Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File:                     3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier:          V9BtlRUPxyGXI16YdPK+o2DaYCPO2jC9STq99hAcGME=
Subject key identifier:   51:88:5C:7B:F5:5B:F5:E9:04:B5:EA:E5:97:BE:5D:89:BC:D4:72:81
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer:       /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial:       018F42D650B8B1EA844FD24CF9EA623B5FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number:          05BD
Signing time:             Sat 04 May 2024 09:01:32 +0000
Manifest this update:     Sat 04 May 2024 09:01:32 +0000
Manifest next update:     Sun 05 May 2024 09:01:32 +0000
Files and hashes:         1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: PzDr0Vy7+wMHaOX86izpALBA7x2tRVqHlVN/tx7eJVo=)
                          2: fM02RadjW_Nm8Z6j5sjLod_slkQ.roa (hash: ICe15VjAma3vBziaK6Btam0vtXK9QenGFFZ1NlTxP58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:d6:50:b8:b1:ea:84:4f:d2:4c:f9:ea:62:3b:5f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
        Validity
            Not Before: May  4 09:01:32 2024 GMT
            Not After : May  5 09:01:32 2024 GMT
        Subject: CN=51885c7bf55bf5e904b5eae597be5d89bcd47281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:d1:3e:61:27:0c:ec:bb:74:5e:56:21:9f:
                    78:6a:f1:52:d6:0d:35:51:e1:ed:d9:6a:36:45:cd:
                    50:76:27:c7:9f:67:54:1f:2d:c5:79:95:61:93:6b:
                    58:23:4a:18:4b:7b:57:2a:d3:60:f9:8e:f3:c2:fb:
                    9a:09:c9:e5:0b:01:3e:1c:6a:96:53:6e:3b:b0:8a:
                    1c:8e:81:e9:dc:3d:7f:60:45:42:85:2f:69:cc:9a:
                    08:2f:b5:1f:cd:5a:07:02:21:96:80:22:22:d6:04:
                    78:db:17:6c:6a:41:19:7f:4b:c8:8f:35:15:5e:17:
                    fc:29:4c:ad:da:b9:b4:eb:8d:97:5f:27:b7:48:18:
                    6b:81:bf:cc:26:4f:06:86:0a:dd:7f:39:26:3d:80:
                    52:26:e5:b9:82:66:9c:12:46:66:dc:21:6e:8c:5c:
                    c7:1b:ad:6e:ce:8c:af:d1:49:10:a8:1c:ad:02:9e:
                    47:38:b3:17:2b:26:8d:7d:38:1b:bd:50:e7:85:b1:
                    9b:4a:a7:40:07:30:70:54:62:8b:83:0b:ec:53:47:
                    7d:01:56:8e:29:42:a7:42:ad:d3:f5:69:91:2d:8b:
                    7f:59:b4:09:5f:ba:c8:4d:21:d8:89:4e:2c:a3:b3:
                    4a:73:50:41:f1:5d:a1:aa:20:57:ad:a5:bd:0a:26:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:5C:7B:F5:5B:F5:E9:04:B5:EA:E5:97:BE:5D:89:BC:D4:72:81
            X509v3 Authority Key Identifier:
                keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:b8:cb:9d:7a:3b:5e:31:00:b7:06:92:47:96:d3:1e:bf:
         29:b7:8a:a7:ca:e0:8f:29:aa:61:2b:b2:c7:ed:32:01:81:59:
         94:8c:0a:19:80:46:cb:7f:6f:f1:8c:14:c7:cd:75:36:a7:05:
         97:be:4c:97:6a:24:3d:d9:4f:af:1d:23:e9:e0:2f:10:ec:3a:
         52:48:a2:25:7c:fe:94:43:e8:a2:c3:fe:3c:23:3b:16:f3:2d:
         32:a1:a4:e4:f1:d4:33:11:07:9d:10:82:73:44:70:40:a3:fa:
         4e:da:d2:96:55:ac:ca:71:dc:11:a3:5b:93:a1:af:6b:fc:ff:
         b0:e0:86:f1:06:48:b0:9a:1f:45:d9:10:8d:e2:b5:67:93:67:
         c4:b6:4d:df:2d:7e:38:c9:1c:c0:ca:46:fe:f5:de:65:93:a0:
         e2:59:7e:53:1a:9a:54:45:4f:3c:0d:d7:1f:21:1e:8b:52:18:
         79:00:9b:19:3b:16:30:cc:60:fe:8b:0e:1d:63:de:ae:32:bf:
         e4:42:bc:b9:5f:42:fe:33:88:1a:95:e0:cf:cd:a3:e8:18:4d:
         68:3d:63:c4:e0:e6:eb:79:3b:6d:c1:6a:d8:e2:00:ab:7a:fe:
         7d:72:13:2d:05:54:83:47:4f:4b:c4:f5:02:ac:6a:36:d0:77:
         71:97:10:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9C1lC4seqET9JM+epiO1/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy
NWNiNTEwHhcNMjQwNTA0MDkwMTMyWhcNMjQwNTA1MDkwMTMyWjAzMTEwLwYDVQQD
Eyg1MTg4NWM3YmY1NWJmNWU5MDRiNWVhZTU5N2JlNWQ4OWJjZDQ3MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8TRPmEnDOy7dF5WIZ94avFS1g01
UeHt2Wo2Rc1QdifHn2dUHy3FeZVhk2tYI0oYS3tXKtNg+Y7zwvuaCcnlCwE+HGqW
U247sIocjoHp3D1/YEVChS9pzJoIL7UfzVoHAiGWgCIi1gR42xdsakEZf0vIjzUV
Xhf8KUyt2rm0642XXye3SBhrgb/MJk8GhgrdfzkmPYBSJuW5gmacEkZm3CFujFzH
G61uzoyv0UkQqBytAp5HOLMXKyaNfTgbvVDnhbGbSqdABzBwVGKLgwvsU0d9AVaO
KUKnQq3T9WmRLYt/WbQJX7rITSHYiU4so7NKc1BB8V2hqiBXraW9CibLoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGIXHv1W/XpBLXq5Ze+XYm81HKBMB8GA1UdIwQY
MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt
MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw
LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPf+4y516
O14xALcGkkeW0x6/KbeKp8rgjymqYSuyx+0yAYFZlIwKGYBGy39v8YwUx811NqcF
l75Ml2okPdlPrx0j6eAvEOw6UkiiJXz+lEPoosP+PCM7FvMtMqGk5PHUMxEHnRCC
c0RwQKP6TtrSllWsynHcEaNbk6Gva/z/sOCG8QZIsJofRdkQjeK1Z5NnxLZN3y1+
OMkcwMpG/vXeZZOg4ll+UxqaVEVPPA3XHyEei1IYeQCbGTsWMMxg/osOHWPerjK/
5EK8uV9C/jOIGpXgz82j6BhNaD1jxODm63k7bcFq2OIAq3r+fXITLQVUg0dPS8T1
AqxqNtB3cZcQUg==
-----END CERTIFICATE-----
Generated at Sat May 4 11:27:20 2024 by rpki-client on console-ams.rpki-client.org