Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File:                     PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier:          Hpc3FI3u1P1CLs0wXSm6qMhQePymDfawUMN4eHnxjBU=
Subject key identifier:   A0:6B:D7:2E:93:8E:46:2D:5B:34:6B:5A:30:FF:20:85:1D:2B:07:16
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer:       /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial:       018F8DB859BC003220C257EA4630F422FF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number:          0914
Signing time:             Sat 18 May 2024 22:00:20 +0000
Manifest this update:     Sat 18 May 2024 22:00:20 +0000
Manifest next update:     Sun 19 May 2024 22:00:20 +0000
Files and hashes:         1: 1-APGb7-lSx6NRzQsbIEJz-SwNU.roa (hash: Upn1TZOmULBfUbk/0FidetYkcn6c8qMPZWvBQwqgCB8=)
                          2: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: FU7ezkIpNeZaV9WwA75/ujXI6J67LgwhuUBXnNJjIdo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:59:bc:00:32:20:c2:57:ea:46:30:f4:22:ff:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
        Validity
            Not Before: May 18 22:00:20 2024 GMT
            Not After : May 19 22:00:20 2024 GMT
        Subject: CN=a06bd72e938e462d5b346b5a30ff20851d2b0716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:78:5a:fb:13:72:75:c3:63:5c:99:f7:bd:
                    9f:b1:67:bc:aa:7b:46:4b:2f:e8:d3:97:0c:a8:88:
                    eb:49:eb:83:c2:1b:36:a3:bc:bb:df:14:ca:54:c1:
                    a2:8e:b6:9b:53:97:57:ce:b8:83:bc:c9:46:13:2c:
                    de:0d:ce:97:60:2a:4c:45:93:e8:39:18:f2:61:e9:
                    95:1c:87:c7:bc:0b:16:d1:fa:70:57:be:c7:1d:05:
                    ab:9b:5d:0e:30:71:92:79:ca:21:ad:4d:c3:9e:8c:
                    1e:5a:25:0d:7b:82:8a:b2:67:10:80:96:ff:cc:11:
                    2d:5c:61:a5:85:f8:57:eb:8b:71:78:16:0f:d8:da:
                    5c:2e:6a:3f:6a:bc:2f:b9:4c:43:91:f5:64:de:63:
                    6b:fa:a5:00:37:56:07:9b:0c:e4:9a:89:8e:e9:8f:
                    03:cf:2f:8a:9c:db:d4:68:a5:f6:6c:c0:9f:c2:2a:
                    90:c5:04:f3:99:a2:31:66:7e:cc:e6:3e:1a:af:bb:
                    6e:90:cb:96:70:3a:12:8b:58:19:b7:14:ec:2d:0d:
                    13:54:e2:58:26:b6:c2:be:60:d4:1e:e7:b2:47:0b:
                    96:fb:e3:fa:5c:a8:67:bc:3f:e1:db:ca:f5:c9:0f:
                    80:4c:4a:44:e7:26:7d:e9:f6:a1:cc:1a:d2:c9:fb:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6B:D7:2E:93:8E:46:2D:5B:34:6B:5A:30:FF:20:85:1D:2B:07:16
            X509v3 Authority Key Identifier:
                keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:65:3a:94:5e:b1:9c:d9:96:9c:e9:66:90:e6:ed:2d:81:
         10:6c:be:f9:f9:be:79:43:4a:46:8b:35:60:57:b2:99:aa:7e:
         2b:a4:f8:5b:89:e5:00:4a:46:93:a7:0c:bb:3b:dd:4d:fc:4c:
         21:5e:16:25:13:aa:41:4c:5a:ff:96:eb:b4:2f:35:bc:a5:ef:
         18:4e:e6:77:1a:60:23:5e:a1:ff:28:8b:68:99:13:32:9d:5e:
         b4:99:f7:55:d4:17:0d:be:15:be:38:8f:b5:ac:ec:ce:af:05:
         fc:66:3b:00:d4:9b:33:a0:96:85:5f:c8:1f:4d:fa:34:e9:93:
         29:fd:a9:dd:fc:ba:42:e6:d8:b0:fa:5d:b2:81:14:62:2c:c1:
         ce:aa:53:0a:78:0f:ed:82:1d:de:20:81:69:f1:f2:8e:c1:ca:
         00:2f:23:e6:a8:c2:14:62:62:e3:6f:1f:23:1c:96:63:d0:f1:
         24:b8:80:75:ac:4d:89:dc:a3:c9:b8:18:b6:b1:75:ca:df:a0:
         9f:99:02:f8:48:0c:41:1d:65:d9:7a:ee:bf:61:e6:95:55:a6:
         20:f8:0d:af:37:52:64:24:4d:aa:79:65:f9:fa:82:63:b0:af:
         90:52:38:a2:ed:07:30:57:fc:65:18:77:33:b0:23:3d:29:68:
         38:f7:26:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NuFm8ADIgwlfqRjD0Iv8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5
OTE2Y2UwHhcNMjQwNTE4MjIwMDIwWhcNMjQwNTE5MjIwMDIwWjAzMTEwLwYDVQQD
EyhhMDZiZDcyZTkzOGU0NjJkNWIzNDZiNWEzMGZmMjA4NTFkMmIwNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bp4WvsTcnXDY1yZ972fsWe8qntG
Sy/o05cMqIjrSeuDwhs2o7y73xTKVMGijrabU5dXzriDvMlGEyzeDc6XYCpMRZPo
ORjyYemVHIfHvAsW0fpwV77HHQWrm10OMHGSecohrU3DnoweWiUNe4KKsmcQgJb/
zBEtXGGlhfhX64txeBYP2NpcLmo/arwvuUxDkfVk3mNr+qUAN1YHmwzkmomO6Y8D
zy+KnNvUaKX2bMCfwiqQxQTzmaIxZn7M5j4ar7tukMuWcDoSi1gZtxTsLQ0TVOJY
JrbCvmDUHueyRwuW++P6XKhnvD/h28r1yQ+ATEpE5yZ96fahzBrSyfu6qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBr1y6TjkYtWzRrWjD/IIUdKwcWMB8GA1UdIwQY
MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct
NzUyNmM5ZjA1Y2Q4LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4
LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjplOpRe
sZzZlpzpZpDm7S2BEGy++fm+eUNKRos1YFeymap+K6T4W4nlAEpGk6cMuzvdTfxM
IV4WJROqQUxa/5brtC81vKXvGE7mdxpgI16h/yiLaJkTMp1etJn3VdQXDb4VvjiP
tazszq8F/GY7ANSbM6CWhV/IH036NOmTKf2p3fy6QubYsPpdsoEUYizBzqpTCngP
7YId3iCBafHyjsHKAC8j5qjCFGJi428fIxyWY9DxJLiAdaxNidyjybgYtrF1yt+g
n5kC+EgMQR1l2Xruv2HmlVWmIPgNrzdSZCRNqnll+fqCY7CvkFI4ou0HMFf8ZRh3
M7AjPSloOPcmpg==
-----END CERTIFICATE-----
Generated at Sun May 19 00:20:03 2024 by rpki-client on console-fra.rpki-client.org