Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File:                     pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier:          xFUnqHB7hBxMh6HDSxaYBxAD13fzBkQHB6cKHFEVOqQ=
Subject key identifier:   E5:06:86:C4:21:57:45:A2:01:31:25:06:B9:D0:09:92:68:FE:1B:D9
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer:       /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial:       0192EFC054BBFDB29B16C47EFF04FF20CD60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number:          0168
Signing time:             Sun 03 Nov 2024 02:00:12 +0000
Manifest this update:     Sun 03 Nov 2024 02:00:12 +0000
Manifest next update:     Mon 04 Nov 2024 02:00:12 +0000
Files and hashes:         1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: HZYmmDqQS5yyFp1ASlkYYzNXUqvTRwquPWnZ44ydUtU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 02:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ef:c0:54:bb:fd:b2:9b:16:c4:7e:ff:04:ff:20:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
        Validity
            Not Before: Nov  3 02:00:12 2024 GMT
            Not After : Nov  4 02:00:12 2024 GMT
        Subject: CN=e50686c4215745a201312506b9d0099268fe1bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:e5:ae:96:62:2e:c9:bb:7e:65:92:51:76:
                    e1:32:e5:5a:84:6f:8e:6d:4d:6d:c1:42:d1:4a:d1:
                    52:7d:ea:27:62:31:e9:b2:2e:bd:8e:d7:0d:55:2c:
                    4d:e0:62:ff:e8:c8:e3:5d:ed:8f:67:4f:b9:79:f3:
                    cf:a8:d2:d6:5b:b3:05:cd:9a:29:2c:0c:8e:63:0d:
                    6a:ea:77:c2:3a:a0:12:cf:2e:81:5f:95:7f:77:fc:
                    0b:98:1e:fe:01:6d:2d:ae:d2:9e:f2:b1:99:01:8e:
                    18:ae:9e:24:a6:54:1e:37:75:a5:14:77:f6:d0:23:
                    ea:99:1d:49:d0:b0:36:10:85:b4:f6:82:f3:81:a2:
                    d7:f5:eb:2e:35:dc:d6:62:43:6e:13:09:ce:cf:0b:
                    5c:d3:52:ab:30:1d:cf:82:2a:74:ae:17:42:c5:c6:
                    aa:0c:e4:9b:a4:93:09:f5:70:46:70:15:f5:cf:69:
                    31:58:ab:b4:a3:f1:a9:4e:79:dd:4e:15:d5:81:33:
                    66:fb:54:59:1c:aa:5e:5c:03:e4:af:01:4f:2b:32:
                    3e:e4:d1:45:38:25:18:c7:e4:00:7d:3d:d8:ec:e6:
                    43:f7:91:16:14:c5:8c:54:99:b7:83:6d:af:11:9c:
                    1f:f0:c7:54:93:15:3d:57:64:0a:26:d4:1e:76:6d:
                    dd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:06:86:C4:21:57:45:A2:01:31:25:06:B9:D0:09:92:68:FE:1B:D9
            X509v3 Authority Key Identifier:
                keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:a5:9d:1f:80:60:ec:42:00:95:17:79:26:98:13:46:84:
         1d:26:83:99:83:02:a4:0b:10:77:8c:4d:39:e2:8a:de:f0:54:
         ac:20:0d:6f:49:41:6e:20:bd:11:1e:8b:49:a3:21:25:18:ff:
         dc:6d:f2:6d:3c:64:2e:bf:ab:b7:88:15:f8:7d:00:84:82:98:
         53:5b:75:b8:be:f5:c2:13:b7:70:6f:30:33:d3:ad:78:dc:7d:
         60:95:fd:46:40:be:b6:04:2a:49:a3:b8:5c:95:4f:18:03:39:
         ef:3c:a3:46:0a:0b:e2:94:93:f2:ab:ab:90:77:01:0d:c5:8c:
         d2:30:b9:f4:db:33:8c:ba:c5:7a:09:c0:dd:b2:02:f8:f2:66:
         02:7c:16:cf:f6:d2:b9:24:78:4a:25:89:f0:ed:bd:22:8e:7f:
         78:5a:a2:7a:43:da:f4:55:d3:6a:9e:9f:c1:1a:62:0f:b8:4c:
         ef:f2:59:1c:fb:e7:fc:62:c6:31:19:c6:d2:19:6b:53:f6:51:
         e5:31:10:1a:3b:89:a2:dd:b0:c8:84:06:f9:c9:9c:2a:1b:be:
         6d:77:ac:93:5b:0f:95:09:38:a6:56:08:e1:de:4d:90:2a:3e:
         55:bf:c8:d3:28:98:0d:9d:21:d6:de:c5:a5:93:3c:90:54:c2:
         fd:d0:8d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZLvwFS7/bKbFsR+/wT/IM1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NzVlNjUxZjgxYWFiNjAzMzkyZjI1NTIxYjdjOWFiNWJk
MjgxYzAwHhcNMjQxMTAzMDIwMDEyWhcNMjQxMTA0MDIwMDEyWjAzMTEwLwYDVQQD
EyhlNTA2ODZjNDIxNTc0NWEyMDEzMTI1MDZiOWQwMDk5MjY4ZmUxYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPLlrpZiLsm7fmWSUXbhMuVahG+O
bU1twULRStFSfeonYjHpsi69jtcNVSxN4GL/6MjjXe2PZ0+5efPPqNLWW7MFzZop
LAyOYw1q6nfCOqASzy6BX5V/d/wLmB7+AW0trtKe8rGZAY4Yrp4kplQeN3WlFHf2
0CPqmR1J0LA2EIW09oLzgaLX9esuNdzWYkNuEwnOzwtc01KrMB3Pgip0rhdCxcaq
DOSbpJMJ9XBGcBX1z2kxWKu0o/GpTnndThXVgTNm+1RZHKpeXAPkrwFPKzI+5NFF
OCUYx+QAfT3Y7OZD95EWFMWMVJm3g22vEZwf8MdUkxU9V2QKJtQedm3dLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUGhsQhV0WiATElBrnQCZJo/hvZMB8GA1UdIwQY
MBaAFKR15lH4GqtgM5LyVSG3yatb0oHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9jZWMzMjctMzhlMS00YWY0LWEwOGYt
NzdjZmQyMTViNzMyLzEvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9jZWMzMjctMzhlMS00YWY0LWEwOGYtNzdjZmQyMTViNzMy
LzEvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpKlnR+A
YOxCAJUXeSaYE0aEHSaDmYMCpAsQd4xNOeKK3vBUrCANb0lBbiC9ER6LSaMhJRj/
3G3ybTxkLr+rt4gV+H0AhIKYU1t1uL71whO3cG8wM9OteNx9YJX9RkC+tgQqSaO4
XJVPGAM57zyjRgoL4pST8qurkHcBDcWM0jC59NszjLrFegnA3bIC+PJmAnwWz/bS
uSR4SiWJ8O29Io5/eFqiekPa9FXTap6fwRpiD7hM7/JZHPvn/GLGMRnG0hlrU/ZR
5TEQGjuJot2wyIQG+cmcKhu+bXesk1sPlQk4plYI4d5NkCo+Vb/I0yiYDZ0h1t7F
pZM8kFTC/dCNVA==
-----END CERTIFICATE-----
Generated at Sun Nov 3 10:50:01 2024 by rpki-client on console-ams.rpki-client.org