Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File:                     3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier:          MxAvfQWWrg5G5HW6BY5x7qJhJw+iKnuYHv+ZUXWahsg=
Subject key identifier:   61:5F:81:0C:94:0C:95:A3:93:DC:D9:FA:2F:0F:51:78:47:78:34:0A
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer:       /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial:       01901DED2E5D89C81673724311021A236E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:21 +0000
Files and hashes:         1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: 2HmeFAt/yxmlH47/Hs2/iPikyXLiJnR3HAoVmGNSUzU=)
                          2: 5f0oPfTfIGtDGawi3IgDQWx9M5I.roa (hash: DFnNjvc0ebYptTwzjfIIvRtWp3C4SKNIhXjGXObdzm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:2e:5d:89:c8:16:73:72:43:11:02:1a:23:6e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
        Validity
            Not Before: Jun 15 22:03:21 2024 GMT
            Not After : Jun 16 22:03:21 2024 GMT
        Subject: CN=615f810c940c95a393dcd9fa2f0f51784778340a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:94:40:40:a3:83:4a:bb:a6:58:cf:58:76:
                    52:27:d3:69:82:36:48:10:8c:6c:4a:94:63:4d:3c:
                    7a:60:51:0c:4d:2a:ea:93:15:a6:75:79:bf:e4:79:
                    19:1a:42:aa:ac:65:57:50:d5:28:e6:8d:9f:36:51:
                    1e:ce:bd:5a:40:bc:7e:c4:e9:04:84:b1:79:4f:c7:
                    b6:ca:83:e9:ee:4f:7f:c5:dd:14:44:e2:ff:7f:3f:
                    ae:ad:44:c8:71:09:a6:e0:db:42:c2:b0:eb:b7:3d:
                    37:e1:da:68:60:85:69:b8:9b:5f:0a:f8:28:a0:9e:
                    72:b2:ee:ba:c7:0d:b6:55:9e:66:1b:56:7f:d9:6d:
                    b6:27:70:9e:af:c0:17:ec:ae:66:54:8f:31:29:48:
                    bf:59:1e:c7:89:95:de:88:e8:bf:ee:11:f4:e3:90:
                    a2:9c:0d:cd:5c:36:6c:1a:2e:09:8c:26:af:23:fe:
                    d8:8d:38:37:40:98:8a:f4:88:49:51:04:b6:57:0c:
                    91:ce:01:8f:2d:89:6e:df:b6:a1:2f:81:1c:80:8f:
                    80:25:98:73:dd:3c:f4:a8:c2:e0:2d:ae:f9:50:33:
                    63:bf:60:04:f8:dc:cb:1e:1a:fd:03:84:32:27:9a:
                    3e:a1:c0:1e:22:a7:22:2a:f7:ca:26:c7:45:57:1f:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:81:0C:94:0C:95:A3:93:DC:D9:FA:2F:0F:51:78:47:78:34:0A
            X509v3 Authority Key Identifier:
                keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:30:8a:6b:f3:73:84:1a:2a:37:1f:cf:30:08:a4:e5:84:
         27:96:25:ca:ef:e1:5e:ce:b6:2c:d8:a6:bc:81:40:dd:1d:3e:
         bd:8f:4b:68:36:2f:e8:82:ee:f0:8d:ff:96:98:77:ce:ad:fd:
         b6:3e:7a:69:87:9e:e7:61:0f:8b:27:e3:3f:1a:29:51:f6:7f:
         e0:5d:98:4b:72:6c:29:45:94:85:0e:da:e8:07:d8:21:85:cb:
         62:d3:3e:84:51:8a:75:6e:0c:b0:0c:cd:87:c6:58:22:f1:2f:
         7a:e9:78:19:82:d2:54:81:9e:a7:07:50:16:06:43:0b:f9:aa:
         3d:e2:81:b0:68:4b:2a:89:db:41:8b:8d:4d:83:8f:0e:e2:05:
         f9:12:91:2a:f0:99:80:6b:f8:8f:6b:30:0f:66:8a:44:0b:f8:
         79:0f:79:d6:e0:95:91:70:db:f4:05:61:66:2b:28:bc:18:12:
         f9:7d:7b:6f:5c:91:8b:bb:d1:ce:f4:f3:fb:17:78:0e:de:b5:
         a5:6d:c7:86:45:cc:95:00:ec:16:3b:41:a2:e9:14:e7:83:0d:
         72:6e:69:42:ed:22:92:2e:88:50:e8:9c:49:7c:95:07:c0:d3:
         12:88:5d:96:67:48:0e:55:0e:13:7b:74:78:fc:e2:79:48:9c:
         02:fa:80:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7S5dicgWc3JDEQIaI25XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk
NjExMjAwHhcNMjQwNjE1MjIwMzIxWhcNMjQwNjE2MjIwMzIxWjAzMTEwLwYDVQQD
Eyg2MTVmODEwYzk0MGM5NWEzOTNkY2Q5ZmEyZjBmNTE3ODQ3NzgzNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nyUQECjg0q7pljPWHZSJ9NpgjZI
EIxsSpRjTTx6YFEMTSrqkxWmdXm/5HkZGkKqrGVXUNUo5o2fNlEezr1aQLx+xOkE
hLF5T8e2yoPp7k9/xd0UROL/fz+urUTIcQmm4NtCwrDrtz034dpoYIVpuJtfCvgo
oJ5ysu66xw22VZ5mG1Z/2W22J3Cer8AX7K5mVI8xKUi/WR7HiZXeiOi/7hH045Ci
nA3NXDZsGi4JjCavI/7YjTg3QJiK9IhJUQS2VwyRzgGPLYlu37ahL4EcgI+AJZhz
3Tz0qMLgLa75UDNjv2AE+NzLHhr9A4QyJ5o+ocAeIqciKvfKJsdFVx9h3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFfgQyUDJWjk9zZ+i8PUXhHeDQKMB8GA1UdIwQY
MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt
YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4
LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrkwimvz
c4QaKjcfzzAIpOWEJ5Ylyu/hXs62LNimvIFA3R0+vY9LaDYv6ILu8I3/lph3zq39
tj56aYee52EPiyfjPxopUfZ/4F2YS3JsKUWUhQ7a6AfYIYXLYtM+hFGKdW4MsAzN
h8ZYIvEveul4GYLSVIGepwdQFgZDC/mqPeKBsGhLKonbQYuNTYOPDuIF+RKRKvCZ
gGv4j2swD2aKRAv4eQ951uCVkXDb9AVhZisovBgS+X17b1yRi7vRzvTz+xd4Dt61
pW3HhkXMlQDsFjtBoukU54MNcm5pQu0iki6IUOicSXyVB8DTEohdlmdIDlUOE3t0
ePzieUicAvqAdw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:25 2024 by rpki-client on console-fra.rpki-client.org