Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/PLeOcZG8djnih_UWpvQBnhpBjdc.mft
File:                     PLeOcZG8djnih_UWpvQBnhpBjdc.mft (raw, json)
Hash identifier:          S5ZB7jy10c78JipiOQlOM5RByFvmSxaYeRL9eiguAQk=
Subject key identifier:   7C:46:BB:11:CF:54:26:37:2B:8F:97:4F:C1:4C:A0:11:CF:BC:B7:FB
Authority key identifier: 3C:B7:8E:71:91:BC:76:39:E2:87:F5:16:A6:F4:01:9E:1A:41:8D:D7
Certificate issuer:       /CN=3cb78e7191bc7639e287f516a6f4019e1a418dd7
Certificate serial:       019357D290FE01154C088F4E38183C0E8D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLeOcZG8djnih_UWpvQBnhpBjdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/PLeOcZG8djnih_UWpvQBnhpBjdc.mft
Manifest number:          0A29
Signing time:             Sat 23 Nov 2024 07:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:37 +0000
Files and hashes:         1: PLeOcZG8djnih_UWpvQBnhpBjdc.crl (hash: eAnDyy58N6EGeg/pJp8ClypzUC8ffADZ31Trr9lnF+M=)
                          2: iqhfIWHPGdg2Y0V1VHq3unnjtA4.roa (hash: KBD5T3VBu2pmtzFIhOfjYUGoSlw0vi/tTWwPDAECjAA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/PLeOcZG8djnih_UWpvQBnhpBjdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/PLeOcZG8djnih_UWpvQBnhpBjdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLeOcZG8djnih_UWpvQBnhpBjdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:90:fe:01:15:4c:08:8f:4e:38:18:3c:0e:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb78e7191bc7639e287f516a6f4019e1a418dd7
        Validity
            Not Before: Nov 23 07:00:37 2024 GMT
            Not After : Nov 24 07:00:37 2024 GMT
        Subject: CN=7c46bb11cf5426372b8f974fc14ca011cfbcb7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:55:6b:ec:95:34:12:92:0c:40:23:c3:70:
                    10:0c:91:9c:e9:a5:86:fc:d5:6c:2a:92:49:95:0c:
                    6c:08:96:f6:54:73:aa:8c:34:a2:00:e5:d3:e7:9c:
                    f9:e3:b9:de:76:e4:3a:69:65:10:76:54:22:bf:e7:
                    f1:e6:8f:1e:77:5c:a3:9d:25:fc:b9:c4:28:10:b4:
                    c2:63:a6:6d:ef:fc:89:ff:c6:cb:84:8b:cb:47:0c:
                    61:34:35:87:8b:10:c7:90:bc:e3:59:93:33:7f:40:
                    a1:b6:15:0b:32:0d:36:b6:86:df:1b:68:4f:ee:d2:
                    0a:e8:3b:61:ad:39:88:e0:75:58:de:dc:fd:22:27:
                    01:16:a2:98:9a:e5:92:2c:ed:76:6b:a8:b8:a3:60:
                    44:d8:3e:55:83:35:f2:03:d5:99:af:c0:d4:2c:a6:
                    f5:ce:83:b8:53:fa:39:f4:6d:e7:2d:6e:15:7c:4b:
                    58:c7:a9:08:31:4b:b4:9f:d1:d1:f7:21:79:e1:c6:
                    1b:81:82:a2:06:ec:4c:96:86:ec:8a:0a:86:21:25:
                    ce:4e:25:1c:27:f0:45:f4:94:5c:5e:b8:a7:ea:19:
                    8a:58:ad:58:c5:db:db:9e:80:af:cb:7d:b0:f3:63:
                    7c:b3:d5:9e:0d:2e:a3:61:66:d0:b7:dd:63:32:cb:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:46:BB:11:CF:54:26:37:2B:8F:97:4F:C1:4C:A0:11:CF:BC:B7:FB
            X509v3 Authority Key Identifier:
                keyid:3C:B7:8E:71:91:BC:76:39:E2:87:F5:16:A6:F4:01:9E:1A:41:8D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeOcZG8djnih_UWpvQBnhpBjdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/PLeOcZG8djnih_UWpvQBnhpBjdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bd6b11-c523-43d1-af58-f679bd812747/1/PLeOcZG8djnih_UWpvQBnhpBjdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:dc:30:ce:6a:23:58:de:30:37:35:0f:6c:9b:f7:37:fb:
         3e:37:37:bb:b5:4c:c1:3d:ae:b3:d6:23:92:82:2a:fc:17:dd:
         74:1f:a1:98:8c:04:30:3d:a1:d9:bb:5d:79:e1:93:6d:0f:a1:
         a4:fc:95:6b:d6:32:7a:2e:7e:d3:29:03:09:a3:56:fe:a1:03:
         0e:70:2a:81:6c:33:aa:c3:4e:85:2b:3b:07:22:96:31:39:da:
         a6:aa:a6:9a:6f:9f:81:11:21:a0:af:d8:30:d3:77:e6:a8:b1:
         94:eb:d6:2b:97:36:a5:51:f0:60:20:db:b8:50:08:ae:28:3b:
         80:48:41:18:a6:5d:c9:02:03:58:50:ac:d1:09:1b:0b:c3:f5:
         ca:0a:4e:75:f8:7b:ac:f1:c0:41:74:0c:a7:f6:09:91:f1:cd:
         93:6f:47:0a:46:29:11:f1:8c:c9:f4:db:dc:b2:21:4c:35:d1:
         5e:3d:0c:75:50:df:04:06:cc:c7:a8:97:bc:e0:33:bd:d6:34:
         6e:71:5d:22:37:12:93:7c:59:83:ad:b9:6e:e0:73:a7:36:d5:
         c7:ec:1f:82:25:c0:d4:1d:bd:06:72:89:15:da:4f:c2:56:47:
         23:34:93:dc:94:fe:aa:5a:1b:b8:93:9f:88:c0:19:a6:3e:9f:
         bf:d2:2e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0pD+ARVMCI9OOBg8Do1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjc4ZTcxOTFiYzc2MzllMjg3ZjUxNmE2ZjQwMTllMWE0
MThkZDcwHhcNMjQxMTIzMDcwMDM3WhcNMjQxMTI0MDcwMDM3WjAzMTEwLwYDVQQD
Eyg3YzQ2YmIxMWNmNTQyNjM3MmI4Zjk3NGZjMTRjYTAxMWNmYmNiN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVBVa+yVNBKSDEAjw3AQDJGc6aWG
/NVsKpJJlQxsCJb2VHOqjDSiAOXT55z547neduQ6aWUQdlQiv+fx5o8ed1yjnSX8
ucQoELTCY6Zt7/yJ/8bLhIvLRwxhNDWHixDHkLzjWZMzf0ChthULMg02tobfG2hP
7tIK6DthrTmI4HVY3tz9IicBFqKYmuWSLO12a6i4o2BE2D5VgzXyA9WZr8DULKb1
zoO4U/o59G3nLW4VfEtYx6kIMUu0n9HR9yF54cYbgYKiBuxMlobsigqGISXOTiUc
J/BF9JRcXrin6hmKWK1YxdvbnoCvy32w82N8s9WeDS6jYWbQt91jMsuWMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxGuxHPVCY3K4+XT8FMoBHPvLf7MB8GA1UdIwQY
MBaAFDy3jnGRvHY54of1Fqb0AZ4aQY3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExlT2NaRzhkam5paF9VV3B2UUJuaHBCamRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZDZiMTEtYzUyMy00M2QxLWFmNTgt
ZjY3OWJkODEyNzQ3LzEvUExlT2NaRzhkam5paF9VV3B2UUJuaHBCamRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iZDZiMTEtYzUyMy00M2QxLWFmNTgtZjY3OWJkODEyNzQ3
LzEvUExlT2NaRzhkam5paF9VV3B2UUJuaHBCamRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIF/cMM5q
I1jeMDc1D2yb9zf7Pjc3u7VMwT2us9YjkoIq/BfddB+hmIwEMD2h2btdeeGTbQ+h
pPyVa9Yyei5+0ykDCaNW/qEDDnAqgWwzqsNOhSs7ByKWMTnapqqmmm+fgREhoK/Y
MNN35qixlOvWK5c2pVHwYCDbuFAIrig7gEhBGKZdyQIDWFCs0QkbC8P1ygpOdfh7
rPHAQXQMp/YJkfHNk29HCkYpEfGMyfTb3LIhTDXRXj0MdVDfBAbMx6iXvOAzvdY0
bnFdIjcSk3xZg625buBzpzbVx+wfgiXA1B29BnKJFdpPwlZHIzST3JT+qlobuJOf
iMAZpj6fv9IuTA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:02 2024 by rpki-client on console-ams.rpki-client.org