Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          1qTmEWmUXql/fkfWWV0FUR8uCoL+H0GOCrI5Tz3LNkk=
Subject key identifier:   A1:DD:8A:99:A8:5B:FA:E2:EE:3A:B5:E9:DA:85:5A:AB:CB:C3:E5:B8
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       018F2EE0E49A7C29CA9C8A938CE8715686DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          1156
Signing time:             Tue 30 Apr 2024 12:00:41 +0000
Manifest this update:     Tue 30 Apr 2024 12:00:41 +0000
Manifest next update:     Wed 01 May 2024 12:00:41 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: lEjwnt9GpRj4Nyc/Q7FpW9c7259n3VR8YO6ZyJhipMc=)
                          2: Q4PlefsqmXWqy5gnAYkw40HhENM.roa (hash: 6tK0YkOLEby5pL4YKwgq5GvyZ87BoABxTyu7qzz9cmk=)
                          3: _ebRMxmH5KizFz1IETPGn1v9aOU.roa (hash: LZZ3BN5oEiVwLRT5urIQRWtTLJAAkgzjM7hHJN41ECE=)
                          4: j7IGzzvM2EBcSP-J9hPVJKA5XBQ.roa (hash: 8rd3LgO814XLlnk0GEZiU0her0DnjcwO3+3F5uwEEu4=)
                          5: k09857GkU9dAssyZxrDQK5upOfQ.roa (hash: h7NKZNNryyFcP/iEULwvl98wx2icVjxahTgUpvrYWJI=)
                          6: r53OJMPJwDE3ZT7D0PQdKPUA0gY.roa (hash: cPwAraFEz9eoRgWeB4UshDGYJfd2OBTsslpfNN5iceE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:e0:e4:9a:7c:29:ca:9c:8a:93:8c:e8:71:56:86:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: Apr 30 12:00:41 2024 GMT
            Not After : May  1 12:00:41 2024 GMT
        Subject: CN=a1dd8a99a85bfae2ee3ab5e9da855aabcbc3e5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:98:24:32:69:0d:34:3f:5b:44:96:e9:8a:
                    07:89:86:61:72:12:57:f6:46:60:80:b2:20:1f:27:
                    9c:41:cc:ae:d6:d7:b6:d4:27:dc:02:14:9a:fc:26:
                    3c:b8:40:0d:8e:a5:d7:5d:43:81:b2:4c:5d:ef:9b:
                    8a:67:9d:b2:c4:d0:f1:23:1e:e4:05:3c:76:ee:0d:
                    9b:94:b2:55:41:c6:8f:d0:b3:7e:db:f7:db:00:4d:
                    17:f0:00:a5:09:fb:50:21:38:df:b0:32:88:29:3f:
                    d1:23:70:df:89:05:40:e4:1f:88:d1:77:f7:c0:c4:
                    33:1e:54:c6:01:d0:db:25:79:ad:4b:ba:82:f0:1e:
                    6a:8c:d6:4e:10:17:db:a5:b3:70:b8:7e:92:31:27:
                    e9:c3:d2:6c:de:9c:d3:d4:8a:64:92:11:5f:d4:78:
                    39:99:4b:af:8c:60:de:bb:23:97:d8:33:c7:eb:da:
                    fe:cc:50:9b:0c:ee:03:46:97:7c:a5:21:bc:dc:ab:
                    18:cd:ec:4a:52:1c:cc:a5:b9:49:41:f9:59:93:5c:
                    26:c9:e3:5d:61:c2:62:79:a5:00:e7:22:00:e3:c9:
                    3f:d6:b2:50:02:77:f2:0f:be:c6:3a:66:b5:5d:d3:
                    6d:73:88:4e:cf:ad:56:d1:fc:99:18:68:27:16:d2:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:8A:99:A8:5B:FA:E2:EE:3A:B5:E9:DA:85:5A:AB:CB:C3:E5:B8
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:48:4a:a2:30:d8:ea:c3:cb:c7:79:45:fb:65:4c:9a:36:
         9e:8f:bb:b5:3d:b4:c2:51:aa:f0:c5:58:75:fc:cc:27:bb:54:
         b7:81:44:fd:ed:18:a6:29:4c:25:8b:5c:6b:23:29:88:54:30:
         27:e2:be:cd:53:5b:a3:12:a8:03:48:d1:4a:30:86:66:7c:af:
         83:79:4e:17:18:9d:67:76:ed:2d:08:87:12:23:ae:8e:37:9d:
         7b:15:d0:3c:ed:0b:e8:ab:a1:c0:98:15:ae:52:6b:b4:78:9a:
         ad:53:d8:fb:96:30:cd:f0:ec:d0:59:ef:c8:f3:86:ae:a3:46:
         51:3c:cd:ad:3d:a7:3f:d0:03:be:02:4d:9f:90:40:46:bd:b1:
         69:ee:97:94:59:46:c8:91:96:bf:73:75:e6:b1:62:75:c3:2e:
         a5:4b:97:d0:6f:ae:a3:0f:37:84:ea:e3:e6:55:67:5d:a2:61:
         9f:fd:f2:7a:c7:d7:43:e5:79:50:10:39:9d:dd:f3:78:74:22:
         d4:bc:35:aa:3b:d2:5e:03:12:9d:bb:d4:72:c1:d7:43:3e:c0:
         9a:0d:75:e5:a5:7f:f5:9f:15:b5:dd:a1:7c:c6:ce:c8:a2:68:
         22:7b:15:6c:ee:51:98:17:71:b9:82:5d:41:83:b7:d1:d7:8d:
         b3:0f:ef:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8u4OSafCnKnIqTjOhxVobbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4
ZDQ3OWYwHhcNMjQwNDMwMTIwMDQxWhcNMjQwNTAxMTIwMDQxWjAzMTEwLwYDVQQD
EyhhMWRkOGE5OWE4NWJmYWUyZWUzYWI1ZTlkYTg1NWFhYmNiYzNlNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs6YJDJpDTQ/W0SW6YoHiYZhchJX
9kZggLIgHyecQcyu1te21CfcAhSa/CY8uEANjqXXXUOBskxd75uKZ52yxNDxIx7k
BTx27g2blLJVQcaP0LN+2/fbAE0X8AClCftQITjfsDKIKT/RI3DfiQVA5B+I0Xf3
wMQzHlTGAdDbJXmtS7qC8B5qjNZOEBfbpbNwuH6SMSfpw9Js3pzT1IpkkhFf1Hg5
mUuvjGDeuyOX2DPH69r+zFCbDO4DRpd8pSG83KsYzexKUhzMpblJQflZk1wmyeNd
YcJieaUA5yIA48k/1rJQAnfyD77GOma1XdNtc4hOz61W0fyZGGgnFtIM9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHdipmoW/ri7jq16dqFWqvLw+W4MB8GA1UdIwQY
MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt
YjE2NmFlMmVmMjg3LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3
LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB5ISqIw
2OrDy8d5RftlTJo2no+7tT20wlGq8MVYdfzMJ7tUt4FE/e0YpilMJYtcayMpiFQw
J+K+zVNboxKoA0jRSjCGZnyvg3lOFxidZ3btLQiHEiOujjedexXQPO0L6KuhwJgV
rlJrtHiarVPY+5YwzfDs0FnvyPOGrqNGUTzNrT2nP9ADvgJNn5BARr2xae6XlFlG
yJGWv3N15rFidcMupUuX0G+uow83hOrj5lVnXaJhn/3yesfXQ+V5UBA5nd3zeHQi
1Lw1qjvSXgMSnbvUcsHXQz7Amg115aV/9Z8Vtd2hfMbOyKJoInsVbO5RmBdxuYJd
QYO30deNsw/vnw==
-----END CERTIFICATE-----
Generated at Tue Apr 30 17:50:44 2024 by rpki-client on console-fra.rpki-client.org