Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File:                     PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier:          42MEXCdIAd+F9MFONZxVGS4L8jaf/hao2wvrDQm4Kdg=
Subject key identifier:   2F:78:A5:33:30:ED:EA:A7:43:77:EA:9A:61:76:93:7A:08:59:67:22
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer:       /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial:       018F87484CD163990B1EAF2FCD89A5A11A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number:          0C2F
Signing time:             Fri 17 May 2024 16:00:13 +0000
Manifest this update:     Fri 17 May 2024 16:00:13 +0000
Manifest next update:     Sat 18 May 2024 16:00:13 +0000
Files and hashes:         1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: DAFHl8vyuKBdFLzJ0X3YwvDDzLBmSzAmA66gc/GaGeU=)
                          2: gvWercLjPIgDte6qdAorE8D1eYs.roa (hash: ZPNxIH6YMNSAITNcsOTMT5v5cGUtlG0UESDA0YhvQWI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:4c:d1:63:99:0b:1e:af:2f:cd:89:a5:a1:1a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
        Validity
            Not Before: May 17 16:00:13 2024 GMT
            Not After : May 18 16:00:13 2024 GMT
        Subject: CN=2f78a53330edeaa74377ea9a6176937a08596722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:cb:f5:32:ce:f0:93:a0:1b:78:98:78:ec:
                    c3:46:80:f9:71:4c:53:55:a7:af:be:86:25:63:df:
                    6c:0b:b6:f6:3c:d9:6c:2b:ff:a3:51:62:af:b6:a3:
                    83:49:bb:84:1f:bd:5e:79:5e:5a:8d:e4:33:54:d6:
                    39:03:84:8b:10:8f:66:bc:b5:33:8d:61:08:ed:98:
                    b2:b0:28:15:15:d6:f6:44:01:bc:58:8d:4e:9f:50:
                    d1:d8:65:e4:fa:88:45:61:2f:29:b3:ee:93:d8:bd:
                    e8:d8:69:5f:d8:79:fa:fe:ff:81:5a:fc:69:8a:7e:
                    6a:0b:1b:ed:10:c8:92:55:65:da:b9:05:f7:72:4b:
                    04:db:53:a9:7a:96:bc:6d:24:df:24:f2:8e:35:8d:
                    30:1e:5b:1e:56:ce:2a:d0:34:07:38:5e:6d:0c:e0:
                    60:89:fa:fc:c6:6f:1c:47:b6:1b:20:26:fd:41:62:
                    d8:87:57:54:08:b2:be:d2:9e:64:cd:af:4e:79:ac:
                    6c:ac:b2:d9:65:ee:d3:06:21:e9:40:8a:69:c2:3c:
                    4c:cd:ba:dc:5e:58:d8:08:46:c7:41:ae:f8:ce:bb:
                    a3:36:26:02:5d:2a:29:fe:05:3f:b1:2b:09:34:b0:
                    12:80:ed:0d:7d:bb:3c:78:9e:e5:02:08:4f:c8:52:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:78:A5:33:30:ED:EA:A7:43:77:EA:9A:61:76:93:7A:08:59:67:22
            X509v3 Authority Key Identifier:
                keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:b5:28:a1:a4:b7:83:19:0a:45:97:53:fc:1c:aa:c3:a1:
         01:b9:d6:dc:8c:80:04:36:e7:a6:27:17:8e:2d:10:36:ad:a1:
         f9:5a:ac:a0:b8:47:b1:95:11:f6:2f:98:26:8a:32:5c:fe:df:
         d9:c6:ab:76:e7:e3:6a:bd:22:8e:56:20:61:05:40:a1:22:46:
         c5:df:38:14:50:33:87:23:b2:ee:07:82:26:2e:47:39:3e:3a:
         62:5a:ce:dd:93:b6:43:59:7f:81:4f:f3:5d:80:76:57:c3:b4:
         15:ff:75:8d:2c:f6:79:fd:5e:6b:37:ae:5c:99:f3:91:37:75:
         3d:35:0d:41:03:8d:9d:5e:5a:36:22:58:21:09:41:a0:0e:95:
         ba:62:51:66:e4:39:e8:e3:4f:ca:76:f8:24:e5:df:86:b4:9f:
         37:03:0f:33:42:b3:d9:52:07:93:5f:00:b2:40:8e:b1:67:64:
         1f:03:da:2c:e6:19:28:3b:04:3d:8e:61:4b:16:f9:a9:f8:21:
         c6:42:0a:e7:2b:2d:f9:6f:91:77:37:43:a3:7d:8b:9d:9b:a8:
         74:6a:39:34:f0:e1:91:54:dc:5e:25:0f:0f:ff:0c:69:4f:ea:
         fc:81:42:7b:a9:62:57:ea:30:11:1f:3f:45:bd:a8:fd:94:74:
         d2:c9:60:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSEzRY5kLHq8vzYmloRohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMmFmYTVjNzA2ZDNlYjBhOTJkYTg5YjVkNDFiOTM2ZWI0
OWNjYjgwHhcNMjQwNTE3MTYwMDEzWhcNMjQwNTE4MTYwMDEzWjAzMTEwLwYDVQQD
EygyZjc4YTUzMzMwZWRlYWE3NDM3N2VhOWE2MTc2OTM3YTA4NTk2NzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowbL9TLO8JOgG3iYeOzDRoD5cUxT
VaevvoYlY99sC7b2PNlsK/+jUWKvtqODSbuEH71eeV5ajeQzVNY5A4SLEI9mvLUz
jWEI7ZiysCgVFdb2RAG8WI1On1DR2GXk+ohFYS8ps+6T2L3o2Glf2Hn6/v+BWvxp
in5qCxvtEMiSVWXauQX3cksE21Opepa8bSTfJPKONY0wHlseVs4q0DQHOF5tDOBg
ifr8xm8cR7YbICb9QWLYh1dUCLK+0p5kza9OeaxsrLLZZe7TBiHpQIppwjxMzbrc
XljYCEbHQa74zrujNiYCXSop/gU/sSsJNLASgO0Nfbs8eJ7lAghPyFLM9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC94pTMw7eqnQ3fqmmF2k3oIWWciMB8GA1UdIwQY
MBaAFDwq+lxwbT6wqS2om11BuTbrScy4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUt
Zjc4MzNhM2YyNDg1LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lYjFjNGYtZmQ4MC00OTE5LWIxODUtZjc4MzNhM2YyNDg1
LzEvUENyNlhIQnRQckNwTGFpYlhVRzVOdXRKekxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5a1KKGk
t4MZCkWXU/wcqsOhAbnW3IyABDbnpicXji0QNq2h+VqsoLhHsZUR9i+YJooyXP7f
2cardufjar0ijlYgYQVAoSJGxd84FFAzhyOy7geCJi5HOT46YlrO3ZO2Q1l/gU/z
XYB2V8O0Ff91jSz2ef1eazeuXJnzkTd1PTUNQQONnV5aNiJYIQlBoA6VumJRZuQ5
6ONPynb4JOXfhrSfNwMPM0Kz2VIHk18AskCOsWdkHwPaLOYZKDsEPY5hSxb5qfgh
xkIK5yst+W+RdzdDo32LnZuodGo5NPDhkVTcXiUPD/8MaU/q/IFCe6liV+owER8/
Rb2o/ZR00slgrg==
-----END CERTIFICATE-----
Generated at Sat May 18 00:39:07 2024 by rpki-client on console-fra.rpki-client.org