Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File:                     3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier:          XNSBymvIUtk4SBEEThaZsvQh8DcmVX7LI4fn4Bsjh1E=
Subject key identifier:   A4:E2:70:60:9D:05:12:08:27:FE:C7:7A:07:47:98:67:05:FE:8E:9E
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer:       /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial:       018F24261BAC40472F7B72930B963ABFF479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number:          08A6
Signing time:             Sun 28 Apr 2024 10:00:28 +0000
Manifest this update:     Sun 28 Apr 2024 10:00:28 +0000
Manifest next update:     Mon 29 Apr 2024 10:00:28 +0000
Files and hashes:         1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: HQRRO5JUzMuN1U8DKGog27B34mvjX6WBBbhLjo14/gY=)
                          2: IVI6eXmvEdZhS51kPMGX3KPCXKg.roa (hash: 7p8MD2m9ICr+ncDOqOfs3Bt2eIaSl201DHjAsQIoYms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:26:1b:ac:40:47:2f:7b:72:93:0b:96:3a:bf:f4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
        Validity
            Not Before: Apr 28 10:00:28 2024 GMT
            Not After : Apr 29 10:00:28 2024 GMT
        Subject: CN=a4e270609d05120827fec77a0747986705fe8e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:99:58:23:13:16:6f:d9:53:d0:cb:82:e5:
                    d3:db:71:00:a0:b6:5f:28:84:fe:89:ec:f1:60:9b:
                    52:09:df:1f:5c:d3:0a:c5:41:18:61:75:cc:49:b2:
                    15:1a:da:44:a6:bb:24:12:dd:79:f0:0a:e4:cb:00:
                    c4:f9:95:0b:eb:df:05:80:91:8e:3c:87:e6:d3:ff:
                    62:fb:04:64:b9:e9:3c:8e:98:2c:a2:90:6f:21:d5:
                    b3:91:56:41:e6:5f:5e:4c:26:b7:3e:20:1f:de:98:
                    8d:49:75:77:4f:2d:8e:34:a2:14:85:b5:ee:43:19:
                    2d:5b:73:21:a4:fa:58:4b:e2:cf:f2:7f:f0:1f:92:
                    a4:02:9b:e7:66:58:c4:4a:8f:8a:32:e9:47:06:fc:
                    1e:45:69:ad:50:a2:18:63:fc:35:e6:0c:b7:14:cb:
                    36:18:d1:28:b0:ff:bd:d2:1b:1e:8e:a6:db:02:11:
                    f9:6f:99:d1:18:4c:e9:6f:f9:7f:4c:63:1a:82:e1:
                    59:22:30:d4:ef:cb:45:0d:3d:6c:85:c1:6d:fe:df:
                    a0:da:24:de:9f:fd:b6:c9:92:9c:d3:3b:2b:7a:f3:
                    1e:bf:4b:98:bb:b4:eb:dc:02:9b:da:8a:9f:ef:93:
                    27:01:13:55:d7:7c:a8:a7:56:ce:65:ec:f5:b4:09:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E2:70:60:9D:05:12:08:27:FE:C7:7A:07:47:98:67:05:FE:8E:9E
            X509v3 Authority Key Identifier:
                keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:21:c2:91:87:c5:83:bf:a2:23:41:27:19:85:f7:73:49:
         67:d9:c1:55:00:d5:1d:dc:de:d7:36:17:f3:bd:4c:fb:d1:93:
         16:a1:d9:f1:27:51:aa:c5:d9:a4:d1:3e:6f:be:bf:95:65:ff:
         01:66:fc:35:85:a8:44:f9:b9:d8:d0:d8:a1:0c:e7:cc:7d:a7:
         15:b5:8f:f8:0f:2c:da:99:50:5a:f5:05:b0:6f:e9:27:bb:50:
         a1:1d:ec:b7:1f:61:8f:9f:85:39:7c:50:1a:21:17:11:ce:7a:
         e6:e8:54:4b:e7:c3:41:e4:15:a8:79:16:e5:45:bc:c5:09:4d:
         0a:64:3a:c0:d6:62:49:56:9e:32:96:49:0f:de:45:ba:d5:04:
         ba:d2:c4:56:5f:75:63:99:6b:15:11:a0:9d:02:51:74:91:d9:
         74:09:e5:f0:f5:c8:0f:d6:5f:5c:2b:7f:3b:d0:4c:60:7c:3e:
         96:d0:c8:6e:88:0c:a5:ee:fc:7c:93:d6:13:a0:f6:44:34:04:
         e7:83:dc:fa:0f:86:46:a5:7a:01:f1:29:c8:27:76:88:5e:00:
         d7:6a:a5:77:70:c4:02:5f:62:fc:b2:d1:ba:4c:9b:54:56:ef:
         b1:8c:f6:3d:14:c7:b6:a5:6e:af:f6:a3:ef:d0:f3:90:6f:cc:
         d7:2e:8b:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8kJhusQEcve3KTC5Y6v/R5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYzg4MjMyYzA3ZGUyY2RjYjk2ZWFmOWU3NTE1NTBiYWE2
NmM1ODgwHhcNMjQwNDI4MTAwMDI4WhcNMjQwNDI5MTAwMDI4WjAzMTEwLwYDVQQD
EyhhNGUyNzA2MDlkMDUxMjA4MjdmZWM3N2EwNzQ3OTg2NzA1ZmU4ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB6ZWCMTFm/ZU9DLguXT23EAoLZf
KIT+iezxYJtSCd8fXNMKxUEYYXXMSbIVGtpEprskEt158ArkywDE+ZUL698FgJGO
PIfm0/9i+wRkuek8jpgsopBvIdWzkVZB5l9eTCa3PiAf3piNSXV3Ty2ONKIUhbXu
QxktW3MhpPpYS+LP8n/wH5KkApvnZljESo+KMulHBvweRWmtUKIYY/w15gy3FMs2
GNEosP+90hsejqbbAhH5b5nRGEzpb/l/TGMaguFZIjDU78tFDT1shcFt/t+g2iTe
n/22yZKc0zsrevMev0uYu7Tr3AKb2oqf75MnARNV13yop1bOZez1tAkX4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTicGCdBRIIJ/7HegdHmGcF/o6eMB8GA1UdIwQY
MBaAFN3IgjLAfeLNy5bq+edRVQuqZsWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGIt
NDJjNzliMDNiNGRmLzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGItNDJjNzliMDNiNGRm
LzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbUhwpGH
xYO/oiNBJxmF93NJZ9nBVQDVHdze1zYX871M+9GTFqHZ8SdRqsXZpNE+b76/lWX/
AWb8NYWoRPm52NDYoQznzH2nFbWP+A8s2plQWvUFsG/pJ7tQoR3stx9hj5+FOXxQ
GiEXEc565uhUS+fDQeQVqHkW5UW8xQlNCmQ6wNZiSVaeMpZJD95FutUEutLEVl91
Y5lrFRGgnQJRdJHZdAnl8PXID9ZfXCt/O9BMYHw+ltDIbogMpe78fJPWE6D2RDQE
54Pc+g+GRqV6AfEpyCd2iF4A12qld3DEAl9i/LLRukybVFbvsYz2PRTHtqVur/aj
79DzkG/M1y6LuQ==
-----END CERTIFICATE-----
Generated at Sun Apr 28 12:29:02 2024 by rpki-client on console-ams.rpki-client.org