Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File:                     3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier:          e+Ni7sIr/oR4GBJYZIMEMXeVc7MC0G9r2E+zdYZxWCU=
Subject key identifier:   0E:13:4F:CD:E2:44:81:1F:DD:F7:4C:76:EA:23:69:C8:2F:8E:9A:19
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer:       /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial:       0190411B8335371B8D7F0462706E44B5BF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number:          0800
Signing time:             Sat 22 Jun 2024 18:00:40 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:40 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:40 +0000
Files and hashes:         1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: Z4YENl7kfvdbkB32yQ+x0/RkkSswnwLq2oEVxBxRymw=)
                          2: yi68ksjZSxftGGKxmFVOJ8JLGIY.roa (hash: q27SVbtD8dV8gGpU8IQIm3xk773/BNVV61YBP2LzWzU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:83:35:37:1b:8d:7f:04:62:70:6e:44:b5:bf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
        Validity
            Not Before: Jun 22 18:00:40 2024 GMT
            Not After : Jun 23 18:00:40 2024 GMT
        Subject: CN=0e134fcde244811fddf74c76ea2369c82f8e9a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:e9:a7:ce:60:af:67:ab:ed:cb:42:d8:03:
                    f8:0d:7a:22:09:6f:89:d6:6d:f6:a5:78:a2:26:59:
                    8d:e8:a2:2e:35:82:ae:af:05:b6:c5:18:4a:94:62:
                    3b:7c:73:8d:c3:d7:92:05:17:9d:48:2c:b1:87:2c:
                    14:b5:5d:4b:dd:d0:6f:27:23:48:1d:a5:bf:a1:1d:
                    bc:a7:53:84:a0:63:63:3b:c5:83:6e:cf:84:87:60:
                    a2:6a:ae:7f:59:00:3d:ab:0e:f0:66:d6:c0:35:df:
                    04:21:c4:d2:2e:0d:52:b2:b5:87:84:5f:21:e5:b8:
                    84:ee:e2:b0:46:5c:4c:7e:10:9e:5f:aa:de:ef:0c:
                    eb:4c:2b:da:91:63:69:45:ea:17:b9:7f:7a:2f:2e:
                    3d:3e:5b:fc:8a:51:95:a7:1b:1a:ac:d6:6e:43:49:
                    b8:b4:dc:10:1c:4d:fe:b7:cb:3f:0f:a0:81:20:a6:
                    bb:3e:e6:bf:33:14:ad:70:34:7c:b0:f7:7e:6b:ae:
                    79:c9:53:9c:14:18:fa:67:96:29:b4:ff:5a:44:bc:
                    ee:f1:05:1d:77:79:25:57:fe:12:3b:f3:1b:1c:d7:
                    ee:50:2b:80:de:bc:ce:f5:17:b1:a9:52:e9:a7:61:
                    7d:ad:15:45:0d:c9:b2:b1:9a:3c:92:66:d7:e7:60:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:13:4F:CD:E2:44:81:1F:DD:F7:4C:76:EA:23:69:C8:2F:8E:9A:19
            X509v3 Authority Key Identifier:
                keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:58:64:2d:68:f4:21:bb:a2:d7:8a:47:fb:97:10:c6:eb:
         9c:1e:96:6a:9c:85:10:79:3c:35:2c:fd:07:87:e0:93:35:e9:
         72:e2:c9:76:fd:d0:b4:c9:bd:86:b4:64:55:3f:ad:af:b3:6c:
         d8:c2:7b:17:d9:0f:3b:15:05:fa:38:b9:cf:9a:c4:72:4f:48:
         e1:5d:ee:b1:dd:52:02:32:3c:f8:cf:02:d6:13:e4:26:08:25:
         82:38:93:85:5f:af:8f:ae:6a:11:c9:49:b8:60:7a:12:12:8f:
         de:5b:f4:de:e3:79:25:68:45:69:54:a2:0b:78:83:23:10:71:
         58:4b:1e:12:4e:7b:36:0a:1e:e9:b9:15:c1:55:dd:45:c8:9f:
         70:be:ec:1f:17:e3:80:24:16:44:2c:70:17:22:d9:e8:a4:c3:
         a4:a1:81:0a:17:1a:88:fc:4d:3c:93:9a:b9:c8:56:cf:5d:42:
         89:bf:7b:4e:67:d7:cf:9a:bf:25:6b:c6:99:cc:85:78:e4:94:
         15:ce:59:28:29:63:01:50:a2:78:47:85:4d:eb:69:8e:a9:d6:
         af:f3:c1:e0:e5:af:41:79:70:c6:4b:86:49:96:80:35:8c:09:
         7e:09:d7:ab:37:05:fa:a9:52:10:ab:66:db:d4:8a:d6:ba:92:
         44:8d:e7:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBG4M1NxuNfwRicG5Etb8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjQwNjIyMTgwMDQwWhcNMjQwNjIzMTgwMDQwWjAzMTEwLwYDVQQD
EygwZTEzNGZjZGUyNDQ4MTFmZGRmNzRjNzZlYTIzNjljODJmOGU5YTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNHpp85gr2er7ctC2AP4DXoiCW+J
1m32pXiiJlmN6KIuNYKurwW2xRhKlGI7fHONw9eSBRedSCyxhywUtV1L3dBvJyNI
HaW/oR28p1OEoGNjO8WDbs+Eh2Ciaq5/WQA9qw7wZtbANd8EIcTSLg1SsrWHhF8h
5biE7uKwRlxMfhCeX6re7wzrTCvakWNpReoXuX96Ly49Plv8ilGVpxsarNZuQ0m4
tNwQHE3+t8s/D6CBIKa7Pua/MxStcDR8sPd+a655yVOcFBj6Z5YptP9aRLzu8QUd
d3klV/4SO/MbHNfuUCuA3rzO9RexqVLpp2F9rRVFDcmysZo8kmbX52BIlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4TT83iRIEf3fdMduojacgvjpoZMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxRYZC1o
9CG7oteKR/uXEMbrnB6WapyFEHk8NSz9B4fgkzXpcuLJdv3QtMm9hrRkVT+tr7Ns
2MJ7F9kPOxUF+ji5z5rEck9I4V3usd1SAjI8+M8C1hPkJgglgjiThV+vj65qEclJ
uGB6EhKP3lv03uN5JWhFaVSiC3iDIxBxWEseEk57Ngoe6bkVwVXdRcifcL7sHxfj
gCQWRCxwFyLZ6KTDpKGBChcaiPxNPJOauchWz11Cib97TmfXz5q/JWvGmcyFeOSU
Fc5ZKCljAVCieEeFTetpjqnWr/PB4OWvQXlwxkuGSZaANYwJfgnXqzcF+qlSEKtm
29SK1rqSRI3nNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:12:52 2024 by rpki-client on console-ams.rpki-client.org