Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File:                     PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier:          BwHT6+vS4XOlSnQ6uQ73lPxRH0XT7zI6eOPci1J2SvA=
Subject key identifier:   2D:BA:18:38:85:DE:32:D5:16:F9:28:EE:34:5E:C0:A6:79:12:65:39
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer:       /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial:       0191F93495098C423671803030AEFECB7230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number:          C0
Signing time:             Mon 16 Sep 2024 05:00:58 +0000
Manifest this update:     Mon 16 Sep 2024 05:00:58 +0000
Manifest next update:     Tue 17 Sep 2024 05:00:58 +0000
Files and hashes:         1: 4TmSKNsXZph-iEBsDVSXAsqfP64.roa (hash: loDpzpz540ok0krS9/p9yjD7Vhl3JqcJcv+qor9RgzA=)
                          2: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: y7n0z8X2d7IlcRnJhmdOFTUZjbBax4WeiYG5k5gJvoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:95:09:8c:42:36:71:80:30:30:ae:fe:cb:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
        Validity
            Not Before: Sep 16 05:00:58 2024 GMT
            Not After : Sep 17 05:00:58 2024 GMT
        Subject: CN=2dba183885de32d516f928ee345ec0a679126539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:bf:3d:61:b9:d9:fb:04:e1:f7:14:96:8b:
                    72:93:27:2e:b3:d7:c3:e1:d2:46:ba:fd:cd:da:99:
                    d3:b1:7e:f2:fd:a7:50:aa:c5:bd:f3:42:70:19:10:
                    04:a6:3e:52:11:03:fe:e1:0d:02:cc:1c:e4:c9:f7:
                    37:c4:bc:ed:58:2c:21:b9:6b:58:20:57:3a:2e:09:
                    02:99:cb:89:17:44:04:dd:0e:cd:ad:89:11:59:98:
                    3b:9f:ff:b1:a7:01:88:e3:9e:f4:90:c0:8d:c1:48:
                    85:37:2b:e0:e1:02:ef:94:b2:fa:e4:4a:20:e6:ce:
                    6c:bb:70:c8:51:d1:d9:38:42:22:b5:ab:8e:48:98:
                    0a:7e:56:e9:d2:a4:06:83:3b:3e:e4:a0:03:44:0a:
                    b5:2c:c5:3a:19:d4:8e:0f:43:30:7c:a2:68:82:da:
                    b7:e9:4c:a0:2a:37:9e:71:0a:1a:7a:da:02:bb:65:
                    8c:78:6c:d1:83:70:be:cf:6d:59:e0:9e:35:89:a5:
                    d4:91:16:4f:17:9f:7e:88:d0:27:fa:14:d1:7f:c8:
                    be:ca:07:b6:f1:1f:06:42:d2:97:94:ee:1d:55:25:
                    e1:94:eb:04:61:5a:da:d8:2f:84:0d:33:18:a4:e8:
                    7f:bc:23:c3:36:98:b2:c2:9a:8b:9d:92:c2:e4:42:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BA:18:38:85:DE:32:D5:16:F9:28:EE:34:5E:C0:A6:79:12:65:39
            X509v3 Authority Key Identifier:
                keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e6:b7:95:46:48:a6:2b:e0:56:b8:76:56:4f:9b:b1:e6:72:
         40:9f:ac:09:8b:95:30:9e:59:24:53:81:9e:3e:a9:1b:db:31:
         d1:db:3f:2d:76:32:ff:f1:01:be:a4:b7:2b:ca:94:55:7b:2f:
         59:57:a2:54:d4:84:82:20:24:b1:87:85:3d:3f:35:f8:56:81:
         7b:1c:54:a3:ce:82:39:df:94:88:a3:43:b8:23:75:c5:73:45:
         8b:d4:1a:cd:64:dd:92:47:23:1c:7c:5d:85:0c:96:7a:ce:9a:
         3e:0c:22:dd:1e:4c:54:ec:4a:a6:17:1f:55:aa:c5:e3:39:4f:
         af:3d:6d:ab:c3:8f:c3:f1:87:11:97:d9:d3:02:fb:d9:40:67:
         cf:a6:1c:18:e2:bf:11:a6:4b:37:55:1a:42:99:ff:7a:15:14:
         64:b3:02:b9:f6:6e:c6:05:be:ef:64:2d:9d:79:28:2e:21:dd:
         f2:df:8a:f1:c5:67:5a:71:cd:42:7d:14:0a:1b:4c:0e:29:8c:
         53:f9:8f:c6:03:61:62:5f:62:66:53:7c:1c:9c:73:2f:bd:22:
         09:c7:8a:c1:19:e5:24:a1:d8:e9:9c:8a:f5:05:a6:60:18:2d:
         8a:32:a5:2d:70:56:a1:e9:90:91:90:95:58:50:30:ba:62:e3:
         1d:f0:7e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5NJUJjEI2cYAwMK7+y3IwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNmFiZTVjNDhhZWNlYmQ0YTIzN2UxNTNjMzY4NGYzMDYw
OGQ0NDQwHhcNMjQwOTE2MDUwMDU4WhcNMjQwOTE3MDUwMDU4WjAzMTEwLwYDVQQD
EygyZGJhMTgzODg1ZGUzMmQ1MTZmOTI4ZWUzNDVlYzBhNjc5MTI2NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07a/PWG52fsE4fcUlotykycus9fD
4dJGuv3N2pnTsX7y/adQqsW980JwGRAEpj5SEQP+4Q0CzBzkyfc3xLztWCwhuWtY
IFc6LgkCmcuJF0QE3Q7NrYkRWZg7n/+xpwGI4570kMCNwUiFNyvg4QLvlLL65Eog
5s5su3DIUdHZOEIitauOSJgKflbp0qQGgzs+5KADRAq1LMU6GdSOD0MwfKJogtq3
6UygKjeecQoaetoCu2WMeGzRg3C+z21Z4J41iaXUkRZPF59+iNAn+hTRf8i+yge2
8R8GQtKXlO4dVSXhlOsEYVra2C+EDTMYpOh/vCPDNpiywpqLnZLC5EKIywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC26GDiF3jLVFvko7jRewKZ5EmU5MB8GA1UdIwQY
MBaAFD1qvlxIrs69SiN+FTw2hPMGCNREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81ZmI4MDMtNDMzMy00MTc1LTkwZGYt
YWVjMTRlYTE3ZWJmLzEvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81ZmI4MDMtNDMzMy00MTc1LTkwZGYtYWVjMTRlYTE3ZWJm
LzEvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOa3lUZI
pivgVrh2Vk+bseZyQJ+sCYuVMJ5ZJFOBnj6pG9sx0ds/LXYy//EBvqS3K8qUVXsv
WVeiVNSEgiAksYeFPT81+FaBexxUo86COd+UiKNDuCN1xXNFi9QazWTdkkcjHHxd
hQyWes6aPgwi3R5MVOxKphcfVarF4zlPrz1tq8OPw/GHEZfZ0wL72UBnz6YcGOK/
EaZLN1UaQpn/ehUUZLMCufZuxgW+72QtnXkoLiHd8t+K8cVnWnHNQn0UChtMDimM
U/mPxgNhYl9iZlN8HJxzL70iCceKwRnlJKHY6ZyK9QWmYBgtijKlLXBWoemQkZCV
WFAwumLjHfB+tA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:16:01 2024 by rpki-client on console-fra.rpki-client.org