Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File:                     P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier:          Gqe30YLiKRp6VdY/O62LlQQTKMNAq8HKZf/lNGJFlfY=
Subject key identifier:   BA:34:85:2C:60:69:A1:DD:67:EE:3B:73:C5:49:05:D8:2F:04:48:D8
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer:       /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial:       01901C6A7A2A70BA281A53768C233F671ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 15:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:58 +0000
Files and hashes:         1: D6hfBg5pxOZD5aiTx0Dk3MctbuI.roa (hash: HtJ3YUvNNqcp7wZruk3T3K3BD/ZipBGgd+nsH2lL9Kc=)
                          2: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: XdvIsmwdvm7qtcBjYSBPyjffZeYxjVRlk67YcFS5NVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:7a:2a:70:ba:28:1a:53:76:8c:23:3f:67:1a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
        Validity
            Not Before: Jun 15 15:00:58 2024 GMT
            Not After : Jun 16 15:00:58 2024 GMT
        Subject: CN=ba34852c6069a1dd67ee3b73c54905d82f0448d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:f2:85:04:61:7e:43:67:e4:7f:2b:d3:74:
                    a0:ef:d0:be:71:5c:9e:16:16:f7:e2:dc:c0:9c:44:
                    bd:1d:9d:9c:3f:3a:d0:7e:6e:0d:e9:62:d2:8c:3a:
                    82:c6:01:05:4a:05:f4:fc:3c:db:50:1d:71:e3:a7:
                    81:50:8a:86:1a:42:d4:73:8b:9e:15:fa:ae:7c:dd:
                    52:17:4b:a1:e4:e9:1a:11:57:4f:ae:0e:3f:a5:49:
                    23:a7:c0:61:91:c8:b0:c9:59:99:ff:41:c7:61:5d:
                    89:c2:54:20:84:5c:ae:49:f1:3e:ed:6a:20:7f:1c:
                    fd:a3:6b:cf:d6:38:45:84:21:c4:ad:53:9d:67:69:
                    d9:2b:9e:14:ea:96:5a:f1:e0:ef:63:e9:fa:71:c5:
                    9e:2c:a3:66:3e:86:15:7f:fc:80:a1:3d:3a:18:a9:
                    65:b7:22:29:f2:dd:0b:00:ec:2b:b4:59:4d:ed:4c:
                    a6:70:71:d5:c4:3a:a7:99:e8:1c:6c:c2:1a:af:e4:
                    06:88:2e:5b:cb:ff:db:cb:f3:22:27:21:19:cc:cc:
                    3d:8c:4a:9d:24:de:b8:75:d2:88:78:2d:a2:cb:c5:
                    d6:81:68:2e:79:8b:3a:3e:ea:16:df:2e:3b:9b:07:
                    b4:56:46:50:ff:6c:15:ef:a3:89:3b:95:39:9b:08:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:34:85:2C:60:69:A1:DD:67:EE:3B:73:C5:49:05:D8:2F:04:48:D8
            X509v3 Authority Key Identifier:
                keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:df:21:4b:ef:ce:6c:b9:fa:b1:33:bc:10:5b:1d:b1:97:79:
         e4:1a:ba:b5:31:a8:f3:e7:9c:96:28:04:ea:08:0c:36:fe:a6:
         2e:9a:66:9e:04:01:ad:dc:b8:5f:43:1c:d7:f5:e5:59:d1:83:
         a5:05:8a:9d:3c:72:d6:45:29:85:75:69:74:a0:46:14:2b:e8:
         f0:9e:f3:82:33:f4:65:7c:9d:0a:de:4c:6a:f0:b8:85:77:e6:
         44:f7:c7:8f:dd:eb:b7:5b:94:49:af:0a:db:87:0a:22:95:dd:
         1a:f3:b3:d3:a7:61:08:7f:51:55:d4:17:6a:7f:da:50:7a:ba:
         05:5b:55:25:f3:48:f6:8c:8a:ff:6e:a3:33:08:38:6b:ff:66:
         be:3a:96:60:68:b0:b7:3a:63:08:82:e4:2b:99:2a:1d:f2:15:
         cc:7b:c8:e8:64:18:18:70:7d:b6:f9:4d:76:5f:43:28:17:d6:
         e6:a1:8f:fa:67:62:ee:43:3d:46:8c:90:d7:bc:e8:45:0b:16:
         19:ec:1c:c8:22:b7:6d:b8:11:9c:72:8e:02:8d:9f:a7:61:27:
         cf:bd:ea:70:a8:47:d5:dd:ec:63:e7:37:4a:ba:8b:1f:ed:b8:
         bb:41:eb:9d:89:77:65:ba:da:6d:a9:03:db:77:43:a6:e1:03:
         b5:98:84:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcanoqcLooGlN2jCM/ZxrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNDdmNzU3NTc0MTNjY2MxNzJkM2QxYjgyNmZhZTVhZTkz
ODVhMWIwHhcNMjQwNjE1MTUwMDU4WhcNMjQwNjE2MTUwMDU4WjAzMTEwLwYDVQQD
EyhiYTM0ODUyYzYwNjlhMWRkNjdlZTNiNzNjNTQ5MDVkODJmMDQ0OGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5DyhQRhfkNn5H8r03Sg79C+cVye
Fhb34tzAnES9HZ2cPzrQfm4N6WLSjDqCxgEFSgX0/DzbUB1x46eBUIqGGkLUc4ue
FfqufN1SF0uh5OkaEVdPrg4/pUkjp8BhkciwyVmZ/0HHYV2JwlQghFyuSfE+7Wog
fxz9o2vP1jhFhCHErVOdZ2nZK54U6pZa8eDvY+n6ccWeLKNmPoYVf/yAoT06GKll
tyIp8t0LAOwrtFlN7UymcHHVxDqnmegcbMIar+QGiC5by//by/MiJyEZzMw9jEqd
JN64ddKIeC2iy8XWgWgueYs6PuoW3y47mwe0VkZQ/2wV76OJO5U5mwg1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo0hSxgaaHdZ+47c8VJBdgvBEjYMB8GA1UdIwQY
MBaAFD9H91dXQTzMFy09G4JvrlrpOFobMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85Zjg4ZDgtOGE2ZC00YzVjLWIxOTQt
ZTE1NWFjYzZiODRlLzEvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85Zjg4ZDgtOGE2ZC00YzVjLWIxOTQtZTE1NWFjYzZiODRl
LzEvUDBmM1YxZEJQTXdYTFQwYmdtLXVXdWs0V2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASd8hS+/O
bLn6sTO8EFsdsZd55Bq6tTGo8+ecligE6ggMNv6mLppmngQBrdy4X0Mc1/XlWdGD
pQWKnTxy1kUphXVpdKBGFCvo8J7zgjP0ZXydCt5MavC4hXfmRPfHj93rt1uUSa8K
24cKIpXdGvOz06dhCH9RVdQXan/aUHq6BVtVJfNI9oyK/26jMwg4a/9mvjqWYGiw
tzpjCILkK5kqHfIVzHvI6GQYGHB9tvlNdl9DKBfW5qGP+mdi7kM9RoyQ17zoRQsW
GewcyCK3bbgRnHKOAo2fp2Enz73qcKhH1d3sY+c3SrqLH+24u0HrnYl3ZbrabakD
23dDpuEDtZiExg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:02:14 2024 by rpki-client on console-fra.rpki-client.org