Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
File:                     3IR1bcdywGSDJJqYejsbxuYF6DU.mft (raw, json)
Hash identifier:          ZwXehWFRTP0eFe80GKdCyRwb+W78uxd+0LhstNS0Xn4=
Subject key identifier:   28:5E:D9:82:22:F1:D2:F2:2A:30:7F:CA:D1:49:BD:96:2F:A4:EE:A5
Authority key identifier: DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
Certificate issuer:       /CN=dc84756dc772c06483249a987a3b1bc6e605e835
Certificate serial:       01901EC700727CD6A15EBA7251ED1BC34C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 02:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:16 +0000
Files and hashes:         1: 3IR1bcdywGSDJJqYejsbxuYF6DU.crl (hash: m8AFsGTd5tmTBxALC6tTmKLQc2fUQ+/qw3aAVXkEw8A=)
                          2: rq39Cxcjv22zN8qaanrTd64xr4o.roa (hash: NTXCeYvqcRQumTAQPPOUf3vxEbPuLjQPCRtTzhXnJ3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:00:72:7c:d6:a1:5e:ba:72:51:ed:1b:c3:4c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc84756dc772c06483249a987a3b1bc6e605e835
        Validity
            Not Before: Jun 16 02:01:16 2024 GMT
            Not After : Jun 17 02:01:16 2024 GMT
        Subject: CN=285ed98222f1d2f22a307fcad149bd962fa4eea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:63:25:54:89:32:37:35:da:c0:b1:47:63:e6:
                    5b:5e:3c:b8:c2:33:27:2b:8a:ee:15:de:c1:ab:28:
                    74:2c:8e:2d:9d:17:8f:91:8f:fc:13:92:64:fc:08:
                    ed:36:c8:43:0d:9a:1a:4d:b3:2c:6c:d8:5b:44:ca:
                    bf:6f:23:98:9a:b1:a5:16:21:65:bc:4f:e8:e4:35:
                    69:42:fe:b8:fc:3a:d5:b2:af:d5:63:7d:08:ff:29:
                    e4:5b:7b:28:68:5f:ad:75:9b:69:6d:1d:82:7c:02:
                    96:02:41:70:f2:62:91:40:c1:bb:68:13:46:39:eb:
                    3d:04:e8:81:42:7c:23:c9:f7:0f:6c:5f:9b:e2:e6:
                    77:97:51:7c:90:4c:a2:9e:f8:61:ab:81:45:b9:ba:
                    3b:d7:bf:34:24:a2:7c:0b:7f:be:b5:33:e0:3f:4d:
                    10:2a:5b:40:0a:1c:18:c3:e4:66:c8:5d:52:f0:76:
                    d6:47:81:46:03:93:53:2f:92:49:92:b8:71:a3:8d:
                    3b:8b:37:48:59:24:71:6f:f2:8d:7a:3d:cd:a6:35:
                    d0:5c:5e:b3:b1:86:f8:7e:2a:68:f0:5c:75:f3:b2:
                    44:9e:0d:0f:0b:67:07:7d:1b:1a:9a:88:be:65:e9:
                    2f:51:12:22:03:c5:39:7d:c2:3a:f8:f8:58:8c:1e:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:D9:82:22:F1:D2:F2:2A:30:7F:CA:D1:49:BD:96:2F:A4:EE:A5
            X509v3 Authority Key Identifier:
                keyid:DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:ba:dd:f0:47:bd:c5:83:2d:df:af:8f:80:d4:4f:8a:ba:
         e1:a9:c3:24:32:09:50:d4:6c:e1:c6:fa:cb:e0:36:c1:ab:e7:
         53:50:78:02:53:39:22:ae:b4:cd:25:9b:a9:fd:63:ca:29:8d:
         05:3b:f8:c2:bf:bc:3d:3e:80:c6:62:8f:42:a6:3c:e9:5b:ae:
         77:63:15:e7:40:c5:a0:ba:19:5f:b3:2a:35:81:a5:08:b0:cd:
         79:25:0a:55:3d:32:af:41:60:cb:35:21:d1:6b:84:6e:fa:aa:
         90:05:59:06:71:cf:a3:fe:50:aa:3d:3c:b3:79:f1:32:ec:ba:
         c0:db:60:8e:01:ac:fd:e2:df:ef:71:20:0a:0d:4a:dc:b0:6d:
         6a:53:87:34:f9:f3:f5:8f:b8:35:70:15:7c:79:9c:26:22:5f:
         74:12:49:29:9d:2b:46:63:9c:e9:24:38:9f:0f:1f:20:c6:2b:
         2e:1d:49:46:be:4c:e4:bb:bf:2a:24:7e:4a:3c:3d:bf:69:61:
         36:05:8c:0c:98:cd:59:60:89:f6:64:d9:00:12:2f:b8:26:19:
         4b:f9:98:06:a9:3f:7a:ea:e4:5c:59:c2:18:25:d2:a7:4a:82:
         46:60:d9:25:fe:90:55:f9:69:60:6f:b9:d7:30:e7:67:9e:ce:
         85:93:64:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexwByfNahXrpyUe0bw0xhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODQ3NTZkYzc3MmMwNjQ4MzI0OWE5ODdhM2IxYmM2ZTYw
NWU4MzUwHhcNMjQwNjE2MDIwMTE2WhcNMjQwNjE3MDIwMTE2WjAzMTEwLwYDVQQD
EygyODVlZDk4MjIyZjFkMmYyMmEzMDdmY2FkMTQ5YmQ5NjJmYTRlZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mMlVIkyNzXawLFHY+ZbXjy4wjMn
K4ruFd7Bqyh0LI4tnRePkY/8E5Jk/AjtNshDDZoaTbMsbNhbRMq/byOYmrGlFiFl
vE/o5DVpQv64/DrVsq/VY30I/ynkW3soaF+tdZtpbR2CfAKWAkFw8mKRQMG7aBNG
Oes9BOiBQnwjyfcPbF+b4uZ3l1F8kEyinvhhq4FFubo71780JKJ8C3++tTPgP00Q
KltAChwYw+RmyF1S8HbWR4FGA5NTL5JJkrhxo407izdIWSRxb/KNej3NpjXQXF6z
sYb4fipo8Fx187JEng0PC2cHfRsamoi+ZekvURIiA8U5fcI6+PhYjB4LjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChe2YIi8dLyKjB/ytFJvZYvpO6lMB8GA1UdIwQY
MBaAFNyEdW3HcsBkgySamHo7G8bmBeg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lSMWJjZHl3R1NESkpxWWVqc2J4dVlGNkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mZGQ5ZWQtNzE3Yy00NjBkLTgxYTMt
NGNkOTljZDVmYjFhLzEvM0lSMWJjZHl3R1NESkpxWWVqc2J4dVlGNkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mZGQ5ZWQtNzE3Yy00NjBkLTgxYTMtNGNkOTljZDVmYjFh
LzEvM0lSMWJjZHl3R1NESkpxWWVqc2J4dVlGNkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKS63fBH
vcWDLd+vj4DUT4q64anDJDIJUNRs4cb6y+A2wavnU1B4AlM5Iq60zSWbqf1jyimN
BTv4wr+8PT6AxmKPQqY86Vuud2MV50DFoLoZX7MqNYGlCLDNeSUKVT0yr0FgyzUh
0WuEbvqqkAVZBnHPo/5Qqj08s3nxMuy6wNtgjgGs/eLf73EgCg1K3LBtalOHNPnz
9Y+4NXAVfHmcJiJfdBJJKZ0rRmOc6SQ4nw8fIMYrLh1JRr5M5Lu/KiR+Sjw9v2lh
NgWMDJjNWWCJ9mTZABIvuCYZS/mYBqk/eurkXFnCGCXSp0qCRmDZJf6QVflpYG+5
1zDnZ57OhZNkpw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:30 2024 by rpki-client on console-ams.rpki-client.org