Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File:                     1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier:          Dk5J4dPQV96eSl+9k92aUOmZbPTpDxjZum9w22JTckY=
Subject key identifier:   56:69:A7:71:66:64:2B:D0:68:A3:54:48:C0:97:F2:4F:CF:81:7B:3C
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer:       /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial:       018F3A0B8EF68790E9F78056106CE807CEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number:          0AF5
Signing time:             Thu 02 May 2024 16:03:07 +0000
Manifest this update:     Thu 02 May 2024 16:03:07 +0000
Manifest next update:     Fri 03 May 2024 16:03:07 +0000
Files and hashes:         1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: 1DAqlEYR/lPrR4i0zaihyOf6tUhoxQfYlxW8gotVADo=)
                          2: MnrXTM_45p8IiiNrMGWXrbCg6CA.roa (hash: pDLi4/zuHHoDuDHyBZq20ZEgLGbgU0iz1aQlrDV5Xzc=)
                          3: cvcLaP-LPHONQ_8ZDCSmbUrtrPI.roa (hash: hgW0Sj9RRbSr9/BMXRz2/SPprLumLT9tao8TpTxdd4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:8e:f6:87:90:e9:f7:80:56:10:6c:e8:07:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
        Validity
            Not Before: May  2 16:03:07 2024 GMT
            Not After : May  3 16:03:07 2024 GMT
        Subject: CN=5669a77166642bd068a35448c097f24fcf817b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:db:22:9c:b8:91:11:14:b5:df:c9:28:ea:
                    45:15:ab:e6:da:55:08:74:93:ed:7e:9c:1b:b1:8b:
                    bf:d6:10:c9:77:d6:f7:ff:31:5a:17:60:a4:3e:67:
                    90:04:30:aa:31:bf:ce:44:cc:81:bb:f8:8a:7a:11:
                    53:14:0b:c7:d9:14:e6:d1:6b:9a:12:5e:d7:10:87:
                    47:ba:b7:29:f4:0a:13:72:31:12:a4:91:3b:74:74:
                    0b:13:0f:96:1b:ae:b7:ed:b5:e5:e4:ca:f3:ae:b3:
                    d9:99:a0:55:4b:fa:68:2e:f9:ca:c5:14:84:d6:1b:
                    d6:98:19:5c:50:b4:3f:64:8f:1d:e9:e0:38:cb:60:
                    82:ca:9a:3d:48:c9:a5:20:5c:ae:33:bb:c4:3b:67:
                    96:3a:e3:ec:68:3e:cb:6b:01:d6:c0:4e:98:e5:22:
                    7b:96:26:e0:b3:1e:bd:b0:3c:42:03:da:f0:16:e6:
                    07:03:ea:bc:fe:8c:2b:c1:db:18:24:0a:61:84:95:
                    d0:88:3a:8b:c3:69:e5:bc:9d:78:bf:d0:91:cb:15:
                    e5:9e:97:b4:8c:f0:70:82:6a:3d:ba:0a:39:af:ee:
                    43:6a:2e:6a:7b:09:ad:bc:64:82:49:31:9b:87:54:
                    92:21:b7:8d:df:51:2b:3a:76:34:2e:9a:fe:cf:2f:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:A7:71:66:64:2B:D0:68:A3:54:48:C0:97:F2:4F:CF:81:7B:3C
            X509v3 Authority Key Identifier:
                keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:92:e1:9b:03:a8:fb:b4:c5:bb:3f:9d:4e:4e:91:ec:33:
         a1:2c:38:db:a6:53:f6:05:1b:ee:35:a3:5d:5f:14:0e:db:81:
         00:3a:96:10:02:c6:2f:92:03:0d:78:b8:1a:41:e2:c5:92:16:
         1c:06:05:95:6c:76:c7:5f:a1:f1:23:83:17:b0:6f:d7:31:12:
         b1:ee:c3:fb:15:f4:bd:3d:c9:97:a8:43:14:59:36:1d:87:cf:
         19:c4:60:34:80:f8:0a:ac:8b:e8:1e:01:4a:66:1b:64:da:cf:
         e8:82:da:74:16:7f:ab:3b:5f:9c:d7:7e:0c:6a:ad:6b:43:9a:
         94:24:fa:0f:e6:f1:fc:53:e6:4e:71:40:79:e6:8a:27:3a:77:
         38:dd:b1:c9:0d:d9:6e:c2:58:91:be:5d:8a:b8:f9:90:1e:fa:
         0e:b2:b4:b2:e9:73:c9:9a:56:7f:36:c7:62:3b:bc:90:c2:c3:
         47:35:6e:26:3c:60:c9:de:ca:45:69:17:b0:37:88:36:e9:ef:
         97:9d:43:d8:cb:fb:42:f4:73:cd:cb:01:57:7b:c0:90:0e:b8:
         f0:97:ad:28:b9:30:87:26:3f:76:65:bc:2c:eb:eb:c0:16:0a:
         8c:e1:14:e9:8c:5d:91:5e:77:ea:2f:aa:b5:95:bb:4f:47:19:
         43:1d:63:7f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY86C472h5Dp94BWEGzoB860MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2
NTc2MmMwHhcNMjQwNTAyMTYwMzA3WhcNMjQwNTAzMTYwMzA3WjAzMTEwLwYDVQQD
Eyg1NjY5YTc3MTY2NjQyYmQwNjhhMzU0NDhjMDk3ZjI0ZmNmODE3YjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz07bIpy4kREUtd/JKOpFFavm2lUI
dJPtfpwbsYu/1hDJd9b3/zFaF2CkPmeQBDCqMb/ORMyBu/iKehFTFAvH2RTm0Wua
El7XEIdHurcp9AoTcjESpJE7dHQLEw+WG6637bXl5MrzrrPZmaBVS/poLvnKxRSE
1hvWmBlcULQ/ZI8d6eA4y2CCypo9SMmlIFyuM7vEO2eWOuPsaD7LawHWwE6Y5SJ7
libgsx69sDxCA9rwFuYHA+q8/owrwdsYJAphhJXQiDqLw2nlvJ14v9CRyxXlnpe0
jPBwgmo9ugo5r+5Dai5qewmtvGSCSTGbh1SSIbeN31ErOnY0Lpr+zy9FLQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFZpp3FmZCvQaKNUSMCX8k/PgXs8MB8GA1UdIwQY
MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx
LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj
ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk6S
4ZsDqPu0xbs/nU5OkewzoSw426ZT9gUb7jWjXV8UDtuBADqWEALGL5IDDXi4GkHi
xZIWHAYFlWx2x1+h8SODF7Bv1zESse7D+xX0vT3Jl6hDFFk2HYfPGcRgNID4CqyL
6B4BSmYbZNrP6ILadBZ/qztfnNd+DGqta0OalCT6D+bx/FPmTnFAeeaKJzp3ON2x
yQ3ZbsJYkb5dirj5kB76DrK0sulzyZpWfzbHYju8kMLDRzVuJjxgyd7KRWkXsDeI
Nunvl51D2Mv7QvRzzcsBV3vAkA648JetKLkwhyY/dmW8LOvrwBYKjOEU6YxdkV53
6i+qtZW7T0cZQx1jfw==
-----END CERTIFICATE-----
Generated at Thu May 2 20:38:43 2024 by rpki-client on console-ams.rpki-client.org