:7a:57:f5:0c:c8:fc:77:a8:c4:
         fa:84:46:49:a7:45:da:eb:90:b1:8a:af:44:7e:4a:a0:da:e6:
         74:18:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:25:19 2024 by rpki-client on console-fra.rpki-client.org