Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File:                     PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier:          BxMoArdETurWsqPyLUMSrI8jvN4LbQ+sLvUDuirEbj0=
Subject key identifier:   00:28:6B:DE:EC:01:46:B8:FC:A3:87:7E:2C:B9:EF:68:19:EA:71:F0
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer:       /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial:       01936557512AC141EF3CAE4B4F9DA768465F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number:          010D
Signing time:             Mon 25 Nov 2024 22:00:41 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:41 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:41 +0000
Files and hashes:         1: Cv1tiIvhFosWtpFq2lUCJ4YJEr0.roa (hash: zXklaTbL0Q4bvHV+E8orYejWCBCtVSmmaNF5CCnBIQA=)
                          2: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: ANy0wf+x07iPOMZZ36YluaZe2pkHFqEUftquOxUCGAY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:51:2a:c1:41:ef:3c:ae:4b:4f:9d:a7:68:46:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
        Validity
            Not Before: Nov 25 22:00:41 2024 GMT
            Not After : Nov 26 22:00:41 2024 GMT
        Subject: CN=00286bdeec0146b8fca3877e2cb9ef6819ea71f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:d8:da:d1:50:a8:22:cc:e5:75:87:34:61:
                    ba:29:7e:43:af:52:44:28:38:eb:c6:49:e6:8f:01:
                    93:10:dd:7e:40:eb:61:b9:6c:11:24:0d:64:2e:2c:
                    9e:1d:9c:64:e3:9d:3d:f2:b2:fd:5d:7c:cc:5a:fe:
                    43:2f:43:78:c7:a1:30:fb:a3:17:75:88:aa:23:31:
                    a3:ac:4e:c7:78:6f:56:20:20:08:2e:42:22:b3:2b:
                    6f:e7:d4:f3:2b:03:0f:87:e9:66:03:0d:e3:c5:fd:
                    15:cb:36:62:47:6c:fd:cb:64:4f:f8:3f:6f:82:71:
                    07:a1:e8:ff:f0:7e:d9:fc:f0:58:3c:79:59:5b:59:
                    72:ee:90:0a:ba:eb:2a:fb:35:49:23:2d:d2:46:a4:
                    73:12:65:8f:66:cd:08:3f:cd:76:88:8d:df:4c:8c:
                    22:4f:37:9a:f0:82:3b:90:2e:c8:a4:e8:01:0b:f3:
                    df:ce:c0:01:05:b7:b7:88:9d:b5:d9:bb:29:d9:7c:
                    e1:ff:e1:52:55:27:ee:5b:4a:0c:a6:5b:02:be:3c:
                    da:84:50:f2:76:bf:fb:db:34:14:63:e3:66:36:0e:
                    f2:76:bf:9b:2e:8e:1e:08:3a:c5:53:4c:0a:27:31:
                    a0:0f:69:8d:bf:a6:0b:da:6d:31:82:51:42:b6:2b:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:28:6B:DE:EC:01:46:B8:FC:A3:87:7E:2C:B9:EF:68:19:EA:71:F0
            X509v3 Authority Key Identifier:
                keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:56:98:6a:44:21:b4:ca:27:84:ff:98:09:da:d1:d9:0c:5a:
         ec:09:89:3b:40:76:53:89:88:4e:6f:3f:38:ec:82:dd:62:2b:
         f2:a4:65:25:4f:08:9b:3c:15:8b:b5:5b:2c:9e:74:8f:65:15:
         e6:76:3d:c7:4a:f0:2a:9c:b7:76:b8:4a:d2:ce:6f:aa:02:ce:
         ea:d4:24:d4:22:bf:38:12:06:3b:c8:f7:76:64:5e:ce:1c:aa:
         86:fb:9f:8e:2e:58:57:6a:37:55:57:f0:da:67:76:85:6f:7c:
         26:13:f8:4f:9b:de:7e:fe:59:8c:9a:d2:38:48:78:45:c9:83:
         84:b2:62:f1:6f:53:e1:a9:d2:81:e1:55:1b:55:7b:1f:c0:dc:
         57:80:85:43:f1:5e:65:b7:6e:5b:f9:af:97:03:41:ee:17:03:
         7a:ca:a4:31:20:f2:35:0e:fa:93:59:40:1a:ca:5b:db:a7:9a:
         3d:e3:db:ed:fa:c3:0d:7c:e6:52:72:11:82:7f:a2:18:7b:ac:
         3a:2a:f7:a0:3d:55:3e:21:2d:f6:ba:2c:e0:81:e0:a7:42:95:
         4c:97:83:85:4c:63:be:ea:c9:a2:47:32:3b:a0:78:b1:b1:a8:
         bf:66:27:24:8f:40:d6:7e:29:f7:19:7f:c2:ba:4c:e0:ca:14:
         a7:66:ff:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlV1EqwUHvPK5LT52naEZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTE4YzkxYjJiZTI4YTA3NGI5YTM4NzRhOTBiNDQ2MDEz
Y2UxYmUwHhcNMjQxMTI1MjIwMDQxWhcNMjQxMTI2MjIwMDQxWjAzMTEwLwYDVQQD
EygwMDI4NmJkZWVjMDE0NmI4ZmNhMzg3N2UyY2I5ZWY2ODE5ZWE3MWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVHY2tFQqCLM5XWHNGG6KX5Dr1JE
KDjrxknmjwGTEN1+QOthuWwRJA1kLiyeHZxk45098rL9XXzMWv5DL0N4x6Ew+6MX
dYiqIzGjrE7HeG9WICAILkIisytv59TzKwMPh+lmAw3jxf0VyzZiR2z9y2RP+D9v
gnEHoej/8H7Z/PBYPHlZW1ly7pAKuusq+zVJIy3SRqRzEmWPZs0IP812iI3fTIwi
Tzea8II7kC7IpOgBC/PfzsABBbe3iJ212bsp2Xzh/+FSVSfuW0oMplsCvjzahFDy
dr/72zQUY+NmNg7ydr+bLo4eCDrFU0wKJzGgD2mNv6YL2m0xglFCtisz/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAoa97sAUa4/KOHfiy572gZ6nHwMB8GA1UdIwQY
MBaAFD6hjJGyviigdLmjh0qQtEYBPOG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjIt
YmM2NWVmNmIyN2I2LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjItYmM2NWVmNmIyN2I2
LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlaYakQh
tMonhP+YCdrR2Qxa7AmJO0B2U4mITm8/OOyC3WIr8qRlJU8ImzwVi7VbLJ50j2UV
5nY9x0rwKpy3drhK0s5vqgLO6tQk1CK/OBIGO8j3dmRezhyqhvufji5YV2o3VVfw
2md2hW98JhP4T5vefv5ZjJrSOEh4RcmDhLJi8W9T4anSgeFVG1V7H8DcV4CFQ/Fe
ZbduW/mvlwNB7hcDesqkMSDyNQ76k1lAGspb26eaPePb7frDDXzmUnIRgn+iGHus
Oir3oD1VPiEt9ros4IHgp0KVTJeDhUxjvurJokcyO6B4sbGov2YnJI9A1n4p9xl/
wrpM4MoUp2b/5w==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:43:37 2024 by rpki-client on console-ams.rpki-client.org