Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File:                     PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier:          G+rbPPQx1T6fbZ2fBA5XJOJTTRN04oF3At1Rfml96V8=
Subject key identifier:   21:60:C6:3A:62:04:57:4D:24:A4:9D:C3:8F:03:DA:29:4D:53:DF:75
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer:       /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial:       018F87ED9DB903D5C80055D9B282ED7B0657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number:          02EA
Signing time:             Fri 17 May 2024 19:00:47 +0000
Manifest this update:     Fri 17 May 2024 19:00:47 +0000
Manifest next update:     Sat 18 May 2024 19:00:47 +0000
Files and hashes:         1: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: zwj7nU78nWM3uOr5lUOnpAPSpZRohOtvIb3uuQZLsus=)
                          2: gQ0XNZzlo6_D5_6oh63nMqIyN2s.roa (hash: ofJqst8Qc50l9ofICGP9GbDI9oGMWAApeFId8dU+cgI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:9d:b9:03:d5:c8:00:55:d9:b2:82:ed:7b:06:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
        Validity
            Not Before: May 17 19:00:47 2024 GMT
            Not After : May 18 19:00:47 2024 GMT
        Subject: CN=2160c63a6204574d24a49dc38f03da294d53df75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:7a:26:e8:85:ce:ad:4f:fd:21:c7:e4:7b:
                    9e:ec:69:7b:15:5f:ab:8e:86:be:0b:b4:45:4f:bf:
                    8f:5e:77:43:09:34:10:11:4e:b5:c2:e4:7b:1e:80:
                    85:ff:46:7d:ff:71:4e:f3:98:79:e2:59:50:f6:58:
                    1a:79:65:57:0f:36:28:9a:9c:96:e0:26:76:4c:88:
                    e4:4a:9a:64:d9:bf:ac:cb:20:10:fb:1a:c4:09:4b:
                    60:7b:d2:90:b2:30:a4:e0:6c:e1:35:43:36:44:86:
                    06:23:cf:63:a1:c2:a6:55:54:0b:ee:f8:8f:c6:1a:
                    61:1e:d7:89:36:0d:ee:51:00:d6:94:cf:f8:21:4d:
                    d6:29:e5:da:6c:cd:7f:cc:06:18:33:4a:03:c7:4b:
                    e9:32:8d:bb:c0:ed:71:f7:4b:53:fb:ab:4a:d4:65:
                    30:cc:7a:6a:6e:d9:69:90:24:af:af:f1:45:f1:5b:
                    44:e3:3a:79:91:80:49:a7:d9:18:55:bc:01:bf:13:
                    63:c3:9f:35:97:4b:c9:07:32:49:c1:c8:17:43:49:
                    35:d6:0e:c0:74:b8:5a:1d:de:88:6a:a3:3f:c9:12:
                    fb:49:bd:12:84:91:ce:14:2f:25:01:ed:8a:61:1c:
                    bf:91:59:d7:70:b4:33:3e:a8:39:e2:31:75:9a:34:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:60:C6:3A:62:04:57:4D:24:A4:9D:C3:8F:03:DA:29:4D:53:DF:75
            X509v3 Authority Key Identifier:
                keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:af:c4:1e:b5:74:ac:63:8f:28:d3:03:8c:80:dc:a9:80:7e:
         2f:dc:03:d8:78:a7:d7:ed:6a:0f:4c:58:9a:76:a8:88:48:85:
         4c:f3:e0:8a:50:83:4a:fe:fc:76:b4:e4:1e:c0:29:7f:27:04:
         ae:aa:df:34:20:ef:b7:1e:a6:8f:d6:af:30:d2:2f:b9:0a:2a:
         b2:93:ae:d3:60:bd:a5:17:4f:7d:4b:f3:fd:8f:fa:75:a8:6f:
         06:75:d0:18:ad:fc:18:e0:15:86:fc:83:9d:26:49:a8:06:10:
         d3:c5:31:66:d6:31:25:14:8f:7c:23:37:69:dd:29:da:d2:5d:
         f7:3b:34:fb:1a:d1:c4:f1:ca:88:aa:87:a5:9c:a7:f7:c5:c2:
         84:85:69:65:9e:ba:12:c0:17:36:d1:59:70:30:fa:68:fd:d4:
         e3:bd:5e:13:ac:c7:a9:62:27:71:ad:24:58:b3:dd:74:44:c0:
         9e:1e:a2:b4:ae:61:1d:ab:06:99:d5:af:ab:1f:18:c0:0c:76:
         af:f6:e4:ae:dc:a8:6a:77:6c:e0:f2:c6:91:bb:ba:8d:8a:d1:
         64:de:2c:4f:7f:1c:ca:bc:9a:b9:fb:a4:43:e2:86:11:76:97:
         8c:5a:f9:7e:2e:4a:64:a6:cc:21:b1:1d:e0:dd:67:90:01:73:
         a7:a8:f4:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7Z25A9XIAFXZsoLtewZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2
NDQ2OWEwHhcNMjQwNTE3MTkwMDQ3WhcNMjQwNTE4MTkwMDQ3WjAzMTEwLwYDVQQD
EygyMTYwYzYzYTYyMDQ1NzRkMjRhNDlkYzM4ZjAzZGEyOTRkNTNkZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/l6JuiFzq1P/SHH5Hue7Gl7FV+r
joa+C7RFT7+PXndDCTQQEU61wuR7HoCF/0Z9/3FO85h54llQ9lgaeWVXDzYompyW
4CZ2TIjkSppk2b+syyAQ+xrECUtge9KQsjCk4GzhNUM2RIYGI89jocKmVVQL7viP
xhphHteJNg3uUQDWlM/4IU3WKeXabM1/zAYYM0oDx0vpMo27wO1x90tT+6tK1GUw
zHpqbtlpkCSvr/FF8VtE4zp5kYBJp9kYVbwBvxNjw581l0vJBzJJwcgXQ0k11g7A
dLhaHd6IaqM/yRL7Sb0ShJHOFC8lAe2KYRy/kVnXcLQzPqg54jF1mjQfaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFgxjpiBFdNJKSdw48D2ilNU991MB8GA1UdIwQY
MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt
NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi
LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK/EHrV0
rGOPKNMDjIDcqYB+L9wD2Hin1+1qD0xYmnaoiEiFTPPgilCDSv78drTkHsApfycE
rqrfNCDvtx6mj9avMNIvuQoqspOu02C9pRdPfUvz/Y/6dahvBnXQGK38GOAVhvyD
nSZJqAYQ08UxZtYxJRSPfCM3ad0p2tJd9zs0+xrRxPHKiKqHpZyn98XChIVpZZ66
EsAXNtFZcDD6aP3U471eE6zHqWInca0kWLPddETAnh6itK5hHasGmdWvqx8YwAx2
r/bkrtyoands4PLGkbu6jYrRZN4sT38cyryaufukQ+KGEXaXjFr5fi5KZKbMIbEd
4N1nkAFzp6j0Rg==
-----END CERTIFICATE-----
Generated at Fri May 17 20:20:29 2024 by rpki-client on console-fra.rpki-client.org