Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File:                     3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier:          i0y1TmQ5bbJu0TyaUK3PaiEilzVTwjwkTMjT5bfon2A=
Subject key identifier:   02:00:07:E5:DA:AE:52:D0:97:B8:DC:3F:44:D8:D0:4F:77:7F:67:1A
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer:       /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial:       018F9239CA5464FF0608611368EB6EDDB819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number:          117D
Signing time:             Sun 19 May 2024 19:00:11 +0000
Manifest this update:     Sun 19 May 2024 19:00:11 +0000
Manifest next update:     Mon 20 May 2024 19:00:11 +0000
Files and hashes:         1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: p0o7+jtI4Q4+6lPToKV0AKu2eF2dTmglU/NIOrkSPYg=)
                          2: NF75kuYW5eIxVQtOqxk6Xy1mcxE.roa (hash: NsEWUVlAVzXFF1GQhGsmqjCvV6PBJTGc2JI7BFpqpQs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:39:ca:54:64:ff:06:08:61:13:68:eb:6e:dd:b8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
        Validity
            Not Before: May 19 19:00:11 2024 GMT
            Not After : May 20 19:00:11 2024 GMT
        Subject: CN=020007e5daae52d097b8dc3f44d8d04f777f671a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:16:19:23:8c:f4:16:97:4f:3c:56:5a:4b:
                    42:fe:7b:a7:75:5d:0d:59:e8:19:05:52:13:fa:e3:
                    58:ed:8d:30:74:1c:39:aa:3c:56:6f:7f:30:01:7f:
                    c1:68:0e:b8:26:50:d7:05:90:6f:f4:38:c8:64:b8:
                    d1:a7:a2:a8:5d:56:f3:1c:ed:f4:45:fd:54:58:a8:
                    73:dc:91:37:9f:cc:3b:9a:9b:d6:4e:d5:53:eb:13:
                    0b:0c:07:d2:73:b1:fc:ed:46:fe:b0:52:b5:20:f4:
                    12:ad:3a:e3:69:b9:cf:f1:30:9a:b6:eb:c5:a9:7a:
                    5f:9b:73:fa:73:bf:d3:7f:11:75:93:2f:91:2a:21:
                    3f:96:44:ce:a2:25:1f:09:82:4b:07:47:ba:f4:9b:
                    3d:66:4c:4c:47:72:54:91:95:02:55:4c:13:b3:18:
                    9d:61:d3:b9:93:62:f5:73:ee:fe:70:2f:74:3b:75:
                    0d:9c:4b:5a:26:a3:fc:64:2e:00:1b:34:e0:93:36:
                    d9:de:c2:63:6c:4f:32:84:8b:47:82:5c:f3:22:e7:
                    5a:29:85:56:dd:a1:23:8f:d8:6c:80:68:53:55:94:
                    e0:34:e1:0d:72:58:32:8f:2a:e0:c6:39:3d:48:e8:
                    00:ea:66:7c:2f:2c:9f:ae:08:52:3b:03:a8:6d:35:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:00:07:E5:DA:AE:52:D0:97:B8:DC:3F:44:D8:D0:4F:77:7F:67:1A
            X509v3 Authority Key Identifier:
                keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:67:3f:61:2c:5f:96:8f:c0:46:78:34:55:38:d3:a8:d4:
         99:29:f3:af:34:b8:16:ba:b7:e3:ed:d2:ec:65:2d:d8:0d:79:
         b6:67:64:b2:b7:fc:84:c6:58:58:2d:19:ed:e3:35:69:5f:33:
         2d:4a:e5:91:a4:3d:32:0c:46:15:7d:a6:a2:59:26:67:52:fd:
         0d:98:bf:68:00:e3:b7:62:89:69:50:49:b4:d1:34:d3:93:e2:
         36:2b:9f:62:10:0d:c9:df:57:88:32:3d:9e:bb:61:fc:d7:e7:
         bc:9d:12:1e:89:0e:ba:0d:81:a5:ea:54:12:a6:bb:32:05:1f:
         9a:03:e2:b3:4f:15:a5:bd:bb:e4:d9:59:cc:8b:af:43:aa:b0:
         28:a1:92:c6:aa:56:c1:53:6d:de:d6:d2:a5:fd:90:61:05:77:
         0e:d9:22:d4:d7:e7:fd:89:81:9d:41:0d:f2:51:3f:1a:e7:78:
         a4:8b:7a:27:30:92:cf:4e:3c:52:58:d5:04:b2:b9:09:03:72:
         34:00:ad:c0:45:59:91:12:ad:b4:65:7a:5d:c3:d2:59:08:75:
         3c:14:af:5c:0b:3c:05:20:f0:f2:6d:a4:e6:37:7a:7c:c5:07:
         90:3a:8b:41:58:13:76:38:17:6d:d7:e7:f9:8e:56:3a:45:a1:
         92:3b:c1:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+SOcpUZP8GCGETaOtu3bgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTAyZjYxMzFjZTVhNzQ2ZWI1OTgxZGQ0YzFkNmI0ZTE3
YjAzM2YwHhcNMjQwNTE5MTkwMDExWhcNMjQwNTIwMTkwMDExWjAzMTEwLwYDVQQD
EygwMjAwMDdlNWRhYWU1MmQwOTdiOGRjM2Y0NGQ4ZDA0Zjc3N2Y2NzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfYWGSOM9BaXTzxWWktC/nundV0N
WegZBVIT+uNY7Y0wdBw5qjxWb38wAX/BaA64JlDXBZBv9DjIZLjRp6KoXVbzHO30
Rf1UWKhz3JE3n8w7mpvWTtVT6xMLDAfSc7H87Ub+sFK1IPQSrTrjabnP8TCatuvF
qXpfm3P6c7/TfxF1ky+RKiE/lkTOoiUfCYJLB0e69Js9ZkxMR3JUkZUCVUwTsxid
YdO5k2L1c+7+cC90O3UNnEtaJqP8ZC4AGzTgkzbZ3sJjbE8yhItHglzzIudaKYVW
3aEjj9hsgGhTVZTgNOENclgyjyrgxjk9SOgA6mZ8LyyfrghSOwOobTXt+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIAB+XarlLQl7jcP0TY0E93f2caMB8GA1UdIwQY
MBaAFNwQL2Exzlp0brWYHdTB1rThewM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQt
YjA5N2Q5ZjhlYzIyLzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQtYjA5N2Q5ZjhlYzIy
LzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4RnP2Es
X5aPwEZ4NFU406jUmSnzrzS4Frq34+3S7GUt2A15tmdksrf8hMZYWC0Z7eM1aV8z
LUrlkaQ9MgxGFX2molkmZ1L9DZi/aADjt2KJaVBJtNE005PiNiufYhANyd9XiDI9
nrth/NfnvJ0SHokOug2BpepUEqa7MgUfmgPis08Vpb275NlZzIuvQ6qwKKGSxqpW
wVNt3tbSpf2QYQV3Dtki1Nfn/YmBnUEN8lE/Gud4pIt6JzCSz048UljVBLK5CQNy
NACtwEVZkRKttGV6XcPSWQh1PBSvXAs8BSDw8m2k5jd6fMUHkDqLQVgTdjgXbdfn
+Y5WOkWhkjvBNQ==
-----END CERTIFICATE-----
Generated at Sun May 19 20:47:45 2024 by rpki-client on console-fra.rpki-client.org