Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File:                     3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier:          bW6GCNjOm/xlxzt/uQfP9LIo8nL8de+RkGfyzxXUPFk=
Subject key identifier:   BE:81:21:AC:9F:E9:CB:79:29:D7:B5:51:FC:45:EA:8D:0A:C2:3D:EA
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer:       /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial:       018F23138AF55251ABF8BB5D91B4071B4C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number:          114B
Signing time:             Sun 28 Apr 2024 05:00:34 +0000
Manifest this update:     Sun 28 Apr 2024 05:00:34 +0000
Manifest next update:     Mon 29 Apr 2024 05:00:34 +0000
Files and hashes:         1: 0Figpd9XoRAJbNw7nusuy20Ad1E.roa (hash: I9zaSTUqGMwklxt6F9ye7akELaC43mjoVIvFyNNef2w=)
                          2: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: z7FPS/3Uf7OjIc/DGaXUFuSupZoXxsGCAj37K1QUG0I=)
                          3: BGnHHDcE3cf_4KtVFfypiexwh_E.roa (hash: tZPqzF2TOaBC0Ot+nkYNYdq66KrVbKjoxjiLIX4lVBk=)
                          4: W0odQOAtf480M02akoyyOScXws8.roa (hash: 3QtVfQ1LHw8Ch/IJcN71/y3546Uo70qwR8eFnf8YPhI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:13:8a:f5:52:51:ab:f8:bb:5d:91:b4:07:1b:4c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
        Validity
            Not Before: Apr 28 05:00:34 2024 GMT
            Not After : Apr 29 05:00:34 2024 GMT
        Subject: CN=be8121ac9fe9cb7929d7b551fc45ea8d0ac23dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:82:35:a9:18:81:a3:0d:1e:2b:eb:0e:70:
                    06:22:fb:a3:3a:92:fb:fa:fe:80:de:c9:a9:a1:b0:
                    48:3a:d5:ce:f0:5e:af:6c:e4:08:42:70:b0:98:31:
                    bb:09:7d:ba:6e:41:93:17:ff:63:56:77:d1:84:e3:
                    b3:99:db:84:03:e5:ed:f6:15:e5:42:ce:a6:7a:dc:
                    b4:0f:70:98:ab:82:b8:81:4d:91:62:cd:dc:fe:65:
                    7b:9f:27:ce:a6:36:6c:b6:dc:67:12:8a:e5:dd:5f:
                    90:a4:ac:01:e3:f8:da:2a:a2:04:81:c7:c8:e6:d1:
                    3a:cd:a4:5c:51:fc:dc:9c:e5:4b:48:57:2f:ae:44:
                    61:96:ab:68:b6:0e:c7:84:bf:72:d0:71:98:e2:fa:
                    06:cb:bf:e1:21:fc:16:90:5a:b6:84:57:37:a2:26:
                    d4:2c:c2:3c:4b:d3:2c:53:3a:6d:b3:ea:c7:db:f6:
                    ca:83:c7:91:7f:b9:ea:9f:89:e2:5f:c1:a3:62:02:
                    6f:bd:59:c3:74:54:19:50:34:de:5c:50:13:db:b3:
                    b1:54:5a:1e:57:a6:9f:5b:8d:9c:c0:fc:14:f6:f0:
                    98:23:fc:eb:21:4f:44:d6:09:44:74:85:93:4e:85:
                    87:69:2f:ee:53:aa:16:35:2f:5c:a7:fd:d4:5b:09:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:21:AC:9F:E9:CB:79:29:D7:B5:51:FC:45:EA:8D:0A:C2:3D:EA
            X509v3 Authority Key Identifier:
                keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2a:bc:96:9b:0d:a7:2f:74:9a:85:6a:7b:b3:52:8e:c6:0c:
         74:64:f7:76:2e:72:48:01:c5:d2:00:c3:bf:7d:1d:a7:49:b4:
         48:9a:ae:31:43:7f:7e:1e:d4:37:6c:18:ad:b3:b6:72:44:8f:
         af:84:b1:a9:cc:69:83:d5:92:0a:fb:a8:16:ca:26:98:55:7f:
         e2:19:18:ef:9f:8a:3c:3a:42:a8:da:ab:aa:9f:0e:68:a7:37:
         8d:d8:6e:47:89:47:fb:9f:7f:54:01:cb:86:48:14:6a:5d:7b:
         19:e5:5d:71:9f:24:e0:4c:92:41:df:f0:55:9e:6f:5a:5c:90:
         17:92:3d:73:63:2e:84:96:d9:d6:77:1f:c5:22:59:3c:81:16:
         0b:05:0d:2a:43:a1:ff:3b:de:20:30:e3:8b:40:bb:0a:22:60:
         39:18:b6:5b:c3:cd:ab:02:c1:52:09:1e:62:1c:25:ca:ff:e1:
         fa:c3:e3:2f:50:6d:56:68:74:37:39:0b:19:0b:0d:1f:25:10:
         3f:87:f8:54:9b:00:d2:e6:55:90:0d:5f:e3:b7:d1:f9:49:d1:
         93:62:72:66:46:5e:bf:fa:80:1a:8a:9e:62:df:50:07:fc:ce:
         cf:a7:59:35:05:00:53:3d:7e:bd:c2:e6:fc:5c:b6:ab:18:0a:
         47:28:fd:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8jE4r1UlGr+LtdkbQHG0yDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2
ZTk2NDEwHhcNMjQwNDI4MDUwMDM0WhcNMjQwNDI5MDUwMDM0WjAzMTEwLwYDVQQD
EyhiZTgxMjFhYzlmZTljYjc5MjlkN2I1NTFmYzQ1ZWE4ZDBhYzIzZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo86CNakYgaMNHivrDnAGIvujOpL7
+v6A3smpobBIOtXO8F6vbOQIQnCwmDG7CX26bkGTF/9jVnfRhOOzmduEA+Xt9hXl
Qs6mety0D3CYq4K4gU2RYs3c/mV7nyfOpjZsttxnEorl3V+QpKwB4/jaKqIEgcfI
5tE6zaRcUfzcnOVLSFcvrkRhlqtotg7HhL9y0HGY4voGy7/hIfwWkFq2hFc3oibU
LMI8S9MsUzpts+rH2/bKg8eRf7nqn4niX8GjYgJvvVnDdFQZUDTeXFAT27OxVFoe
V6afW42cwPwU9vCYI/zrIU9E1glEdIWTToWHaS/uU6oWNS9cp/3UWwlIxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6BIayf6ct5Kde1UfxF6o0Kwj3qMB8GA1UdIwQY
MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt
NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3
LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyq8lpsN
py90moVqe7NSjsYMdGT3di5ySAHF0gDDv30dp0m0SJquMUN/fh7UN2wYrbO2ckSP
r4Sxqcxpg9WSCvuoFsommFV/4hkY75+KPDpCqNqrqp8OaKc3jdhuR4lH+59/VAHL
hkgUal17GeVdcZ8k4EySQd/wVZ5vWlyQF5I9c2MuhJbZ1ncfxSJZPIEWCwUNKkOh
/zveIDDji0C7CiJgORi2W8PNqwLBUgkeYhwlyv/h+sPjL1BtVmh0NzkLGQsNHyUQ
P4f4VJsA0uZVkA1f47fR+UnRk2JyZkZev/qAGoqeYt9QB/zOz6dZNQUAUz1+vcLm
/Fy2qxgKRyj9CQ==
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:33:12 2024 by rpki-client on console-ams.rpki-client.org