Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
File:                     PJUbD8U6RlditFJfyY3_AskMHpc.mft (raw, json)
Hash identifier:          jRfOJr7mwFINzUvZcYHNCnoyLj4sqXL7ejh5CapJUbg=
Subject key identifier:   9F:D3:FB:83:AD:23:68:E1:4B:A8:14:AD:97:0E:BE:60:FC:BD:BB:A8
Authority key identifier: 3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
Certificate issuer:       /CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Certificate serial:       0196BA12109FC215E83F34EAA18CF12A5BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
Manifest number:          0BC0
Signing time:             Sat 10 May 2025 12:01:08 +0000
Manifest this update:     Sat 10 May 2025 12:01:08 +0000
Manifest next update:     Sun 11 May 2025 12:01:08 +0000
Files and hashes:         1: PJUbD8U6RlditFJfyY3_AskMHpc.crl (hash: U1hF9oq8Iza4uZ166HDLMr85Cg2F6Wsy7Z0KsOOfA1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:12:10:9f:c2:15:e8:3f:34:ea:a1:8c:f1:2a:5b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
        Validity
            Not Before: May 10 12:01:08 2025 GMT
            Not After : May 11 12:01:08 2025 GMT
        Subject: CN=9fd3fb83ad2368e14ba814ad970ebe60fcbdbba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b4:9e:4d:7e:0e:d9:8d:14:f1:25:1e:01:80:
                    9b:f9:8d:60:ea:23:67:9c:a1:ff:f4:ed:6e:9c:bd:
                    fa:3c:4b:24:a8:b8:06:51:18:99:fb:78:1c:39:b0:
                    d7:bc:0f:77:45:54:8b:2b:c7:6c:e8:c7:d0:92:ce:
                    41:99:ce:f9:cc:f5:63:66:64:1e:b5:61:59:99:18:
                    a9:e5:73:f0:ed:7f:73:bd:53:b0:f8:7d:50:63:8f:
                    3e:5e:85:b2:e1:ca:d0:4c:c3:70:48:69:bd:3d:4b:
                    d6:e1:dd:d0:95:cc:1a:d0:93:42:58:76:3d:b8:21:
                    d1:02:c6:e3:95:4f:fa:8a:c6:1d:25:f3:3c:13:e8:
                    20:9c:86:29:85:04:8f:bc:24:20:96:11:09:82:a2:
                    81:bd:e6:ff:b5:e3:77:8e:ca:88:b8:62:62:db:5c:
                    0d:27:2a:b6:38:fc:02:5a:26:10:17:8a:7e:33:c4:
                    ee:16:06:37:32:fa:43:2a:62:94:b8:da:7d:86:01:
                    43:d3:43:76:a4:ae:ba:31:0c:5d:bf:47:05:4f:7a:
                    25:9c:95:b7:b5:95:04:3e:5a:1f:5e:24:cf:8d:91:
                    20:19:78:0a:5d:fb:37:61:76:93:78:19:f1:d6:ce:
                    1c:f1:98:c8:6d:29:75:b2:4b:92:27:04:f3:18:10:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D3:FB:83:AD:23:68:E1:4B:A8:14:AD:97:0E:BE:60:FC:BD:BB:A8
            X509v3 Authority Key Identifier:
                keyid:3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f2:c1:58:76:be:43:33:a9:0b:8f:cc:5e:b1:f4:b4:1a:14:
         b7:2d:08:4b:7c:a8:6c:20:be:b2:b5:e2:a0:92:d7:ed:61:26:
         83:2e:9e:aa:dc:8c:c3:ce:b7:89:de:91:83:9e:d3:00:6f:54:
         3d:31:7d:e3:e6:58:9f:97:0b:17:9b:96:d5:df:15:35:22:39:
         46:7e:c0:dc:c5:3c:20:a3:79:27:42:c2:c9:04:f4:26:26:81:
         b2:a3:5b:9d:3e:e1:ca:3d:82:34:cc:f5:63:89:9d:44:56:a7:
         7d:e6:46:9b:df:1d:82:4b:f4:51:66:f5:bf:28:65:a3:54:c2:
         c6:da:19:c8:92:37:2a:14:43:fb:f7:ef:e4:c3:49:36:91:dd:
         52:31:0c:0b:fb:c4:ce:2c:1d:d8:b9:ba:03:12:e2:33:62:3f:
         4a:1c:60:c4:ae:31:f6:90:b1:b2:95:49:df:44:b9:16:d2:43:
         62:e5:6e:07:6a:e3:ac:0b:6a:bf:83:3e:22:09:eb:70:4d:34:
         20:ac:43:a6:32:ae:08:78:c6:0c:f0:d9:d5:e2:86:ab:30:4b:
         9c:dc:15:54:4b:9e:30:8b:96:f3:09:c1:6b:72:e9:81:2a:95:
         0b:a9:f9:53:4b:ed:98:4f:50:4c:67:a2:9f:3c:12:db:ee:be:
         80:6f:55:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6EhCfwhXoPzTqoYzxKlu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOTUxYjBmYzUzYTQ2NTc2MmI0NTI1ZmM5OGRmZjAyYzkw
YzFlOTcwHhcNMjUwNTEwMTIwMTA4WhcNMjUwNTExMTIwMTA4WjAzMTEwLwYDVQQD
Eyg5ZmQzZmI4M2FkMjM2OGUxNGJhODE0YWQ5NzBlYmU2MGZjYmRiYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bSeTX4O2Y0U8SUeAYCb+Y1g6iNn
nKH/9O1unL36PEskqLgGURiZ+3gcObDXvA93RVSLK8ds6MfQks5Bmc75zPVjZmQe
tWFZmRip5XPw7X9zvVOw+H1QY48+XoWy4crQTMNwSGm9PUvW4d3Qlcwa0JNCWHY9
uCHRAsbjlU/6isYdJfM8E+ggnIYphQSPvCQglhEJgqKBveb/teN3jsqIuGJi21wN
Jyq2OPwCWiYQF4p+M8TuFgY3MvpDKmKUuNp9hgFD00N2pK66MQxdv0cFT3olnJW3
tZUEPlofXiTPjZEgGXgKXfs3YXaTeBnx1s4c8ZjIbSl1skuSJwTzGBDHxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/T+4OtI2jhS6gUrZcOvmD8vbuoMB8GA1UdIwQY
MBaAFDyVGw/FOkZXYrRSX8mN/wLJDB6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEpVYkQ4VTZSbGRpdEZKZnlZM19Bc2tNSHBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NDA5MGEtYmI0Yi00OTlhLTkwZTAt
NjRlNzcxOTgwMjYyLzEvUEpVYkQ4VTZSbGRpdEZKZnlZM19Bc2tNSHBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85NDA5MGEtYmI0Yi00OTlhLTkwZTAtNjRlNzcxOTgwMjYy
LzEvUEpVYkQ4VTZSbGRpdEZKZnlZM19Bc2tNSHBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvLBWHa+
QzOpC4/MXrH0tBoUty0IS3yobCC+srXioJLX7WEmgy6eqtyMw863id6Rg57TAG9U
PTF94+ZYn5cLF5uW1d8VNSI5Rn7A3MU8IKN5J0LCyQT0JiaBsqNbnT7hyj2CNMz1
Y4mdRFanfeZGm98dgkv0UWb1vyhlo1TCxtoZyJI3KhRD+/fv5MNJNpHdUjEMC/vE
ziwd2Lm6AxLiM2I/ShxgxK4x9pCxspVJ30S5FtJDYuVuB2rjrAtqv4M+IgnrcE00
IKxDpjKuCHjGDPDZ1eKGqzBLnNwVVEueMIuW8wnBa3LpgSqVC6n5U0vtmE9QTGei
nzwS2+6+gG9VYA==
-----END CERTIFICATE-----
Generated at Sat May 10 22:21:48 2025 by rpki-client