Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File:                     P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier:          RpmYEnrpZCuDbxAFhWw1ixGAednmwI1HXoPjAg4BajM=
Subject key identifier:   DF:BA:D3:1B:C3:91:97:A4:EE:94:EF:0F:40:7D:22:C7:29:B6:99:A2
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer:       /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial:       018F87B6A5EA29EB3B38FA7A9E7B3209CCC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:45 +0000
Manifest this update:     Fri 17 May 2024 18:00:45 +0000
Manifest next update:     Sat 18 May 2024 18:00:45 +0000
Files and hashes:         1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: cxLLZmD3ryqAAChJRb6AsKsk8uopbXRiGTWKkpuYawU=)
                          2: trtIwqR_7HH-LGNEQN1pN5JwwyI.roa (hash: fA19lTbg+grAMJxOrgwv7mwms3yqYzll2X64WCHKSug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a5:ea:29:eb:3b:38:fa:7a:9e:7b:32:09:cc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
        Validity
            Not Before: May 17 18:00:45 2024 GMT
            Not After : May 18 18:00:45 2024 GMT
        Subject: CN=dfbad31bc39197a4ee94ef0f407d22c729b699a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4c:c1:76:d3:e6:66:d0:7d:31:54:07:34:4c:
                    a2:33:79:8f:2b:93:ac:e4:b2:9f:a0:a2:8f:92:36:
                    01:74:8b:16:bf:04:ba:27:03:8a:1e:ce:81:2b:7a:
                    9f:32:a3:4e:20:f2:f7:1a:98:2c:1e:ec:34:cf:83:
                    ae:20:66:54:ff:c0:bd:43:2e:20:0b:fc:d7:b8:3c:
                    97:8f:52:6e:2d:ff:50:3b:46:15:ea:8a:91:34:2c:
                    24:c3:52:05:ac:37:35:bd:4f:c1:01:fd:e0:64:ed:
                    c0:d5:55:f1:09:5a:bb:8e:05:83:ce:ca:a8:4d:4d:
                    ef:bc:91:b5:4a:b1:5e:6e:7b:50:0a:a5:6c:e2:c2:
                    cd:5c:32:28:96:06:00:0d:8d:46:58:96:0a:8a:3f:
                    fd:38:cc:8e:70:a7:b3:95:ab:f2:d0:f7:0a:eb:03:
                    18:ad:50:9b:52:9a:a1:98:9c:e5:95:20:6b:fc:d8:
                    d6:4f:de:30:c5:6d:23:35:a7:d7:dc:42:c5:f8:f1:
                    73:c9:d2:93:01:f2:b1:a4:b7:b9:4b:57:cb:18:58:
                    23:f3:94:67:bf:3b:ea:1d:25:f6:91:b9:1b:3c:53:
                    1d:79:b8:ba:6b:3f:53:87:7e:2e:bd:8a:3d:27:34:
                    6a:df:5a:cb:11:99:5a:98:e2:a6:c3:fa:8e:3c:df:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BA:D3:1B:C3:91:97:A4:EE:94:EF:0F:40:7D:22:C7:29:B6:99:A2
            X509v3 Authority Key Identifier:
                keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:43:d7:77:2b:a7:93:0b:bd:6d:ad:ee:77:fa:bc:66:d8:37:
         91:2b:1c:0e:65:9a:b9:0e:00:e3:ed:8b:64:8c:35:0c:5a:ac:
         aa:c6:6c:ec:5d:b0:49:75:7b:65:91:d6:a8:94:b4:1d:17:dd:
         70:91:a2:e8:be:8b:fe:4f:83:64:52:2f:e2:1f:a5:e6:ae:7a:
         c5:79:bb:86:05:44:c9:d1:e0:5f:c8:89:5c:9f:7d:4e:e4:27:
         4d:7e:40:52:f0:8a:f0:95:0b:7d:71:dd:a6:e0:bb:1c:f5:78:
         49:10:ff:3f:1b:ec:2c:30:2d:25:c9:c3:fb:cd:22:2a:c2:08:
         00:81:09:41:be:08:ce:83:8c:9e:33:ea:81:61:c4:55:8f:55:
         24:28:bc:03:44:66:cf:4d:01:f2:88:93:39:20:65:2b:a2:5b:
         00:9a:49:c0:59:df:02:82:a9:4b:0a:be:2d:ce:7a:27:0b:93:
         ac:5a:5c:40:64:c2:f8:d9:db:0d:d2:45:d1:5e:8a:10:66:b4:
         aa:61:3c:33:60:ab:ee:cd:dc:13:01:f3:e4:3e:83:0c:b0:0b:
         2c:93:7a:96:e3:99:1c:a9:b8:22:e3:2e:36:28:95:33:c3:c3:
         df:cf:e4:82:fe:db:2e:a3:29:e9:b4:a5:35:f7:13:bc:ef:3f:
         da:bd:09:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtqXqKes7OPp6nnsyCczDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTQwZmNmYTgzNmJiMGI1YjNlMTI5NDA0Y2IzMWU4NTI1
MGIwMWYwHhcNMjQwNTE3MTgwMDQ1WhcNMjQwNTE4MTgwMDQ1WjAzMTEwLwYDVQQD
EyhkZmJhZDMxYmMzOTE5N2E0ZWU5NGVmMGY0MDdkMjJjNzI5YjY5OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kzBdtPmZtB9MVQHNEyiM3mPK5Os
5LKfoKKPkjYBdIsWvwS6JwOKHs6BK3qfMqNOIPL3GpgsHuw0z4OuIGZU/8C9Qy4g
C/zXuDyXj1JuLf9QO0YV6oqRNCwkw1IFrDc1vU/BAf3gZO3A1VXxCVq7jgWDzsqo
TU3vvJG1SrFebntQCqVs4sLNXDIolgYADY1GWJYKij/9OMyOcKezlavy0PcK6wMY
rVCbUpqhmJzllSBr/NjWT94wxW0jNafX3ELF+PFzydKTAfKxpLe5S1fLGFgj85Rn
vzvqHSX2kbkbPFMdebi6az9Th34uvYo9JzRq31rLEZlamOKmw/qOPN8lLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+60xvDkZek7pTvD0B9IscptpmiMB8GA1UdIwQY
MBaAFD+kD8+oNrsLWz4SlATLMehSULAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYt
MDcyNDA4OTI4OWJiLzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lMjEwYjktN2EzZi00MTBiLWJhNTYtMDcyNDA4OTI4OWJi
LzEvUDZRUHo2ZzJ1d3RiUGhLVUJNc3g2RkpRc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0PXdyun
kwu9ba3ud/q8Ztg3kSscDmWauQ4A4+2LZIw1DFqsqsZs7F2wSXV7ZZHWqJS0HRfd
cJGi6L6L/k+DZFIv4h+l5q56xXm7hgVEydHgX8iJXJ99TuQnTX5AUvCK8JULfXHd
puC7HPV4SRD/PxvsLDAtJcnD+80iKsIIAIEJQb4IzoOMnjPqgWHEVY9VJCi8A0Rm
z00B8oiTOSBlK6JbAJpJwFnfAoKpSwq+Lc56JwuTrFpcQGTC+NnbDdJF0V6KEGa0
qmE8M2Cr7s3cEwHz5D6DDLALLJN6luOZHKm4IuMuNiiVM8PD38/kgv7bLqMp6bSl
NfcTvO8/2r0Jww==
-----END CERTIFICATE-----
Generated at Fri May 17 23:55:04 2024 by rpki-client on console-fra.rpki-client.org