Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File:                     cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier:          IdijbruQI4LBtlLk4Ocu+zv5GaoMsnU9WVyGCCMJWfQ=
Subject key identifier:   BC:5D:5C:20:81:B3:AF:D1:11:99:DA:02:28:D7:6A:D0:0C:84:D3:10
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer:       /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial:       019052114F8587ACFF0C4CB6805F1EEED75E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number:          013C
Signing time:             Wed 26 Jun 2024 01:03:04 +0000
Manifest this update:     Wed 26 Jun 2024 01:03:04 +0000
Manifest next update:     Thu 27 Jun 2024 01:03:04 +0000
Files and hashes:         1: beUn0cJL2bJB9VVKqeILlolpwVo.roa (hash: iPtSQYvrqXCbXxDqUonvidYtxR6DmFZ4AhL2P+MU2EA=)
                          2: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: EXcM2BvXD8EnjoqGxFoTYmKLEl20sNDDUpyVV/0MD14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:4f:85:87:ac:ff:0c:4c:b6:80:5f:1e:ee:d7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
        Validity
            Not Before: Jun 26 01:03:04 2024 GMT
            Not After : Jun 27 01:03:04 2024 GMT
        Subject: CN=bc5d5c2081b3afd11199da0228d76ad00c84d310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:b5:27:c8:f4:53:d5:84:74:ff:0b:cc:f0:
                    4c:08:20:37:cf:f3:a0:db:a0:3c:62:fa:6a:8c:10:
                    72:68:41:6a:74:99:30:2e:76:31:68:ec:f6:76:07:
                    20:22:3a:5a:b7:8d:ca:7e:0d:20:13:05:03:b0:b2:
                    f2:38:19:ee:b9:6f:1a:a7:c7:e6:48:b4:c3:4b:c1:
                    2e:e1:49:3d:da:d7:3f:e7:89:ae:3f:03:32:c3:1d:
                    dd:04:03:e6:74:25:77:e1:1e:3f:1b:ae:a0:30:64:
                    ee:a0:3e:b8:73:e7:6d:53:67:9a:99:e9:3c:5a:6b:
                    33:30:64:18:e9:e1:d8:5a:ac:7c:e3:4f:b6:92:5f:
                    78:f4:7e:18:87:26:98:79:5e:a9:c6:73:42:4c:2c:
                    dd:12:6b:97:e8:d9:64:ad:c8:4c:df:45:45:19:9f:
                    84:2f:7a:b9:d3:26:a2:ba:1f:d9:66:2c:57:8f:26:
                    82:ed:fb:49:ad:01:6d:44:45:d7:d9:af:33:05:d9:
                    eb:94:79:7b:c8:0c:9b:89:cc:4f:6f:0d:67:4f:74:
                    f4:fb:12:04:cf:66:42:6a:6c:42:b1:f6:30:98:b0:
                    af:67:1b:79:7d:e8:c8:f4:4f:7a:9a:11:23:8d:37:
                    7a:f1:ca:9d:8f:7a:54:17:f9:14:56:a4:9f:80:b9:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5D:5C:20:81:B3:AF:D1:11:99:DA:02:28:D7:6A:D0:0C:84:D3:10
            X509v3 Authority Key Identifier:
                keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:83:42:45:99:6b:8b:66:ff:22:58:3a:6a:58:ca:7e:5a:ac:
         27:94:6b:59:4b:3b:60:15:58:f4:30:d6:69:d9:76:d1:e5:15:
         93:75:5f:73:a5:df:97:44:47:de:75:45:1b:10:09:90:3b:b9:
         8f:af:32:09:7c:81:84:9d:d2:22:bb:d2:35:c5:78:c5:a6:04:
         50:a9:36:a6:fc:10:59:00:47:4f:51:57:b5:49:c0:09:0e:ab:
         74:fd:5e:05:80:19:d9:12:b5:0c:b9:cb:5a:d0:ab:33:a8:68:
         70:d8:6f:7f:12:b6:2b:1b:94:99:84:3a:10:f7:7b:04:f1:b7:
         a0:19:70:74:9e:85:55:33:26:d8:96:a7:34:93:c2:94:1f:b4:
         db:01:49:1b:a1:a9:c5:04:c3:24:cc:6e:3d:34:0c:e0:f3:24:
         7c:04:d7:95:73:82:e1:d8:d6:11:1d:c9:f0:b1:87:1b:31:0b:
         b9:3e:3d:fa:e5:32:cd:20:81:83:3c:d2:39:de:b8:dd:0b:a8:
         62:c7:a8:e9:e8:01:2e:a9:5f:71:c3:98:bc:7f:e8:eb:d3:38:
         7c:8b:36:e4:11:42:3f:7d:35:05:ba:ab:45:94:5e:49:84:cf:
         5d:0a:e6:55:67:c1:81:dc:20:07:53:07:7d:11:c6:0b:48:71:
         a1:52:38:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBSEU+Fh6z/DEy2gF8e7tdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzNjZGFjYzFlMjhmMDIxM2RmYjI4ZjNkZmQ4YjljYmRk
M2M2MmUwHhcNMjQwNjI2MDEwMzA0WhcNMjQwNjI3MDEwMzA0WjAzMTEwLwYDVQQD
EyhiYzVkNWMyMDgxYjNhZmQxMTE5OWRhMDIyOGQ3NmFkMDBjODRkMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhu1J8j0U9WEdP8LzPBMCCA3z/Og
26A8YvpqjBByaEFqdJkwLnYxaOz2dgcgIjpat43Kfg0gEwUDsLLyOBnuuW8ap8fm
SLTDS8Eu4Uk92tc/54muPwMywx3dBAPmdCV34R4/G66gMGTuoD64c+dtU2eamek8
WmszMGQY6eHYWqx840+2kl949H4YhyaYeV6pxnNCTCzdEmuX6NlkrchM30VFGZ+E
L3q50yaiuh/ZZixXjyaC7ftJrQFtREXX2a8zBdnrlHl7yAybicxPbw1nT3T0+xIE
z2ZCamxCsfYwmLCvZxt5fejI9E96mhEjjTd68cqdj3pUF/kUVqSfgLkMXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxdXCCBs6/REZnaAijXatAMhNMQMB8GA1UdIwQY
MBaAFHJzzazB4o8CE9+yjz39i5y908YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjIt
YzBhMjViMTA5MDJhLzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjItYzBhMjViMTA5MDJh
LzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiINCRZlr
i2b/Ilg6aljKflqsJ5RrWUs7YBVY9DDWadl20eUVk3Vfc6Xfl0RH3nVFGxAJkDu5
j68yCXyBhJ3SIrvSNcV4xaYEUKk2pvwQWQBHT1FXtUnACQ6rdP1eBYAZ2RK1DLnL
WtCrM6hocNhvfxK2KxuUmYQ6EPd7BPG3oBlwdJ6FVTMm2JanNJPClB+02wFJG6Gp
xQTDJMxuPTQM4PMkfATXlXOC4djWER3J8LGHGzELuT49+uUyzSCBgzzSOd643Quo
Yseo6egBLqlfccOYvH/o69M4fIs25BFCP301BbqrRZReSYTPXQrmVWfBgdwgB1MH
fRHGC0hxoVI4AQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 03:54:07 2024 by rpki-client on console-fra.rpki-client.org