Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File:                     3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier:          IYoWUoB7noEJsKgDwHUPC8R7JnqnScEui21iX5xunPk=
Subject key identifier:   B5:2B:A3:2C:10:F2:90:EB:91:06:07:7A:2B:A2:0D:2F:2A:4B:82:1D
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer:       /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial:       018F33D025583B689B6933471F030CDA291B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number:          1154
Signing time:             Wed 01 May 2024 11:00:30 +0000
Manifest this update:     Wed 01 May 2024 11:00:30 +0000
Manifest next update:     Thu 02 May 2024 11:00:30 +0000
Files and hashes:         1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: qTS7H0NEme+zoJeR8iz5wywJ78r5Kjr1GJO6S8BqddM=)
                          2: EeC9dXIfKNQX3vmx4QBu9kqjojU.roa (hash: kaU//+XuxfAsCiTXG7ignphzewftmi6mNXD+lpTydvo=)
                          3: bokKLkSZvrExy0ym3GNF82xElNM.roa (hash: AthF+hJDHoL759Lkm7lcavlWgZZSKnXOQMhCAaM/lYU=)
                          4: zZAcBvA6RSpJHlMTgCYA67FRK5o.roa (hash: U/OppZFgfILlFSwQjJLiLU0kqN7MJVXFczopCh/x/xA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:d0:25:58:3b:68:9b:69:33:47:1f:03:0c:da:29:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
        Validity
            Not Before: May  1 11:00:30 2024 GMT
            Not After : May  2 11:00:30 2024 GMT
        Subject: CN=b52ba32c10f290eb9106077a2ba20d2f2a4b821d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:13:24:2e:1f:24:23:ba:59:7d:03:65:92:
                    9a:ca:50:3b:d7:06:8f:d2:e8:2f:84:4d:af:bb:a3:
                    4d:9b:a0:a7:da:b4:49:8b:ba:98:cb:32:43:20:ca:
                    79:57:00:b8:97:f4:ac:97:e7:d6:76:62:89:9a:24:
                    bb:76:7f:04:2e:a4:28:1a:22:38:16:d5:0e:fc:b9:
                    22:a0:c5:88:4b:17:1a:a9:4d:9f:84:0e:4b:b0:d5:
                    12:67:3d:42:0a:1b:2a:2f:98:ab:b0:a8:40:60:80:
                    5b:69:ad:2f:d8:dc:20:66:e9:4f:d0:2a:47:7e:bd:
                    6d:62:3b:2a:50:18:d2:74:5e:d5:bb:83:ab:26:50:
                    ee:6d:09:1d:fc:9f:15:9b:f4:49:c1:c6:38:a6:d2:
                    14:d2:dc:41:fc:fa:27:34:d0:d7:11:1c:77:2a:74:
                    f6:dd:3b:90:46:d8:4a:ec:84:a7:cf:3f:bf:af:8f:
                    62:68:0b:47:26:cd:3c:5a:1b:bf:b5:8d:34:6d:5e:
                    de:ad:61:d7:85:95:61:24:4c:9c:0e:d3:24:e7:6a:
                    a5:46:3d:a2:a0:47:97:5a:34:a0:fb:ee:96:6d:12:
                    92:9b:f0:00:4f:cd:b0:fc:ba:c6:14:24:e6:4c:09:
                    3d:38:d8:58:7e:3e:a2:08:da:58:18:d3:3c:60:33:
                    9d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2B:A3:2C:10:F2:90:EB:91:06:07:7A:2B:A2:0D:2F:2A:4B:82:1D
            X509v3 Authority Key Identifier:
                keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:12:15:df:53:36:cc:ff:a1:af:16:23:2c:f0:09:8b:7f:ea:
         7e:82:c0:df:2f:97:ba:1c:e6:97:69:74:1d:e4:67:98:4d:7d:
         3b:11:29:81:61:9d:c1:15:3a:a2:62:fc:b3:ca:84:e5:f7:2d:
         e7:85:3e:6b:63:15:08:57:ab:66:0a:aa:6d:79:c5:22:00:e9:
         f7:97:56:48:73:d2:75:b4:77:03:c8:c2:ba:88:4d:19:25:f3:
         fa:e1:b7:21:de:b5:7d:e8:ca:a6:38:7a:6b:fc:d9:62:2e:04:
         79:2c:98:8c:3f:64:8a:da:05:46:35:34:e9:b8:3a:c0:51:f2:
         09:11:39:a9:e7:5f:27:e9:fa:a9:83:c4:b8:f9:79:b7:9a:85:
         a6:45:5e:39:7b:9e:b4:e6:75:9c:ab:6a:cd:9a:eb:14:d0:16:
         10:74:54:02:97:2e:c5:3b:21:c7:3b:9f:e3:18:b4:f7:1b:c2:
         d9:99:96:dd:6e:af:bb:d5:2d:dc:b9:68:4d:97:68:54:23:06:
         1c:33:e3:e4:b1:47:1a:b5:3a:03:b0:e6:59:39:34:6d:fd:7b:
         36:ed:3b:0d:37:63:ff:19:5e:33:11:52:d5:ab:6e:10:8f:19:
         99:c3:30:1b:e4:44:2d:0e:73:3a:3f:f8:b6:bc:ec:ec:a7:0e:
         af:ec:82:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8z0CVYO2ibaTNHHwMM2ikbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2
ZGNmMTAwHhcNMjQwNTAxMTEwMDMwWhcNMjQwNTAyMTEwMDMwWjAzMTEwLwYDVQQD
EyhiNTJiYTMyYzEwZjI5MGViOTEwNjA3N2EyYmEyMGQyZjJhNGI4MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu8TJC4fJCO6WX0DZZKaylA71waP
0ugvhE2vu6NNm6Cn2rRJi7qYyzJDIMp5VwC4l/Ssl+fWdmKJmiS7dn8ELqQoGiI4
FtUO/LkioMWISxcaqU2fhA5LsNUSZz1CChsqL5irsKhAYIBbaa0v2NwgZulP0CpH
fr1tYjsqUBjSdF7Vu4OrJlDubQkd/J8Vm/RJwcY4ptIU0txB/PonNNDXERx3KnT2
3TuQRthK7ISnzz+/r49iaAtHJs08Whu/tY00bV7erWHXhZVhJEycDtMk52qlRj2i
oEeXWjSg++6WbRKSm/AAT82w/LrGFCTmTAk9ONhYfj6iCNpYGNM8YDOdUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUroywQ8pDrkQYHeiuiDS8qS4IdMB8GA1UdIwQY
MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt
ODVhOTU1ZjIxNjNiLzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi
LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRIV31M2
zP+hrxYjLPAJi3/qfoLA3y+Xuhzml2l0HeRnmE19OxEpgWGdwRU6omL8s8qE5fct
54U+a2MVCFerZgqqbXnFIgDp95dWSHPSdbR3A8jCuohNGSXz+uG3Id61fejKpjh6
a/zZYi4EeSyYjD9kitoFRjU06bg6wFHyCRE5qedfJ+n6qYPEuPl5t5qFpkVeOXue
tOZ1nKtqzZrrFNAWEHRUApcuxTshxzuf4xi09xvC2ZmW3W6vu9Ut3LloTZdoVCMG
HDPj5LFHGrU6A7DmWTk0bf17Nu07DTdj/xleMxFS1atuEI8ZmcMwG+RELQ5zOj/4
trzs7KcOr+yCQw==
-----END CERTIFICATE-----
Generated at Wed May 1 18:09:51 2024 by rpki-client on console-fra.rpki-client.org