Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File:                     PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier:          fS5s864+/fNelcOWh6TDYHnNWdUXq5EQWeLvoHGoeWU=
Subject key identifier:   FA:76:5C:D8:32:5E:6E:FE:EA:1A:7C:01:B5:72:18:E1:5C:4B:9C:0D
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer:       /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial:       0193568A0D5F83054EB1385050C290515494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number:          077D
Signing time:             Sat 23 Nov 2024 01:01:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:47 +0000
Files and hashes:         1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: kBx8JQsM4JO6tcOkyDHzlSOU960g8V8YFlhZt6iMsgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:0d:5f:83:05:4e:b1:38:50:50:c2:90:51:54:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
        Validity
            Not Before: Nov 23 01:01:47 2024 GMT
            Not After : Nov 24 01:01:47 2024 GMT
        Subject: CN=fa765cd8325e6efeea1a7c01b57218e15c4b9c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:a4:4e:9d:89:0b:16:a2:2f:22:d6:0d:45:
                    cf:01:2e:ff:0c:e3:d4:e3:1b:62:43:20:5f:c1:a8:
                    b6:e7:90:9d:93:1d:da:2e:96:56:9f:22:d1:1f:7b:
                    cb:96:7c:92:36:25:07:9c:94:19:89:89:fb:a1:25:
                    24:f7:0b:d0:5c:b2:f6:f7:33:b5:f4:62:82:bf:97:
                    18:0f:fb:f7:0b:c3:e3:66:c7:39:a3:3d:e3:47:22:
                    ef:ca:f6:ea:e3:5d:21:9f:cf:85:86:b7:17:6f:f0:
                    8d:32:50:75:c3:0d:8b:5a:db:8f:f9:be:9a:2c:ce:
                    72:de:c9:0c:ac:5c:40:bf:b1:56:57:98:e4:04:42:
                    ce:63:66:b2:39:71:72:c6:a3:dc:80:27:e5:5c:53:
                    5f:eb:50:bf:cf:a4:a1:98:6c:39:7b:b3:19:99:ea:
                    9c:39:47:47:8a:e3:19:92:3a:f2:27:96:a4:85:f5:
                    20:98:d2:f0:56:bb:6f:5d:2b:12:4f:61:ba:68:31:
                    49:8a:4f:ce:5c:f3:71:6e:a6:bd:7d:b3:ed:6c:5f:
                    3b:18:56:6f:0e:dd:44:74:2c:4e:4b:90:25:85:7c:
                    46:e8:8a:76:a6:6f:b5:f3:90:15:b4:a6:05:20:16:
                    4e:38:07:a1:a5:75:34:43:e1:25:c5:6b:8b:48:cb:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:76:5C:D8:32:5E:6E:FE:EA:1A:7C:01:B5:72:18:E1:5C:4B:9C:0D
            X509v3 Authority Key Identifier:
                keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:9a:8b:25:80:35:1f:a6:f7:bb:02:03:28:64:2d:bf:c0:
         f2:56:0d:87:aa:45:ad:27:df:32:0b:14:ff:e5:94:16:3f:62:
         28:0b:11:30:24:17:9e:5b:ff:2d:ff:18:dd:c6:91:58:b7:c0:
         16:c0:67:8f:19:02:a5:68:b0:50:2c:28:b0:9a:b3:77:0d:bc:
         8d:1e:7f:fc:ff:94:5a:a7:7b:51:4c:7d:4c:87:30:64:a6:74:
         02:98:2a:f3:a9:a9:d3:6f:6c:0f:ef:7f:39:fe:20:9e:cb:05:
         d1:11:68:6f:c4:1f:82:f2:7f:6e:78:99:df:68:de:e9:72:68:
         41:5f:1a:6c:73:63:fd:30:f3:60:0f:64:cd:6c:d3:6c:af:fe:
         25:c6:c0:fb:30:ed:dc:19:1b:5d:d7:d3:b4:05:ae:2a:af:0d:
         62:f1:58:30:8f:36:eb:d9:f1:d5:21:9a:5c:fc:56:21:24:fd:
         8a:2d:bf:ea:d5:65:03:08:69:6b:da:e5:db:44:cf:4b:29:4b:
         bf:82:af:c0:c6:f1:4b:1c:2c:33:90:45:03:a7:a5:6e:ed:d9:
         67:75:9e:f6:cc:09:0d:4a:45:c6:71:dc:a3:dc:38:20:99:93:
         91:f4:5f:c3:e4:4f:5e:1b:4c:0f:65:cf:a5:2f:8b:67:99:10:
         12:56:60:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWig1fgwVOsThQUMKQUVSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjN2ZhYzllYjcyNTJkZDQ2YWYwMWE0ZDcyODI2YzlkOTdi
MzI1ZjQwHhcNMjQxMTIzMDEwMTQ3WhcNMjQxMTI0MDEwMTQ3WjAzMTEwLwYDVQQD
EyhmYTc2NWNkODMyNWU2ZWZlZWExYTdjMDFiNTcyMThlMTVjNGI5YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrykTp2JCxaiLyLWDUXPAS7/DOPU
4xtiQyBfwai255Cdkx3aLpZWnyLRH3vLlnySNiUHnJQZiYn7oSUk9wvQXLL29zO1
9GKCv5cYD/v3C8PjZsc5oz3jRyLvyvbq410hn8+FhrcXb/CNMlB1ww2LWtuP+b6a
LM5y3skMrFxAv7FWV5jkBELOY2ayOXFyxqPcgCflXFNf61C/z6ShmGw5e7MZmeqc
OUdHiuMZkjryJ5akhfUgmNLwVrtvXSsST2G6aDFJik/OXPNxbqa9fbPtbF87GFZv
Dt1EdCxOS5AlhXxG6Ip2pm+185AVtKYFIBZOOAehpXU0Q+ElxWuLSMvbXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp2XNgyXm7+6hp8AbVyGOFcS5wNMB8GA1UdIwQY
MBaAFDx/rJ63JS3UavAaTXKCbJ2XsyX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAt
ZWFiYWMxNmVhNTg0LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAtZWFiYWMxNmVhNTg0
LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5qaiyWA
NR+m97sCAyhkLb/A8lYNh6pFrSffMgsU/+WUFj9iKAsRMCQXnlv/Lf8Y3caRWLfA
FsBnjxkCpWiwUCwosJqzdw28jR5//P+UWqd7UUx9TIcwZKZ0Apgq86mp029sD+9/
Of4gnssF0RFob8QfgvJ/bniZ32je6XJoQV8abHNj/TDzYA9kzWzTbK/+JcbA+zDt
3BkbXdfTtAWuKq8NYvFYMI8269nx1SGaXPxWIST9ii2/6tVlAwhpa9rl20TPSylL
v4KvwMbxSxwsM5BFA6elbu3ZZ3We9swJDUpFxnHco9w4IJmTkfRfw+RPXhtMD2XP
pS+LZ5kQElZghA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:38 2024 by rpki-client on console-ams.rpki-client.org