Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File:                     AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier:          7Gbg+GcLSOvAMOI9HefMAaEzgfIdGYmbZ51s07USjTg=
Subject key identifier:   EA:5B:18:9F:9C:B6:91:6A:FF:55:3E:65:FC:4B:3C:B3:C0:3E:9C:65
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer:       /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial:       018F2237D18D2C114180DAA63AEFBD3E5DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number:          1143
Signing time:             Sun 28 Apr 2024 01:00:34 +0000
Manifest this update:     Sun 28 Apr 2024 01:00:34 +0000
Manifest next update:     Mon 29 Apr 2024 01:00:34 +0000
Files and hashes:         1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: yg4+hcJwkIrNZtMHyfevxEUrFafkT8vT+SVVrC4kwOk=)
                          2: yX23dugcsDgbcq_9RuZnehHN7Ck.roa (hash: mty4538GE2grWpJU8OOC34wl8vXIO/TrVW4rdSDHGb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:37:d1:8d:2c:11:41:80:da:a6:3a:ef:bd:3e:5d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
        Validity
            Not Before: Apr 28 01:00:34 2024 GMT
            Not After : Apr 29 01:00:34 2024 GMT
        Subject: CN=ea5b189f9cb6916aff553e65fc4b3cb3c03e9c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:0c:3c:7e:73:ef:e7:36:cb:08:3a:1f:dc:
                    c1:93:b0:fc:fb:27:6b:f0:ee:19:2b:01:08:dd:a2:
                    b2:a6:04:8a:38:7e:d1:b1:9b:e3:14:21:b4:65:ae:
                    f7:ee:bc:7e:04:d4:05:46:0d:db:30:8b:88:27:98:
                    d8:71:d1:2a:0a:20:cd:cc:7b:99:fd:08:ab:aa:f9:
                    55:96:fc:e0:60:db:72:c3:a3:d2:ab:93:54:2a:97:
                    20:96:4a:d1:56:31:82:5f:fb:1e:15:e9:96:5e:9d:
                    9b:3a:01:86:25:58:41:e2:00:60:6f:d5:54:da:27:
                    ce:de:75:47:70:fa:e6:61:01:0e:6a:d4:15:19:93:
                    a1:30:5f:7e:ef:a0:5d:28:2a:a0:84:65:1d:0d:b8:
                    4b:5e:fc:ac:d1:31:cb:da:a3:1e:1f:3c:b7:99:5e:
                    30:2c:74:44:60:26:47:49:4a:0a:a9:0d:c2:25:23:
                    55:ca:48:b7:52:ba:00:ec:f2:b8:d8:7c:2e:0b:d4:
                    d1:3f:fd:4b:91:43:cc:8c:fb:ac:44:f8:da:d2:a8:
                    ec:1f:34:a1:c3:3e:2d:a9:5f:14:6d:db:3b:66:58:
                    24:26:8d:bb:67:c4:53:18:1b:de:df:87:57:a8:b6:
                    7d:83:62:d6:e0:82:fa:21:0d:20:7e:1c:3b:53:e6:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5B:18:9F:9C:B6:91:6A:FF:55:3E:65:FC:4B:3C:B3:C0:3E:9C:65
            X509v3 Authority Key Identifier:
                keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:22:50:01:2e:33:0d:82:2b:2c:f9:0f:45:67:30:bc:b5:a8:
         25:7a:e6:69:ce:07:d8:3b:a5:d2:5a:e5:a8:dc:fe:6c:8f:14:
         e6:b5:6e:2d:c3:37:77:ad:6d:98:a1:cd:a1:0a:5c:c6:c7:cd:
         8f:e0:db:f2:23:11:cc:54:15:9e:48:23:a3:a9:76:15:1e:1a:
         75:bb:7e:70:b8:d1:47:60:72:17:b5:e8:bb:2d:29:9d:e0:ac:
         2a:58:48:6d:d3:18:05:3f:c1:1f:a3:41:86:8e:7f:ad:a8:b6:
         f5:a5:4e:57:8c:39:7c:2f:98:da:f5:dd:cc:c0:a5:f1:a0:f0:
         c0:c4:31:7e:7f:ec:5b:d4:7a:3f:b8:49:be:31:1d:e4:73:7f:
         c6:c0:c0:86:12:f0:86:24:0d:f1:59:ef:b0:23:64:b5:db:67:
         34:5d:17:ab:77:d8:82:59:05:8d:ee:77:4f:85:1f:ca:a5:f8:
         d0:ef:00:c9:25:25:39:17:c3:ca:42:fe:85:2b:ae:81:49:d7:
         fc:be:63:c6:7b:ba:b9:56:60:57:49:6d:a2:70:17:3c:c5:c7:
         60:07:d7:3d:53:33:0c:53:12:54:77:29:7d:21:b1:0d:31:c8:
         7e:ce:14:e3:b6:3c:53:13:bb:94:a1:24:42:64:c9:02:ce:37:
         0d:2f:8d:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8iN9GNLBFBgNqmOu+9Pl2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzM0ZjgzNzNiZTdmZmIxYTM1ZWIzODg2MDU2NWJjM2M0
NTFiZTYwHhcNMjQwNDI4MDEwMDM0WhcNMjQwNDI5MDEwMDM0WjAzMTEwLwYDVQQD
EyhlYTViMTg5ZjljYjY5MTZhZmY1NTNlNjVmYzRiM2NiM2MwM2U5YzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FUMPH5z7+c2ywg6H9zBk7D8+ydr
8O4ZKwEI3aKypgSKOH7RsZvjFCG0Za737rx+BNQFRg3bMIuIJ5jYcdEqCiDNzHuZ
/QirqvlVlvzgYNtyw6PSq5NUKpcglkrRVjGCX/seFemWXp2bOgGGJVhB4gBgb9VU
2ifO3nVHcPrmYQEOatQVGZOhMF9+76BdKCqghGUdDbhLXvys0THL2qMeHzy3mV4w
LHREYCZHSUoKqQ3CJSNVyki3UroA7PK42HwuC9TRP/1LkUPMjPusRPja0qjsHzSh
wz4tqV8Ubds7ZlgkJo27Z8RTGBve34dXqLZ9g2LW4IL6IQ0gfhw7U+Y3iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpbGJ+ctpFq/1U+ZfxLPLPAPpxlMB8GA1UdIwQY
MBaAFALDT4Nzvn/7GjXrOIYFZbw8RRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQt
ZTQ1MWI1OTA3ZWE0LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQtZTQ1MWI1OTA3ZWE0
LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSJQAS4z
DYIrLPkPRWcwvLWoJXrmac4H2Dul0lrlqNz+bI8U5rVuLcM3d61tmKHNoQpcxsfN
j+Db8iMRzFQVnkgjo6l2FR4adbt+cLjRR2ByF7Xouy0pneCsKlhIbdMYBT/BH6NB
ho5/rai29aVOV4w5fC+Y2vXdzMCl8aDwwMQxfn/sW9R6P7hJvjEd5HN/xsDAhhLw
hiQN8VnvsCNktdtnNF0Xq3fYglkFje53T4UfyqX40O8AySUlORfDykL+hSuugUnX
/L5jxnu6uVZgV0ltonAXPMXHYAfXPVMzDFMSVHcpfSGxDTHIfs4U47Y8UxO7lKEk
QmTJAs43DS+NJg==
-----END CERTIFICATE-----
Generated at Sun Apr 28 04:17:28 2024 by rpki-client on console-ams.rpki-client.org