Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File:                     3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier:          5/bEH9bM7up38XDxOzIcjaHMA4x3Et9FRGbyAydoTYw=
Subject key identifier:   99:99:6D:AF:23:E4:D3:0B:E7:7F:C5:57:20:74:E2:49:94:B1:EE:03
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer:       /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial:       018F3BF86BEEB11870A8D229CCD95EF51103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number:          114F
Signing time:             Fri 03 May 2024 01:01:27 +0000
Manifest this update:     Fri 03 May 2024 01:01:27 +0000
Manifest next update:     Sat 04 May 2024 01:01:27 +0000
Files and hashes:         1: 16KdKx2B0fRYwgQ5U2VlXvCdfYk.roa (hash: BoAHyKlQ8KYj2SRo+EuCyXnWAz7MnswUiwDZ/MDm71w=)
                          2: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: iu3QIpPnCHLtJ1bJ2BWsX6h4votOUMnR+0A2AJxjE88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:6b:ee:b1:18:70:a8:d2:29:cc:d9:5e:f5:11:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
        Validity
            Not Before: May  3 01:01:27 2024 GMT
            Not After : May  4 01:01:27 2024 GMT
        Subject: CN=99996daf23e4d30be77fc5572074e24994b1ee03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:cf:3a:e7:73:e5:b8:cc:cc:1c:b4:59:ee:
                    82:be:5e:f1:65:d0:4d:3e:1d:94:3c:fd:f2:9a:ec:
                    1f:26:27:b7:dd:65:a8:5e:63:67:7d:4a:b6:a3:30:
                    50:26:3d:4b:cb:41:41:ea:30:b0:c7:e2:82:d2:0b:
                    d3:24:3e:51:cc:a7:68:b9:d0:c5:f4:cf:40:f1:a3:
                    aa:e2:70:e2:69:da:21:e7:3f:09:08:48:d1:40:15:
                    4e:78:82:93:99:80:e9:1d:0c:47:55:02:8a:ca:1a:
                    22:d7:bd:9c:32:fc:d3:b9:a6:e3:e9:6a:81:d9:14:
                    c2:eb:0c:af:61:0e:92:05:f5:c1:8e:b8:7c:b3:37:
                    9a:4a:f0:77:b5:c1:a0:bd:1e:b6:70:31:a3:75:73:
                    f2:eb:d4:5c:6c:e6:10:2a:fb:73:d7:48:09:b8:8c:
                    69:38:40:85:d0:61:73:c3:e6:f1:3f:38:03:9b:c5:
                    9d:17:6a:ee:25:12:24:d6:b9:b8:27:0b:5e:7e:46:
                    13:b3:1f:79:53:9c:c9:14:ba:c3:26:bb:5c:1c:93:
                    0f:d2:6e:db:7f:8e:69:2a:6f:de:6f:0e:10:2c:85:
                    d8:31:a8:07:41:d4:71:e9:c0:a9:03:ec:29:e9:bd:
                    0d:c4:2d:b9:f3:8f:70:6a:c2:07:da:8f:01:b2:01:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:99:6D:AF:23:E4:D3:0B:E7:7F:C5:57:20:74:E2:49:94:B1:EE:03
            X509v3 Authority Key Identifier:
                keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:67:cd:5f:1f:f5:f3:c7:7c:87:e7:eb:d1:69:81:ff:b6:fb:
         8a:15:15:8b:bb:c4:1f:d5:a8:99:0d:d4:b5:11:3d:84:9c:3e:
         f0:35:cb:61:2d:bb:56:ef:4d:1b:eb:fe:e6:ad:a7:44:de:13:
         07:99:85:92:e2:2f:1a:1f:0f:d0:83:c7:4b:1c:da:f0:d9:31:
         6c:0e:2c:84:f7:fe:4b:56:18:3a:66:09:db:71:8c:4e:36:61:
         d2:a9:b1:9a:40:7a:d8:de:ec:56:e7:a5:2a:5a:f2:a4:d7:f0:
         66:42:b7:c4:98:92:02:65:8c:bb:d3:45:06:f1:b7:16:46:73:
         07:fb:4a:17:a5:e5:b2:db:2c:ef:21:0b:56:00:d3:66:bb:69:
         5e:f3:04:87:75:3e:36:49:a0:7b:41:51:99:4b:03:b1:eb:c0:
         21:ea:cf:c4:fe:76:d5:c6:c2:b9:45:d1:88:45:3d:2e:6c:fe:
         fa:9f:94:6d:1c:d7:25:c2:de:11:90:87:74:6e:84:e6:e6:08:
         05:aa:9a:3c:98:f5:e1:34:a7:75:1d:24:24:f9:1e:f4:89:78:
         16:52:9b:d6:14:c2:eb:fe:49:db:f8:64:61:64:34:e2:a6:d1:
         25:05:d6:2c:ef:48:c4:6d:44:ec:2b:78:52:50:fb:c7:a7:48:
         7a:11:b2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+GvusRhwqNIpzNle9REDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTEzOTIxOGM1MmU4ZmU3ZjdjMzE0YjY2MzllN2Y4N2U1
Njc5YzgwHhcNMjQwNTAzMDEwMTI3WhcNMjQwNTA0MDEwMTI3WjAzMTEwLwYDVQQD
Eyg5OTk5NmRhZjIzZTRkMzBiZTc3ZmM1NTcyMDc0ZTI0OTk0YjFlZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VnPOudz5bjMzBy0We6Cvl7xZdBN
Ph2UPP3ymuwfJie33WWoXmNnfUq2ozBQJj1Ly0FB6jCwx+KC0gvTJD5RzKdoudDF
9M9A8aOq4nDiadoh5z8JCEjRQBVOeIKTmYDpHQxHVQKKyhoi172cMvzTuabj6WqB
2RTC6wyvYQ6SBfXBjrh8szeaSvB3tcGgvR62cDGjdXPy69RcbOYQKvtz10gJuIxp
OECF0GFzw+bxPzgDm8WdF2ruJRIk1rm4JwtefkYTsx95U5zJFLrDJrtcHJMP0m7b
f45pKm/ebw4QLIXYMagHQdRx6cCpA+wp6b0NxC25849wasIH2o8BsgHOjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmZba8j5NML53/FVyB04kmUse4DMB8GA1UdIwQY
MBaAFN4ROSGMUuj+f3wxS2Y55/h+VnnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUt
MzhhMzg1ZjM1ZTNiLzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUtMzhhMzg1ZjM1ZTNi
LzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGfNXx/1
88d8h+fr0WmB/7b7ihUVi7vEH9WomQ3UtRE9hJw+8DXLYS27Vu9NG+v+5q2nRN4T
B5mFkuIvGh8P0IPHSxza8NkxbA4shPf+S1YYOmYJ23GMTjZh0qmxmkB62N7sVuel
KlrypNfwZkK3xJiSAmWMu9NFBvG3FkZzB/tKF6Xlstss7yELVgDTZrtpXvMEh3U+
Nkmge0FRmUsDsevAIerPxP521cbCuUXRiEU9Lmz++p+UbRzXJcLeEZCHdG6E5uYI
BaqaPJj14TSndR0kJPke9Il4FlKb1hTC6/5J2/hkYWQ04qbRJQXWLO9IxG1E7Ct4
UlD7x6dIehGyqg==
-----END CERTIFICATE-----
Generated at Fri May 3 10:36:21 2024 by rpki-client on console-fra.rpki-client.org