Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File:                     3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier:          aC70L2ZmllPDtWgMMlyW49exSPHTE4R/yaIRQCJttGA=
Subject key identifier:   B4:A5:52:66:1E:E3:F6:A3:55:F8:26:6F:E8:24:1B:6E:74:07:35:50
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer:       /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial:       018F30637C1574B0E26741C2E65D4313C783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number:          0F6F
Signing time:             Tue 30 Apr 2024 19:02:57 +0000
Manifest this update:     Tue 30 Apr 2024 19:02:57 +0000
Manifest next update:     Wed 01 May 2024 19:02:57 +0000
Files and hashes:         1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: CTsAeIpdt0WN1e9VjnAKi658bczl5+4jWBCzXtN2YD4=)
                          2: 6DUQ869KtkAddqX5BJXWzU-Oo10.roa (hash: WfIQW1ZM7y3p2JXQIQ//Q6GHkYgKlFlbBYjXoY3Ffm4=)
                          3: c8xodrd9AnJ1Q1LTZBHuJwGeRgk.roa (hash: UFY+22wwM/Wr2ITxyrvkg6+Zb/RvP21dZrRLOQn8U4c=)
                          4: tLU8YTa50BNFR815aO3wRQWQeOU.roa (hash: zKU8zGeZgDYdgb9bdeIWosjG2Cp7PA508CX52QOSIVA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 13:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:30:63:7c:15:74:b0:e2:67:41:c2:e6:5d:43:13:c7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
        Validity
            Not Before: Apr 30 19:02:57 2024 GMT
            Not After : May  1 19:02:57 2024 GMT
        Subject: CN=b4a552661ee3f6a355f8266fe8241b6e74073550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:a4:87:49:bc:d2:e9:36:58:91:8d:70:e0:
                    d5:99:9d:05:db:9c:4c:0e:da:e7:60:1a:35:eb:3c:
                    57:d7:a4:07:aa:6f:cb:fb:58:8f:cc:60:74:77:63:
                    8e:7e:d9:ea:0a:a0:71:47:93:64:8a:8a:47:c3:00:
                    9d:39:50:44:1a:bf:0e:0c:c6:31:25:65:b1:e4:0c:
                    d4:5b:64:01:a5:67:92:45:58:86:32:3b:6c:34:aa:
                    8f:57:51:2b:9f:97:4d:da:5a:cf:c7:a0:9f:12:7a:
                    bb:4a:24:97:a5:a8:47:bf:04:24:47:e9:fd:88:48:
                    38:20:8a:e6:34:dd:5b:8f:db:8c:a5:cb:0c:e0:e2:
                    5c:1a:9e:cb:dc:a0:a1:45:3d:6b:c9:d2:fc:e9:5a:
                    c8:b3:95:71:12:82:93:9f:b2:fa:40:3d:51:77:a0:
                    33:cb:aa:ae:7a:0b:2f:ed:5b:06:e9:87:a3:e7:10:
                    61:ea:dd:20:f8:5b:28:ff:38:18:84:18:db:9a:8a:
                    03:86:22:dd:1b:26:e9:7e:90:d6:d3:30:ac:0a:46:
                    6c:7f:4e:91:03:4d:7b:a0:22:a7:e9:d5:47:89:93:
                    2a:dd:3f:e5:6a:d1:b1:d4:a0:5f:bd:88:29:37:30:
                    e3:7c:b9:89:57:f9:17:83:93:d8:0b:a2:71:80:ce:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A5:52:66:1E:E3:F6:A3:55:F8:26:6F:E8:24:1B:6E:74:07:35:50
            X509v3 Authority Key Identifier:
                keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3f:24:6d:9e:1c:51:55:9b:91:dc:42:8e:03:97:5c:7b:86:
         5f:7f:13:25:ed:6f:4f:b6:2e:7b:5c:78:b7:16:40:fb:41:61:
         34:a8:36:ae:07:51:71:7e:d0:c6:d0:c9:dd:44:12:3e:b9:39:
         af:27:6f:b5:e8:ad:e7:93:27:8b:92:b3:38:ee:98:67:ff:4e:
         39:02:ae:3a:af:e4:27:a2:15:11:04:a5:9a:25:69:f6:00:de:
         a4:86:98:ba:f0:ea:e6:f0:38:15:70:3b:c5:71:87:e3:74:48:
         b0:eb:37:63:07:e8:9e:34:b9:57:95:f9:d1:48:02:6a:f5:28:
         4d:68:75:4d:f6:48:ff:bf:ea:8d:18:f8:30:90:79:cb:b6:b9:
         a5:83:13:ab:72:fe:c9:63:0b:73:de:e3:45:9e:a8:12:da:7f:
         c8:91:0a:b3:f6:6a:e8:d6:e1:92:17:9b:ee:05:21:43:d4:92:
         bb:a6:93:f1:3a:9c:15:38:0b:f8:06:83:dd:f4:c8:9b:3f:81:
         0c:db:ae:05:95:19:a0:b1:a0:8a:aa:fa:8f:22:6d:61:c8:91:
         ab:f5:84:5c:8d:ce:04:e1:3f:d8:75:55:df:4d:a5:cd:11:74:
         ee:b7:a1:23:ac:ee:12:bb:aa:b7:82:63:58:a1:64:d6:f5:a5:
         aa:53:66:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8wY3wVdLDiZ0HC5l1DE8eDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDM1M2UyZjVkMzE4YzM0ODc3MmE4ZmYxMDVhYTcwNzE5
ZTQxMzUwHhcNMjQwNDMwMTkwMjU3WhcNMjQwNTAxMTkwMjU3WjAzMTEwLwYDVQQD
EyhiNGE1NTI2NjFlZTNmNmEzNTVmODI2NmZlODI0MWI2ZTc0MDczNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qakh0m80uk2WJGNcODVmZ0F25xM
DtrnYBo16zxX16QHqm/L+1iPzGB0d2OOftnqCqBxR5NkiopHwwCdOVBEGr8ODMYx
JWWx5AzUW2QBpWeSRViGMjtsNKqPV1Ern5dN2lrPx6CfEnq7SiSXpahHvwQkR+n9
iEg4IIrmNN1bj9uMpcsM4OJcGp7L3KChRT1rydL86VrIs5VxEoKTn7L6QD1Rd6Az
y6quegsv7VsG6Yej5xBh6t0g+Fso/zgYhBjbmooDhiLdGybpfpDW0zCsCkZsf06R
A017oCKn6dVHiZMq3T/latGx1KBfvYgpNzDjfLmJV/kXg5PYC6JxgM7qdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSlUmYe4/ajVfgmb+gkG250BzVQMB8GA1UdIwQY
MBaAFN7TU+L10xjDSHcqj/EFqnBxnkE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgt
NGU4NWRhYmQ2NDc0LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgtNGU4NWRhYmQ2NDc0
LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVz8kbZ4c
UVWbkdxCjgOXXHuGX38TJe1vT7Yue1x4txZA+0FhNKg2rgdRcX7QxtDJ3UQSPrk5
rydvteit55Mni5KzOO6YZ/9OOQKuOq/kJ6IVEQSlmiVp9gDepIaYuvDq5vA4FXA7
xXGH43RIsOs3YwfonjS5V5X50UgCavUoTWh1TfZI/7/qjRj4MJB5y7a5pYMTq3L+
yWMLc97jRZ6oEtp/yJEKs/Zq6Nbhkheb7gUhQ9SSu6aT8TqcFTgL+AaD3fTImz+B
DNuuBZUZoLGgiqr6jyJtYciRq/WEXI3OBOE/2HVV302lzRF07rehI6zuEruqt4Jj
WKFk1vWlqlNmsw==
-----END CERTIFICATE-----
Generated at Tue Apr 30 22:13:51 2024 by rpki-client on console-ams.rpki-client.org