Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File:                     3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier:          ldYa6g+PK1GDc90cINUfeVHqFj9AtY8e8Fpdihr3mt4=
Subject key identifier:   33:F7:E5:08:03:06:D2:55:42:CD:19:65:5D:E5:F2:AD:07:D2:55:B1
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer:       /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial:       01901DECC75624102C79504C791437E7F2BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:54 +0000
Files and hashes:         1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: pySaxIUmKSOrV1kfEv/xSExLaPtw2DNfi+HaZ/TQWNs=)
                          2: GECAzqq5bwWzGfx4L_3apUm9Ges.roa (hash: DDJ415C9tPbsRSmy5fIfXlOsoZG/HSOwPn4d8BjJbCE=)
                          3: iz4TN5hko-cb9gTm6u9gWPEvIEI.roa (hash: lHE7ijTF2TnrDga4O1QGj8fbQnfgkXsQ2Gs/9s5tTYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:c7:56:24:10:2c:79:50:4c:79:14:37:e7:f2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
        Validity
            Not Before: Jun 15 22:02:54 2024 GMT
            Not After : Jun 16 22:02:54 2024 GMT
        Subject: CN=33f7e5080306d25542cd19655de5f2ad07d255b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:fa:74:79:66:17:b3:cc:c2:ce:2e:7e:ad:
                    ad:71:89:2f:47:8d:b3:3a:95:7e:09:76:b7:2d:0e:
                    9c:6c:50:84:b1:33:32:96:9c:8f:37:4c:14:fd:ba:
                    b8:2e:14:22:b9:4d:34:99:30:af:fd:b2:35:37:4e:
                    68:67:a6:a0:c0:60:fd:64:9c:62:70:97:8b:86:83:
                    94:7d:e5:26:92:e7:61:d3:47:d4:27:65:08:1b:0d:
                    46:be:cc:e1:f5:ee:54:ec:a4:08:9d:d7:aa:46:f6:
                    4f:b6:6d:9d:a7:5d:84:ae:e8:0a:83:66:3b:ad:3b:
                    36:a5:ea:b7:c7:7b:4b:47:4a:55:e3:fb:c7:33:07:
                    d3:24:75:8f:8e:a9:02:90:b1:74:a0:91:e6:9c:bf:
                    40:ba:18:ed:b5:a9:99:bc:65:d9:2b:d8:ba:3e:11:
                    27:3f:ea:a8:8b:cf:24:60:b6:84:ac:0f:07:e3:50:
                    5b:c8:fa:dc:aa:28:2c:f4:63:e7:fd:50:33:2f:52:
                    2b:08:f5:3f:07:be:d1:d4:88:e3:a5:02:c0:23:9b:
                    02:4c:5e:ee:09:20:80:08:99:ba:d9:70:b7:ff:7c:
                    8f:7b:f9:17:12:8c:25:e8:6c:a8:ae:92:66:42:84:
                    f0:11:6a:e9:7f:22:cf:63:9f:16:1e:0c:ae:78:c3:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F7:E5:08:03:06:D2:55:42:CD:19:65:5D:E5:F2:AD:07:D2:55:B1
            X509v3 Authority Key Identifier:
                keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f3:3f:56:8e:8d:58:eb:25:58:4e:76:7b:55:d6:18:a2:4a:
         bd:d0:03:e1:0c:e8:78:dd:87:b3:27:a9:76:e9:ec:ef:6a:c4:
         cd:4b:24:93:52:56:a0:fd:5b:fc:b5:cf:8d:42:87:58:95:38:
         7f:a7:e1:22:38:cc:15:29:c6:13:c5:c3:7f:4f:cc:a0:64:eb:
         3f:3b:b2:05:b3:80:80:aa:57:75:8c:bf:f9:f7:9e:6c:59:9e:
         90:72:dd:e7:03:0c:6d:22:5b:81:78:12:c9:70:46:a2:44:1d:
         95:1a:95:6f:d1:87:ec:94:d9:28:69:eb:46:34:6c:b9:cc:84:
         59:42:ac:c7:92:f5:59:58:1f:88:ce:5f:c2:78:2d:c7:11:32:
         f3:60:be:0a:1b:5e:29:7b:ec:b0:7c:40:3e:89:9b:05:5f:f6:
         1d:dd:44:2d:f1:8c:fb:2c:42:ad:c1:f4:33:b1:10:d8:6d:3c:
         63:a0:10:67:3f:cb:f3:19:dd:39:25:da:f0:c7:35:0b:9d:0f:
         dd:32:71:55:ac:02:74:08:22:25:01:c4:fd:fe:21:9e:48:aa:
         5e:98:3b:b3:3b:ce:77:14:63:34:f7:8c:eb:b4:c4:e2:1c:38:
         72:5c:30:97:92:2c:1f:1f:b6:5b:8e:d2:0b:6c:06:52:f0:52:
         f1:b0:82:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7MdWJBAseVBMeRQ35/K/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjQwNjE1MjIwMjU0WhcNMjQwNjE2MjIwMjU0WjAzMTEwLwYDVQQD
EygzM2Y3ZTUwODAzMDZkMjU1NDJjZDE5NjU1ZGU1ZjJhZDA3ZDI1NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lP6dHlmF7PMws4ufq2tcYkvR42z
OpV+CXa3LQ6cbFCEsTMylpyPN0wU/bq4LhQiuU00mTCv/bI1N05oZ6agwGD9ZJxi
cJeLhoOUfeUmkudh00fUJ2UIGw1Gvszh9e5U7KQIndeqRvZPtm2dp12ErugKg2Y7
rTs2peq3x3tLR0pV4/vHMwfTJHWPjqkCkLF0oJHmnL9AuhjttamZvGXZK9i6PhEn
P+qoi88kYLaErA8H41BbyPrcqigs9GPn/VAzL1IrCPU/B77R1IjjpQLAI5sCTF7u
CSCACJm62XC3/3yPe/kXEowl6GyorpJmQoTwEWrpfyLPY58WHgyueMNNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP35QgDBtJVQs0ZZV3l8q0H0lWxMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvM/Vo6N
WOslWE52e1XWGKJKvdAD4QzoeN2Hsyepduns72rEzUskk1JWoP1b/LXPjUKHWJU4
f6fhIjjMFSnGE8XDf0/MoGTrPzuyBbOAgKpXdYy/+feebFmekHLd5wMMbSJbgXgS
yXBGokQdlRqVb9GH7JTZKGnrRjRsucyEWUKsx5L1WVgfiM5fwngtxxEy82C+Chte
KXvssHxAPombBV/2Hd1ELfGM+yxCrcH0M7EQ2G08Y6AQZz/L8xndOSXa8Mc1C50P
3TJxVawCdAgiJQHE/f4hnkiqXpg7szvOdxRjNPeM67TE4hw4clwwl5IsHx+2W47S
C2wGUvBS8bCCZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:50:30 2024 by rpki-client on console-fra.rpki-client.org