Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File:                     P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier:          OS6txus2tGsKI1hfoSgmbj+yw/CqYbW5FUE4l3o8mnY=
Subject key identifier:   82:E8:68:EA:76:19:79:3D:0C:16:E5:64:60:25:09:80:35:54:7F:A3
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer:       /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial:       01903396D02404682B51BB0D2F9FB05B02CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number:          11D0
Signing time:             Thu 20 Jun 2024 03:00:39 +0000
Manifest this update:     Thu 20 Jun 2024 03:00:39 +0000
Manifest next update:     Fri 21 Jun 2024 03:00:39 +0000
Files and hashes:         1: D6hfBg5pxOZD5aiTx0Dk3MctbuI.roa (hash: HtJ3YUvNNqcp7wZruk3T3K3BD/ZipBGgd+nsH2lL9Kc=)
                          2: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: e8MzaFXe9APUpO/I+xp3YUT0VzmwD2v0qdEWQ8Jox8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:96:d0:24:04:68:2b:51:bb:0d:2f:9f:b0:5b:02:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
        Validity
            Not Before: Jun 20 03:00:39 2024 GMT
            Not After : Jun 21 03:00:39 2024 GMT
        Subject: CN=82e868ea7619793d0c16e5646025098035547fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:13:63:c3:8b:89:aa:c2:42:9b:1c:8a:fc:
                    8c:f2:67:e7:77:3e:31:5e:02:e1:44:f5:ee:8a:33:
                    16:66:36:80:03:e9:37:2d:19:0e:3b:e3:83:2f:4b:
                    4f:9f:f6:00:d7:13:41:5b:78:97:22:ee:a0:5f:82:
                    4a:6c:c2:aa:a3:fb:5a:c3:c2:ff:b8:60:93:ef:99:
                    eb:da:97:84:ae:e1:a6:4c:7c:83:1d:86:78:9a:e9:
                    f6:8d:f3:ed:6e:b1:bb:1f:bc:51:da:5d:12:e4:f1:
                    03:c3:f8:c8:2a:fd:c5:48:3a:24:7a:0a:4c:f6:aa:
                    b8:17:35:57:58:2b:ca:b4:09:9c:af:de:98:76:e7:
                    5b:60:0b:c6:d5:be:98:29:40:21:7c:b8:51:57:7d:
                    b4:5c:6d:5c:20:72:64:66:c8:c1:10:2a:34:fb:4f:
                    83:bd:71:95:bc:d2:46:14:7e:01:db:ea:f7:8f:2c:
                    fa:10:26:d2:b3:5b:a7:bb:1e:b7:66:c3:d7:85:2b:
                    6f:b6:d3:59:61:77:e1:82:47:a1:13:7b:b3:48:af:
                    eb:da:bf:87:27:65:62:8e:5c:be:eb:80:3d:5a:1b:
                    be:ac:39:b9:eb:24:af:98:01:77:5a:d3:e5:fb:9a:
                    48:08:5c:ea:90:01:b3:25:ba:71:38:ad:2a:b9:f5:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:68:EA:76:19:79:3D:0C:16:E5:64:60:25:09:80:35:54:7F:A3
            X509v3 Authority Key Identifier:
                keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:d7:21:2e:e0:02:da:e1:a9:ed:3f:ca:6b:48:c0:ef:a6:
         18:d3:cb:99:9a:98:31:c9:7c:d1:9a:67:ff:f5:54:da:3e:50:
         6f:b0:04:af:4c:66:95:35:4b:0d:13:a7:8d:17:e8:01:b5:04:
         db:c7:54:a7:33:d8:51:99:82:65:9f:5b:5d:5b:d2:18:ce:57:
         14:67:d0:10:ba:55:19:05:5f:0a:4c:a5:97:38:27:94:b3:3c:
         31:55:79:e1:0e:f1:bf:16:7f:a6:8a:47:81:09:0e:76:c0:9e:
         45:ed:7b:b9:4e:9b:9e:3e:ee:47:b5:79:05:cd:f8:6b:69:fd:
         73:c9:64:2b:dd:87:28:e8:b5:0c:a7:c7:e6:4b:62:4a:de:99:
         05:7b:5d:05:8b:a7:09:b4:39:40:8b:f9:2d:e1:f8:27:3b:70:
         20:af:f3:45:eb:3f:92:44:51:ff:4f:d3:9d:77:d4:76:63:ae:
         e1:a8:26:80:9a:74:f4:92:21:87:68:55:04:7a:5d:6e:03:26:
         b0:58:39:9f:b2:ca:0d:0e:4d:7c:ef:af:24:50:60:c1:03:c5:
         44:f8:5b:f4:af:c2:02:d9:45:93:57:9b:24:7d:12:96:e0:b2:
         36:aa:f9:98:0b:5e:b7:5b:92:17:3f:c5:83:30:92:d4:ee:a6:
         d7:40:6e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAzltAkBGgrUbsNL5+wWwLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNDdmNzU3NTc0MTNjY2MxNzJkM2QxYjgyNmZhZTVhZTkz
ODVhMWIwHhcNMjQwNjIwMDMwMDM5WhcNMjQwNjIxMDMwMDM5WjAzMTEwLwYDVQQD
Eyg4MmU4NjhlYTc2MTk3OTNkMGMxNmU1NjQ2MDI1MDk4MDM1NTQ3ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GYTY8OLiarCQpscivyM8mfndz4x
XgLhRPXuijMWZjaAA+k3LRkOO+ODL0tPn/YA1xNBW3iXIu6gX4JKbMKqo/taw8L/
uGCT75nr2peEruGmTHyDHYZ4mun2jfPtbrG7H7xR2l0S5PEDw/jIKv3FSDokegpM
9qq4FzVXWCvKtAmcr96YdudbYAvG1b6YKUAhfLhRV320XG1cIHJkZsjBECo0+0+D
vXGVvNJGFH4B2+r3jyz6ECbSs1unux63ZsPXhStvttNZYXfhgkehE3uzSK/r2r+H
J2Vijly+64A9Whu+rDm56ySvmAF3WtPl+5pICFzqkAGzJbpxOK0qufWyCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILoaOp2GXk9DBblZGAlCYA1VH+jMB8GA1UdIwQY
MBaAFD9H91dXQTzMFy09G4JvrlrpOFobMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85Zjg4ZDgtOGE2ZC00YzVjLWIxOTQt
ZTE1NWFjYzZiODRlLzEvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85Zjg4ZDgtOGE2ZC00YzVjLWIxOTQtZTE1NWFjYzZiODRl
LzEvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYbXIS7g
Atrhqe0/ymtIwO+mGNPLmZqYMcl80Zpn//VU2j5Qb7AEr0xmlTVLDROnjRfoAbUE
28dUpzPYUZmCZZ9bXVvSGM5XFGfQELpVGQVfCkyllzgnlLM8MVV54Q7xvxZ/popH
gQkOdsCeRe17uU6bnj7uR7V5Bc34a2n9c8lkK92HKOi1DKfH5ktiSt6ZBXtdBYun
CbQ5QIv5LeH4JztwIK/zRes/kkRR/0/TnXfUdmOu4agmgJp09JIhh2hVBHpdbgMm
sFg5n7LKDQ5NfO+vJFBgwQPFRPhb9K/CAtlFk1ebJH0SluCyNqr5mAtet1uSFz/F
gzCS1O6m10Bu7A==
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:38:51 2024 by rpki-client on console-fra.rpki-client.org