Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File:                     3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier:          8R/VluAvoBzJya/2Ff8MGlE/FP2RRVZHaVxseR5jg08=
Subject key identifier:   B6:C9:44:6F:6F:EA:C5:50:2F:15:73:B2:9D:88:78:49:20:A0:FD:EF
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer:       /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial:       018F43B2EBBF438EEA70322A08A4352834EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number:          1095
Signing time:             Sat 04 May 2024 13:02:30 +0000
Manifest this update:     Sat 04 May 2024 13:02:30 +0000
Manifest next update:     Sun 05 May 2024 13:02:30 +0000
Files and hashes:         1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: PdVyOFeiVygYr9hTiIbUwHvKgPaspG81CAvqFZJoE9c=)
                          2: rheyx7UAVxjLvnZCrSg3QQHLRBA.roa (hash: VUkDh2g+fpU2NA8fssYa68Z1JVDxcZVGaMWsH4ITdN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:eb:bf:43:8e:ea:70:32:2a:08:a4:35:28:34:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
        Validity
            Not Before: May  4 13:02:30 2024 GMT
            Not After : May  5 13:02:30 2024 GMT
        Subject: CN=b6c9446f6feac5502f1573b29d88784920a0fdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:41:ef:a7:7f:d3:84:4b:32:7f:ac:4a:12:
                    f7:09:6a:48:f5:5b:a0:43:05:41:28:23:68:ff:93:
                    ce:15:3b:7c:39:14:bf:cc:10:92:c3:31:6d:c0:f2:
                    41:c2:a4:60:69:c4:dd:ed:39:1f:b4:0c:a8:6c:87:
                    2e:36:da:ea:d0:14:a9:dd:13:bf:bb:1e:27:8e:3f:
                    b1:64:c1:7c:27:e6:0e:c7:1c:5b:99:e3:19:fe:b8:
                    77:89:f2:ec:c8:ef:42:82:4d:f7:4c:c4:16:1b:71:
                    0b:50:dc:64:ae:e6:2c:33:d1:90:1d:5a:66:d5:5e:
                    fd:69:a4:e3:38:e9:50:6c:53:ce:d8:d4:1f:2c:e9:
                    a0:59:4d:18:1a:fc:07:dc:13:65:8d:d4:2a:92:b3:
                    af:bb:0c:d4:66:a5:12:a8:b6:66:b6:0f:49:c8:c5:
                    9d:5b:bf:45:2b:27:5a:90:ec:33:06:aa:d1:6b:c2:
                    5b:9c:06:b6:b4:60:32:16:a9:f0:62:31:11:ed:3a:
                    4c:66:2c:84:d5:12:55:57:4c:6b:7e:d0:67:b4:fd:
                    89:94:7b:e9:3c:08:30:d7:b3:b0:39:f8:e4:b8:b6:
                    f1:cb:6b:68:69:43:eb:6b:da:74:98:ac:6f:26:67:
                    49:9f:e7:e6:2c:82:37:68:e2:5f:af:c5:d4:92:72:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C9:44:6F:6F:EA:C5:50:2F:15:73:B2:9D:88:78:49:20:A0:FD:EF
            X509v3 Authority Key Identifier:
                keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:aa:eb:5b:83:8e:df:22:fc:20:e9:ec:3a:db:13:57:6e:ff:
         27:f9:49:23:71:25:e1:e9:cd:c6:f1:da:59:98:73:9b:8e:97:
         ee:6b:b2:ea:36:bd:24:69:5f:05:32:74:d8:ab:48:01:08:89:
         e6:46:80:aa:c5:6e:a3:d1:d5:02:96:32:6f:6b:83:5d:9e:37:
         81:a0:b2:5d:81:1c:4d:d8:2e:be:f8:ab:05:ea:69:94:a8:33:
         f7:f0:09:22:1c:db:ff:35:f3:7c:45:c4:a7:db:70:5c:4f:1b:
         39:4e:84:64:fb:9b:49:1c:b2:16:65:b7:c1:f2:ca:19:2f:28:
         af:60:e0:79:d5:d4:b4:a8:fa:85:2e:bf:5c:a0:c3:f4:1b:3d:
         dd:07:41:31:9c:6c:2b:bf:a6:f0:c9:ec:94:1b:e5:9c:08:56:
         87:d0:ff:99:7e:a6:7a:9e:04:50:20:81:1b:ec:12:e7:3c:13:
         3c:13:6c:30:1e:98:87:a6:58:32:c9:90:9d:73:6a:4e:50:77:
         5e:b8:78:de:7a:7c:07:13:5a:fe:e3:61:08:d0:c7:26:7d:48:
         6e:4a:71:cd:97:39:9d:95:81:62:f4:87:b8:02:4a:22:82:b3:
         cf:d0:32:59:08:49:a0:23:07:e2:7f:4a:63:b9:f6:4d:9e:52:
         ae:56:2d:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Dsuu/Q47qcDIqCKQ1KDTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0
ZDZiN2MwHhcNMjQwNTA0MTMwMjMwWhcNMjQwNTA1MTMwMjMwWjAzMTEwLwYDVQQD
EyhiNmM5NDQ2ZjZmZWFjNTUwMmYxNTczYjI5ZDg4Nzg0OTIwYTBmZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG1B76d/04RLMn+sShL3CWpI9Vug
QwVBKCNo/5POFTt8ORS/zBCSwzFtwPJBwqRgacTd7TkftAyobIcuNtrq0BSp3RO/
ux4njj+xZMF8J+YOxxxbmeMZ/rh3ifLsyO9Cgk33TMQWG3ELUNxkruYsM9GQHVpm
1V79aaTjOOlQbFPO2NQfLOmgWU0YGvwH3BNljdQqkrOvuwzUZqUSqLZmtg9JyMWd
W79FKydakOwzBqrRa8JbnAa2tGAyFqnwYjER7TpMZiyE1RJVV0xrftBntP2JlHvp
PAgw17OwOfjkuLbxy2toaUPra9p0mKxvJmdJn+fmLII3aOJfr8XUknJf3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbJRG9v6sVQLxVzsp2IeEkgoP3vMB8GA1UdIwQY
MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt
NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj
LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKrrW4OO
3yL8IOnsOtsTV27/J/lJI3El4enNxvHaWZhzm46X7muy6ja9JGlfBTJ02KtIAQiJ
5kaAqsVuo9HVApYyb2uDXZ43gaCyXYEcTdguvvirBepplKgz9/AJIhzb/zXzfEXE
p9twXE8bOU6EZPubSRyyFmW3wfLKGS8or2DgedXUtKj6hS6/XKDD9Bs93QdBMZxs
K7+m8MnslBvlnAhWh9D/mX6mep4EUCCBG+wS5zwTPBNsMB6Yh6ZYMsmQnXNqTlB3
Xrh43np8BxNa/uNhCNDHJn1IbkpxzZc5nZWBYvSHuAJKIoKzz9AyWQhJoCMH4n9K
Y7n2TZ5SrlYtHQ==
-----END CERTIFICATE-----
Generated at Sat May 4 17:57:23 2024 by rpki-client on console-ams.rpki-client.org