Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          BBMrt2sTIdW0vOY8bq51IhbAvrpJ81kv5WklxdYcviw=
Subject key identifier:   42:D4:7A:DD:DB:98:53:CB:7A:4A:58:38:CB:A3:F2:51:19:60:21:ED
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       018FB790CD795F2D7F363222A497D7BB743B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          0B15
Signing time:             Mon 27 May 2024 01:01:11 +0000
Manifest this update:     Mon 27 May 2024 01:01:11 +0000
Manifest next update:     Tue 28 May 2024 01:01:11 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: LTD35zS+8LLYRHtPRfMNjid1BQCDX4JiuIpjd1FFwjc=)
                          2: 3Ur-zE_chpcLANxBtH58wg48jzQ.roa (hash: cVH3RAvl7A+TC45Z5J2RgYcYoD7hVc5T+t3VUHIuqJY=)
                          3: Mhe-DiDiWzO6cNoqCkAD4Ax_M8E.roa (hash: 28fZ5uSVUyB+1QqMleXw+Yp0J930J9CoEZkGIvL8h7Q=)
                          4: wdY7B3V9XS1CZUDoU2a5BrVJlr8.roa (hash: jFftvx4CTiex3RcMEYvAQ+mjIyNb26owXYCn6TVFiNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b7:90:cd:79:5f:2d:7f:36:32:22:a4:97:d7:bb:74:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: May 27 01:01:11 2024 GMT
            Not After : May 28 01:01:11 2024 GMT
        Subject: CN=42d47adddb9853cb7a4a5838cba3f251196021ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:e5:ee:dc:36:66:e9:b8:7d:73:78:41:06:
                    e1:03:d3:a3:84:38:5e:0d:f4:e6:c0:44:ee:c7:2b:
                    ef:03:0f:2e:82:d5:2b:25:fb:d3:77:0d:5f:82:92:
                    61:5e:bf:5a:06:c7:87:23:82:c4:e7:35:8b:55:f8:
                    cd:7c:65:70:a7:cb:31:fb:ef:48:43:b8:96:ff:e8:
                    ac:de:24:05:10:f7:3e:be:60:94:f4:76:fe:0e:83:
                    ad:e2:e8:f0:69:eb:bd:2b:18:12:7d:1a:0f:d9:3b:
                    ba:81:95:1d:b1:a9:52:af:69:b0:02:34:d7:f0:90:
                    e3:e1:27:9f:95:7e:32:65:b1:ac:9c:05:34:84:b2:
                    4b:c2:ee:90:e7:5c:b3:83:f7:11:5d:ca:77:82:df:
                    b1:4a:73:fa:94:1f:54:36:5c:74:99:5a:b9:24:2e:
                    c5:05:f4:6c:27:0a:0e:67:36:76:b5:41:2d:89:88:
                    29:08:b0:58:42:87:8e:da:6a:c0:e6:dc:3c:9c:60:
                    a7:d7:4f:4f:5b:67:e0:6f:1a:fb:70:59:2a:e9:4f:
                    19:76:e0:03:44:2c:3b:2b:82:50:7f:ce:1f:a3:4d:
                    03:cd:46:36:c7:70:00:47:fb:fd:39:bb:77:8c:93:
                    a8:6d:08:ec:3b:53:6b:6b:c6:9c:61:de:61:de:68:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D4:7A:DD:DB:98:53:CB:7A:4A:58:38:CB:A3:F2:51:19:60:21:ED
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ea:af:31:81:75:b8:f5:46:f7:ce:b3:56:b1:cb:a4:98:54:
         70:48:01:67:68:7d:47:6f:ae:83:b2:2f:9d:0a:56:7c:08:ef:
         14:6b:65:2e:39:e0:7f:d8:75:67:c2:f4:f2:c5:24:53:43:82:
         57:56:ef:9f:16:62:dc:2f:9e:9f:1d:7e:e7:5f:04:05:31:df:
         d3:1a:49:8f:8a:9b:c7:3c:69:46:d0:c1:3d:18:78:b1:17:0a:
         2d:b2:7b:54:98:77:f8:8f:52:80:61:c6:bb:36:62:df:36:72:
         16:31:30:3d:f4:83:e2:e6:44:9a:fd:5b:11:8d:38:d8:81:a6:
         57:4c:a5:fe:74:21:89:50:97:92:49:fe:e0:ea:74:55:34:98:
         8c:be:f0:4e:8a:f7:71:f4:f4:05:98:00:20:6a:26:9a:28:e6:
         c0:48:0a:50:55:3f:2d:4b:c1:02:65:b2:d7:3f:c9:6e:5a:ea:
         f6:cf:64:16:b7:26:50:38:19:10:75:e7:da:b4:0a:3d:d9:d2:
         fd:31:b1:e9:3a:51:63:04:63:36:90:ee:2e:71:f0:e8:e0:13:
         89:70:f6:c6:b8:5f:f2:d0:f6:94:9a:a0:3d:5e:ac:a2:e4:4f:
         5b:20:3d:7d:c9:0e:30:4f:80:52:3a:a6:d0:5f:ab:79:5a:97:
         2c:cd:d9:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+3kM15Xy1/NjIipJfXu3Q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2
MWEwNDgwHhcNMjQwNTI3MDEwMTExWhcNMjQwNTI4MDEwMTExWjAzMTEwLwYDVQQD
Eyg0MmQ0N2FkZGRiOTg1M2NiN2E0YTU4MzhjYmEzZjI1MTE5NjAyMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Pl7tw2Zum4fXN4QQbhA9OjhDhe
DfTmwETuxyvvAw8ugtUrJfvTdw1fgpJhXr9aBseHI4LE5zWLVfjNfGVwp8sx++9I
Q7iW/+is3iQFEPc+vmCU9Hb+DoOt4ujwaeu9KxgSfRoP2Tu6gZUdsalSr2mwAjTX
8JDj4SeflX4yZbGsnAU0hLJLwu6Q51yzg/cRXcp3gt+xSnP6lB9UNlx0mVq5JC7F
BfRsJwoOZzZ2tUEtiYgpCLBYQoeO2mrA5tw8nGCn109PW2fgbxr7cFkq6U8ZduAD
RCw7K4JQf84fo00DzUY2x3AAR/v9Obt3jJOobQjsO1Nra8acYd5h3mg4gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELUet3bmFPLekpYOMuj8lEZYCHtMB8GA1UdIwQY
MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt
OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx
LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+qvMYF1
uPVG986zVrHLpJhUcEgBZ2h9R2+ug7IvnQpWfAjvFGtlLjngf9h1Z8L08sUkU0OC
V1bvnxZi3C+enx1+518EBTHf0xpJj4qbxzxpRtDBPRh4sRcKLbJ7VJh3+I9SgGHG
uzZi3zZyFjEwPfSD4uZEmv1bEY042IGmV0yl/nQhiVCXkkn+4Op0VTSYjL7wTor3
cfT0BZgAIGommijmwEgKUFU/LUvBAmWy1z/Jblrq9s9kFrcmUDgZEHXn2rQKPdnS
/TGx6TpRYwRjNpDuLnHw6OATiXD2xrhf8tD2lJqgPV6souRPWyA9fckOME+AUjqm
0F+reVqXLM3ZhQ==
-----END CERTIFICATE-----
Generated at Mon May 27 02:58:32 2024 by rpki-client on console-fra.rpki-client.org