Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File:                     PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier:          LsfTxaD0vKlGPLTd4EKv7i4ntNL+NjXeHJ8aPzfztxA=
Subject key identifier:   3C:B7:15:96:C3:09:FA:71:E2:C1:02:44:38:6E:C7:69:6D:7B:D7:D1
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer:       /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial:       018F874884CF513596D3F365A4CE66D9CAA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:00:27 +0000
Manifest this update:     Fri 17 May 2024 16:00:27 +0000
Manifest next update:     Sat 18 May 2024 16:00:27 +0000
Files and hashes:         1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: E06D8wVxeGHDRDAeV9ZvfQB03seG29PfynIJ6eZPFn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:84:cf:51:35:96:d3:f3:65:a4:ce:66:d9:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
        Validity
            Not Before: May 17 16:00:27 2024 GMT
            Not After : May 18 16:00:27 2024 GMT
        Subject: CN=3cb71596c309fa71e2c10244386ec7696d7bd7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:34:39:c4:ec:8c:95:f3:f8:10:92:90:6b:
                    e5:9b:8c:31:00:bd:27:ef:2b:04:e7:15:37:11:59:
                    a0:ef:f9:06:b9:59:a8:f6:03:46:d4:92:d8:e3:92:
                    e1:38:be:8f:28:17:b0:ed:cc:6e:ea:03:b3:f4:26:
                    19:94:aa:6b:64:3f:8f:4c:e9:37:6a:6c:ad:10:4f:
                    1e:d0:34:51:75:ac:f6:41:45:ef:ca:1d:bf:da:44:
                    f5:16:4f:cd:2a:e7:d8:8e:d0:aa:38:e9:c1:42:81:
                    4c:be:cd:7f:69:6a:af:14:99:8e:3c:10:9a:f1:12:
                    6e:2d:98:ca:ba:a5:a5:fb:5f:1a:63:e9:b9:42:e7:
                    e0:d0:b9:98:95:ae:eb:ad:17:12:10:0b:22:96:1c:
                    71:af:6e:50:84:99:f1:0c:b0:c1:94:94:d8:52:63:
                    b0:fd:45:ad:d7:c8:b7:7c:42:7b:10:35:5b:9e:c2:
                    11:ff:82:bb:2b:68:07:2b:65:f8:08:82:d1:d2:cb:
                    9d:47:b9:cd:24:54:be:8b:2c:0a:e8:a9:8b:48:00:
                    a8:c6:96:8d:56:41:49:9b:79:d0:8a:05:f4:14:dd:
                    59:3e:be:da:27:be:c0:fa:b5:52:7c:50:3a:32:8e:
                    19:c6:ae:b1:f8:47:db:5d:f7:dd:31:c0:4b:a9:b7:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:15:96:C3:09:FA:71:E2:C1:02:44:38:6E:C7:69:6D:7B:D7:D1
            X509v3 Authority Key Identifier:
                keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:60:f2:19:0b:38:37:90:91:d0:82:9c:8d:c8:36:d7:f2:c7:
         65:d7:a3:f4:d1:ed:36:e3:ee:d7:f5:03:78:e8:58:fb:29:6a:
         08:4d:7d:a7:d7:b5:49:4c:a3:72:8b:90:1c:6e:9c:d6:0d:c0:
         26:89:fc:ab:8a:89:7a:19:2d:77:6c:8a:a2:c0:07:d2:4e:b0:
         b9:1c:da:16:33:17:33:c1:7c:bb:ed:38:8b:7c:30:ff:1f:ed:
         2e:1b:e8:b0:9a:44:67:cc:88:5c:4b:cf:2a:a1:5e:59:14:fb:
         18:01:94:9d:9b:16:99:00:73:9d:5e:ab:bb:2e:17:c1:2d:2f:
         b2:a2:48:0b:50:84:18:59:e3:76:52:42:93:ab:86:89:71:2d:
         e6:c6:80:d0:22:5d:6c:4e:a3:3b:9b:a6:6f:82:f5:69:cf:98:
         47:80:76:3e:2d:f6:bd:0d:5a:c2:65:b3:25:94:8a:c1:5c:f9:
         30:4f:24:f9:03:4d:a1:64:fd:ce:f1:e9:be:40:9d:d9:fe:6d:
         fe:52:54:89:bf:9a:b4:98:f8:08:67:67:bc:82:87:36:b1:5e:
         9a:4f:6a:ad:13:bf:97:bb:f2:35:3f:ac:5d:58:b1:53:7e:bd:
         d3:26:e9:f2:2d:11:a6:b5:8e:ed:89:6a:db:41:9b:27:57:0b:
         6f:90:20:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSITPUTWW0/NlpM5m2cqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjN2JjNmYwZDQ2NWZlZTI5NGZkNjJjODUwZGNmMzhlYzRh
YzE1OTcwHhcNMjQwNTE3MTYwMDI3WhcNMjQwNTE4MTYwMDI3WjAzMTEwLwYDVQQD
EygzY2I3MTU5NmMzMDlmYTcxZTJjMTAyNDQzODZlYzc2OTZkN2JkN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8g0OcTsjJXz+BCSkGvlm4wxAL0n
7ysE5xU3EVmg7/kGuVmo9gNG1JLY45LhOL6PKBew7cxu6gOz9CYZlKprZD+PTOk3
amytEE8e0DRRdaz2QUXvyh2/2kT1Fk/NKufYjtCqOOnBQoFMvs1/aWqvFJmOPBCa
8RJuLZjKuqWl+18aY+m5Qufg0LmYla7rrRcSEAsilhxxr25QhJnxDLDBlJTYUmOw
/UWt18i3fEJ7EDVbnsIR/4K7K2gHK2X4CILR0sudR7nNJFS+iywK6KmLSACoxpaN
VkFJm3nQigX0FN1ZPr7aJ77A+rVSfFA6Mo4Zxq6x+EfbXffdMcBLqbfXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDy3FZbDCfpx4sECRDhux2lte9fRMB8GA1UdIwQY
MBaAFDx7xvDUZf7ilP1iyFDc847ErBWXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2Yt
MGRiZDIzMmZkMjRlLzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2YtMGRiZDIzMmZkMjRl
LzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGDyGQs4
N5CR0IKcjcg21/LHZdej9NHtNuPu1/UDeOhY+ylqCE19p9e1SUyjcouQHG6c1g3A
Jon8q4qJehktd2yKosAH0k6wuRzaFjMXM8F8u+04i3ww/x/tLhvosJpEZ8yIXEvP
KqFeWRT7GAGUnZsWmQBznV6ruy4XwS0vsqJIC1CEGFnjdlJCk6uGiXEt5saA0CJd
bE6jO5umb4L1ac+YR4B2Pi32vQ1awmWzJZSKwVz5ME8k+QNNoWT9zvHpvkCd2f5t
/lJUib+atJj4CGdnvIKHNrFemk9qrRO/l7vyNT+sXVixU3690ybp8i0RprWO7Ylq
20GbJ1cLb5AgJQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:58:17 2024 by rpki-client on console-ams.rpki-client.org