Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
File:                     8l_UfYNvym90HKo4I5N_S7HxspQ.mft (raw, json)
Hash identifier:          6Dd9v78mNGszFvkILBMfCpirZ9hJjioK5k2l9zkcbi0=
Subject key identifier:   A3:C1:15:78:F6:B0:A7:30:26:E8:27:2C:A5:46:00:18:73:11:F3:FC
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Certificate issuer:       /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial:       019040AF23B4C85338528475194398CF19B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
Manifest number:          03C3
Signing time:             Sat 22 Jun 2024 16:02:18 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:18 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:18 +0000
Files and hashes:         1: 4Pz2Po1CJtFKP-ckISZDXoLJaPs.roa (hash: VtsQKFqbYWVvkscDWfGuL6Guv96ch//LFCXPi9/tkL8=)
                          2: 8l_UfYNvym90HKo4I5N_S7HxspQ.crl (hash: zj5Bxtm9NT75I1BQZdyjQgQkKWAKv3N2NvioplknOOQ=)
                          3: OZwMCfOFEZ9Ol0XWZKVEvpkCa8o.roa (hash: fin6P57EwUPuWQdyHM4rF7D7XdEJfZo9PAl8h6dB/U8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:23:b4:c8:53:38:52:84:75:19:43:98:cf:19:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
        Validity
            Not Before: Jun 22 16:02:18 2024 GMT
            Not After : Jun 23 16:02:18 2024 GMT
        Subject: CN=a3c11578f6b0a73026e8272ca54600187311f3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:78:de:04:c1:1a:4c:60:44:55:0e:fa:6e:
                    0e:d6:79:fb:5b:d0:ec:63:dd:bd:7d:47:81:46:31:
                    1c:2c:2d:87:26:7e:8b:a0:ea:72:d3:7b:46:64:c0:
                    cc:ff:1b:34:7e:cc:28:2f:09:ac:ed:76:12:1b:c0:
                    32:7b:b4:8a:66:2d:8b:dc:3d:53:52:b1:06:f3:2f:
                    f5:29:4e:0f:72:90:46:1e:e6:a5:51:e5:df:28:77:
                    cb:4d:f3:86:94:e4:1f:bb:6f:72:1e:01:0f:3a:d9:
                    4d:bc:8e:18:c1:cb:90:3f:af:f6:f4:55:e2:b8:b6:
                    72:73:b5:e6:74:36:b7:01:cf:1b:4b:37:70:ae:5c:
                    a3:95:c8:4e:63:a0:e8:31:22:da:ba:e1:25:46:4a:
                    c6:77:2d:7b:47:1f:ec:05:4d:48:62:60:81:47:92:
                    8b:e0:b0:a5:57:36:54:7a:9b:6c:19:5e:2b:1d:bd:
                    ee:e5:3e:79:60:28:f6:6e:eb:ea:d9:38:3e:90:b0:
                    09:7b:d0:d8:f9:30:4f:ad:74:0a:5b:e0:60:67:81:
                    74:6b:4c:d9:fc:fc:f7:a9:f3:c0:71:51:df:98:a2:
                    d1:ff:d6:af:60:d0:f0:66:1a:b7:ab:74:43:3a:bd:
                    96:7f:15:48:6d:63:22:10:d7:64:7a:31:85:31:62:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:15:78:F6:B0:A7:30:26:E8:27:2C:A5:46:00:18:73:11:F3:FC
            X509v3 Authority Key Identifier:
                keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a9:fc:3c:cc:b6:20:2a:f2:18:e7:2b:a0:30:b4:d8:84:2b:
         68:6f:56:02:a1:02:24:8c:a7:dd:da:2e:5c:c4:56:29:cc:4a:
         69:ee:1d:e1:aa:f0:63:e0:53:a1:77:52:86:05:8d:05:68:bd:
         23:9b:a0:1b:6b:59:0f:b5:b1:6c:40:66:3a:8b:22:e4:c5:10:
         51:f5:5a:cb:1d:26:f1:ce:ad:64:14:bf:43:4c:00:73:e2:6c:
         17:ab:5b:33:c5:cf:04:b0:7a:1f:a4:f8:6c:d6:2e:cb:87:7e:
         99:32:83:24:c7:d5:a7:d9:e7:1c:14:d2:a7:81:83:df:7d:72:
         21:4b:d2:24:de:ca:53:0f:f2:63:d2:ee:c6:f5:74:9f:24:ad:
         8b:58:5a:ce:89:d8:c9:74:10:4a:99:35:dd:ca:d4:5e:ed:f0:
         7b:96:8b:03:75:5c:64:9e:b3:b2:d9:54:d5:7c:df:0d:7e:50:
         b3:c4:41:d8:45:0f:f4:1c:8e:f2:35:04:da:a0:3f:53:85:db:
         60:16:0f:84:fb:fd:15:71:32:a4:dd:f9:be:dd:88:e8:08:be:
         ec:5d:56:6c:2a:8e:8b:d5:54:cf:54:81:76:15:a0:ee:8d:fa:
         90:83:0d:70:bf:4d:54:34:8b:bf:30:cd:5b:2d:4b:e9:a5:7f:
         c3:40:2c:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBAryO0yFM4UoR1GUOYzxm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWZkNDdkODM2ZmNhNmY3NDFjYWEzODIzOTM3ZjRiYjFm
MWIyOTQwHhcNMjQwNjIyMTYwMjE4WhcNMjQwNjIzMTYwMjE4WjAzMTEwLwYDVQQD
EyhhM2MxMTU3OGY2YjBhNzMwMjZlODI3MmNhNTQ2MDAxODczMTFmM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorR43gTBGkxgRFUO+m4O1nn7W9Ds
Y929fUeBRjEcLC2HJn6LoOpy03tGZMDM/xs0fswoLwms7XYSG8Aye7SKZi2L3D1T
UrEG8y/1KU4PcpBGHualUeXfKHfLTfOGlOQfu29yHgEPOtlNvI4YwcuQP6/29FXi
uLZyc7XmdDa3Ac8bSzdwrlyjlchOY6DoMSLauuElRkrGdy17Rx/sBU1IYmCBR5KL
4LClVzZUeptsGV4rHb3u5T55YCj2buvq2Tg+kLAJe9DY+TBPrXQKW+BgZ4F0a0zZ
/Pz3qfPAcVHfmKLR/9avYNDwZhq3q3RDOr2WfxVIbWMiENdkejGFMWJNzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPBFXj2sKcwJugnLKVGABhzEfP8MB8GA1UdIwQY
MBaAFPJf1H2Db8pvdByqOCOTf0ux8bKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMt
YmI3YTQzZTU3ZjM4LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMtYmI3YTQzZTU3ZjM4
LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPan8PMy2
ICryGOcroDC02IQraG9WAqECJIyn3douXMRWKcxKae4d4arwY+BToXdShgWNBWi9
I5ugG2tZD7WxbEBmOosi5MUQUfVayx0m8c6tZBS/Q0wAc+JsF6tbM8XPBLB6H6T4
bNYuy4d+mTKDJMfVp9nnHBTSp4GD331yIUvSJN7KUw/yY9LuxvV0nySti1hazonY
yXQQSpk13crUXu3we5aLA3VcZJ6zstlU1XzfDX5Qs8RB2EUP9ByO8jUE2qA/U4Xb
YBYPhPv9FXEypN35vt2I6Ai+7F1WbCqOi9VUz1SBdhWg7o36kIMNcL9NVDSLvzDN
Wy1L6aV/w0AsMg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org