Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File:                     P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier:          puoHZRd/1iVrlYNS4VTH4uDm1+jnjv+09qjF58JcSrI=
Subject key identifier:   3C:F7:F5:E0:92:CE:21:2B:BB:81:00:55:79:62:A6:48:0A:6E:C7:11
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer:       /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial:       018F8891F3C65D8FFB687F85E57562038D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number:          0E84
Signing time:             Fri 17 May 2024 22:00:17 +0000
Manifest this update:     Fri 17 May 2024 22:00:17 +0000
Manifest next update:     Sat 18 May 2024 22:00:17 +0000
Files and hashes:         1: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: bB5Al6zWVmMALyKhzrfeHdzgAmtx2xPKD+EItOkrchE=)
                          2: tGgqovi_ZaOguUZ4AosMuJ9Esm4.roa (hash: sz/hDR5BHLAk5gGs9Xl+b9cbhv1hIlIssNejBPwqveY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f3:c6:5d:8f:fb:68:7f:85:e5:75:62:03:8d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
        Validity
            Not Before: May 17 22:00:17 2024 GMT
            Not After : May 18 22:00:17 2024 GMT
        Subject: CN=3cf7f5e092ce212bbb8100557962a6480a6ec711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:02:a4:51:b1:ac:18:94:3b:30:6c:9c:a0:
                    d5:99:1b:3c:1f:9b:9b:e0:2a:f2:e4:3e:6b:ab:a7:
                    31:cb:c1:4c:4d:8b:0e:29:8a:8a:7b:1b:dd:74:9f:
                    2f:03:a2:ae:f4:35:d8:b3:3d:fa:28:ab:1c:cb:f0:
                    37:9c:09:49:e4:c0:c2:ad:29:be:bc:6d:93:72:46:
                    94:89:bb:7a:55:47:1d:8a:a1:2d:04:f0:2c:ed:17:
                    bb:31:56:11:e7:31:22:df:c2:98:95:ba:d4:7b:f9:
                    e7:f2:6b:18:ec:59:5e:cb:5b:5b:ef:f6:f3:88:5a:
                    ae:7d:b6:21:6d:71:cc:db:79:96:57:63:94:1b:b3:
                    d8:1a:8d:7a:39:76:f1:c4:e2:30:99:c4:07:89:96:
                    ca:ae:34:b7:fa:06:22:87:47:b5:08:1a:16:0a:a4:
                    31:d2:a8:50:f2:a0:b4:d5:54:91:39:ab:ff:19:15:
                    e0:ea:5d:cf:a1:1d:76:06:6d:03:d8:1a:31:0f:f1:
                    df:f5:2d:ae:5f:6f:ea:0d:be:cc:4c:5e:f3:36:85:
                    cb:60:0c:bf:30:29:3d:7c:ee:72:c9:05:93:ed:5f:
                    ee:a4:5d:15:5d:64:7c:66:fa:02:56:3d:2f:4c:d0:
                    44:b0:c9:01:d4:e9:8d:41:ad:bd:b0:e9:8d:13:6f:
                    21:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F7:F5:E0:92:CE:21:2B:BB:81:00:55:79:62:A6:48:0A:6E:C7:11
            X509v3 Authority Key Identifier:
                keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:aa:35:cd:7d:70:47:52:17:57:9b:59:80:66:0d:0a:f6:
         50:5f:c6:fd:d6:aa:3a:c9:5b:d1:62:be:df:7d:b2:dc:18:25:
         33:a3:e5:8c:2b:fa:59:09:9e:1a:91:9c:33:9b:b7:1c:5e:0b:
         a9:b8:91:ef:70:f5:4f:cc:14:4a:c6:03:55:f3:e1:4c:3d:ac:
         b6:e0:80:5d:f0:28:86:a2:18:1f:e3:0e:3f:b0:f4:a8:02:32:
         4f:60:55:a0:a9:01:fd:51:58:01:9f:65:42:71:05:c8:88:17:
         c5:dd:e3:1b:df:00:67:80:d7:d4:4c:0c:8a:6a:b4:b1:83:11:
         8e:a4:c2:56:57:ab:d8:4a:45:b5:f2:51:a9:c1:d8:5b:23:01:
         0c:f7:1b:a8:af:78:12:15:c4:19:b6:b3:7f:17:74:a9:15:62:
         25:26:ed:d0:77:2d:fc:27:0a:9b:7b:e0:67:8c:fd:19:e0:f9:
         ce:b4:c8:69:db:89:c0:04:1b:96:4b:97:b7:d5:92:00:b3:23:
         73:c4:a1:d4:45:7b:6a:96:e9:f8:11:fc:6c:5c:25:0d:de:b8:
         eb:d6:64:9b:33:2e:99:50:73:37:75:01:df:eb:05:90:a2:78:
         f3:cd:59:a8:3c:73:24:a8:6c:3a:4a:a9:88:73:66:92:46:d5:
         46:f0:03:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkfPGXY/7aH+F5XViA41mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTJkNjg1MGJiYzQ3MjA1NTdhOTE3NGRjYmM5NzYwYWVj
YzBiMWEwHhcNMjQwNTE3MjIwMDE3WhcNMjQwNTE4MjIwMDE3WjAzMTEwLwYDVQQD
EygzY2Y3ZjVlMDkyY2UyMTJiYmI4MTAwNTU3OTYyYTY0ODBhNmVjNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonYCpFGxrBiUOzBsnKDVmRs8H5ub
4Cry5D5rq6cxy8FMTYsOKYqKexvddJ8vA6Ku9DXYsz36KKscy/A3nAlJ5MDCrSm+
vG2TckaUibt6VUcdiqEtBPAs7Re7MVYR5zEi38KYlbrUe/nn8msY7Fley1tb7/bz
iFqufbYhbXHM23mWV2OUG7PYGo16OXbxxOIwmcQHiZbKrjS3+gYih0e1CBoWCqQx
0qhQ8qC01VSROav/GRXg6l3PoR12Bm0D2BoxD/Hf9S2uX2/qDb7MTF7zNoXLYAy/
MCk9fO5yyQWT7V/upF0VXWR8ZvoCVj0vTNBEsMkB1OmNQa29sOmNE28hBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDz39eCSziEru4EAVXlipkgKbscRMB8GA1UdIwQY
MBaAFD+i1oULvEcgVXqRdNy8l2CuzAsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQt
OWM2NWQxODhlNTRlLzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQtOWM2NWQxODhlNTRl
LzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEyqNc19
cEdSF1ebWYBmDQr2UF/G/daqOslb0WK+332y3BglM6PljCv6WQmeGpGcM5u3HF4L
qbiR73D1T8wUSsYDVfPhTD2stuCAXfAohqIYH+MOP7D0qAIyT2BVoKkB/VFYAZ9l
QnEFyIgXxd3jG98AZ4DX1EwMimq0sYMRjqTCVler2EpFtfJRqcHYWyMBDPcbqK94
EhXEGbazfxd0qRViJSbt0Hct/CcKm3vgZ4z9GeD5zrTIaduJwAQblkuXt9WSALMj
c8Sh1EV7apbp+BH8bFwlDd6469ZkmzMumVBzN3UB3+sFkKJ4881ZqDxzJKhsOkqp
iHNmkkbVRvADmw==
-----END CERTIFICATE-----
Generated at Fri May 17 23:58:42 2024 by rpki-client on console-fra.rpki-client.org