Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File:                     P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier:          PdtKhxboqTufRCA9N5/MuPIQ8BkHgs1OSduG7G5K9z4=
Subject key identifier:   4E:58:9B:DD:0B:42:BA:5B:6E:B1:E1:BD:78:A0:D9:E0:E1:53:D5:16
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer:       /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial:       018F87B64F5DBBBD398376A57F56B0A406C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number:          026F
Signing time:             Fri 17 May 2024 18:00:22 +0000
Manifest this update:     Fri 17 May 2024 18:00:22 +0000
Manifest next update:     Sat 18 May 2024 18:00:22 +0000
Files and hashes:         1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: 4gC2nzoeDxb+bcxp2fjQHp0037JEH8t9Gl7KIZA3Pz0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4f:5d:bb:bd:39:83:76:a5:7f:56:b0:a4:06:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
        Validity
            Not Before: May 17 18:00:22 2024 GMT
            Not After : May 18 18:00:22 2024 GMT
        Subject: CN=4e589bdd0b42ba5b6eb1e1bd78a0d9e0e153d516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:99:b2:bf:9e:f3:d1:75:de:5c:5b:3c:3c:9c:
                    54:f1:c1:70:f2:6c:1c:a8:ea:50:94:d3:07:4a:1e:
                    99:84:ff:a1:17:f8:29:e1:5e:81:1e:26:60:7c:16:
                    69:9a:1e:d6:27:a8:e6:b2:0a:89:3d:77:0e:45:4f:
                    aa:b9:37:e0:1a:c2:d1:f7:ab:cf:18:48:8d:9e:87:
                    e7:c9:e4:81:b3:51:1d:e8:2b:78:38:10:74:e2:ed:
                    0b:52:a0:78:01:f5:b1:6c:82:ec:ee:c2:31:15:35:
                    60:05:cc:39:9c:8a:e7:c6:15:0a:a5:9e:f1:2a:47:
                    03:2e:82:b1:79:70:75:2e:eb:c4:dd:56:de:f4:91:
                    9e:57:17:da:97:33:be:e3:96:06:b2:10:7a:84:e0:
                    59:dc:9e:e1:66:f6:d3:0d:9f:d1:47:97:17:bc:c5:
                    5e:fc:3c:79:be:f3:58:96:4b:89:51:9d:02:a7:6c:
                    a8:d1:13:02:9b:33:22:0d:b4:5d:69:87:6a:ca:83:
                    8f:17:96:c8:c1:c3:8f:d7:17:5d:94:67:ee:90:2b:
                    01:36:3f:fe:69:11:d0:9d:9c:b5:34:7b:10:ef:c9:
                    0a:e1:9b:32:c3:2f:18:bf:b4:34:a5:87:6f:e7:87:
                    cf:fa:41:28:25:00:1b:c8:a9:18:ed:be:7b:09:e4:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:58:9B:DD:0B:42:BA:5B:6E:B1:E1:BD:78:A0:D9:E0:E1:53:D5:16
            X509v3 Authority Key Identifier:
                keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:81:d6:f4:2f:73:9d:d7:8c:6c:c5:2f:18:f9:e7:28:ed:34:
         3a:8c:fc:87:00:d9:86:60:42:0d:bb:e8:db:2e:d7:3f:3b:54:
         24:b0:cb:75:e6:d8:13:3f:46:f8:38:9a:cd:7f:64:9e:2d:1c:
         52:ae:ca:5b:e1:e4:de:85:d1:49:a7:40:93:2c:73:59:da:dd:
         00:1a:4d:de:ee:06:c9:c9:62:6e:35:80:9f:6c:39:29:17:fe:
         20:62:19:12:0a:e4:25:b7:0c:e3:17:1f:b5:51:32:f5:4d:b2:
         f4:31:3a:7a:24:55:66:51:05:03:2e:38:65:85:99:d7:06:d8:
         f2:e0:2d:a2:47:b2:85:37:a1:b9:0d:79:2f:38:6d:75:03:18:
         1b:1e:9a:27:b3:83:f6:5a:64:31:d3:64:de:f0:ae:e3:3e:c1:
         8e:c9:78:f4:c9:db:fb:c2:1b:be:bf:20:97:a1:ca:d4:0f:4b:
         6c:9d:a1:4f:40:e7:3f:58:90:6c:0a:ad:36:51:8d:08:a9:27:
         cc:21:c2:03:7d:e5:b6:73:00:8e:0e:63:e9:6c:ee:69:c8:56:
         75:fa:af:22:3f:1f:de:70:4c:b2:83:b6:2f:2c:fc:65:71:d5:
         32:6d:56:ca:0b:e9:bd:c8:aa:10:bd:17:74:1e:6f:c4:1a:fe:
         7e:47:10:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htk9du705g3alf1awpAbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNzcyN2E0MTMwOGQ5YjlmNmU2M2RmMWIyMGU4YjljZDgy
MzgxMjAwHhcNMjQwNTE3MTgwMDIyWhcNMjQwNTE4MTgwMDIyWjAzMTEwLwYDVQQD
Eyg0ZTU4OWJkZDBiNDJiYTViNmViMWUxYmQ3OGEwZDllMGUxNTNkNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pmyv57z0XXeXFs8PJxU8cFw8mwc
qOpQlNMHSh6ZhP+hF/gp4V6BHiZgfBZpmh7WJ6jmsgqJPXcORU+quTfgGsLR96vP
GEiNnofnyeSBs1Ed6Ct4OBB04u0LUqB4AfWxbILs7sIxFTVgBcw5nIrnxhUKpZ7x
KkcDLoKxeXB1LuvE3Vbe9JGeVxfalzO+45YGshB6hOBZ3J7hZvbTDZ/RR5cXvMVe
/Dx5vvNYlkuJUZ0Cp2yo0RMCmzMiDbRdaYdqyoOPF5bIwcOP1xddlGfukCsBNj/+
aRHQnZy1NHsQ78kK4Zsywy8Yv7Q0pYdv54fP+kEoJQAbyKkY7b57CeS/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Ym90LQrpbbrHhvXig2eDhU9UWMB8GA1UdIwQY
MBaAFD93J6QTCNm59uY98bIOi5zYI4EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzkt
OTdlY2MwNzA2YmYwLzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hODhmMzAtNmUxYy00YzI4LWIwNzktOTdlY2MwNzA2YmYw
LzEvUDNjbnBCTUkyYm4yNWozeHNnNkxuTmdqZ1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIHW9C9z
ndeMbMUvGPnnKO00Ooz8hwDZhmBCDbvo2y7XPztUJLDLdebYEz9G+DiazX9kni0c
Uq7KW+Hk3oXRSadAkyxzWdrdABpN3u4GyclibjWAn2w5KRf+IGIZEgrkJbcM4xcf
tVEy9U2y9DE6eiRVZlEFAy44ZYWZ1wbY8uAtokeyhTehuQ15LzhtdQMYGx6aJ7OD
9lpkMdNk3vCu4z7Bjsl49Mnb+8Ibvr8gl6HK1A9LbJ2hT0DnP1iQbAqtNlGNCKkn
zCHCA33ltnMAjg5j6WzuachWdfqvIj8f3nBMsoO2Lyz8ZXHVMm1WygvpvciqEL0X
dB5vxBr+fkcQtw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:14:44 2024 by rpki-client on console-ams.rpki-client.org