Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File:                     3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier:          SgtBOAQ2HTPh5Cph+ZhxuGwXTDHAQVuXja4Dt7UlCpI=
Subject key identifier:   3B:FE:C0:01:06:7F:CA:45:51:D2:BF:47:85:2A:8B:D4:12:AA:39:31
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer:       /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial:       0194BAF21BD02AF80E98DF3C7F57BAE656E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number:          1444
Signing time:             Fri 31 Jan 2025 06:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:16 +0000
Files and hashes:         1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: 1PZwyknlpMH1QJD4yz55pb7uRZI4we5hLzfnjINPIpE=)
                          2: 7Dxx4GUfZshom9FbPHAxp-Z60ho.roa (hash: LXHxUD8d853bp48Kp4bHizsdXxzmRHG+cP9w4z3LY9k=)
                          3: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
                          4: dbK-R91ZSUb0vmB9yu9XwDJ_RDw.roa (hash: YNxHBvfEGT+DFTrI9P9oVpm7y0mnqXQpEkbudzfn+nA=)
                          5: m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa (hash: aOHIBtHSW3A5XSJ7tUzd+YLEbCI85PGx7m5TzFvcEu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:1b:d0:2a:f8:0e:98:df:3c:7f:57:ba:e6:56:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
        Validity
            Not Before: Jan 31 06:00:16 2025 GMT
            Not After : Feb  1 06:00:16 2025 GMT
        Subject: CN=3bfec001067fca4551d2bf47852a8bd412aa3931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:6b:bf:07:41:ea:3c:6e:c8:ca:94:c3:37:
                    34:8b:c5:6f:92:8e:fe:f1:92:fc:f3:9d:bb:b6:df:
                    eb:e6:39:b1:82:41:dd:ad:e7:0b:1c:c3:fd:54:ab:
                    88:74:6e:16:df:00:c5:55:22:84:37:99:78:cd:51:
                    af:f5:e3:9a:90:eb:54:f0:34:b4:31:55:ff:4e:26:
                    fc:55:a5:3a:2b:eb:74:86:a4:55:7e:35:4f:1e:29:
                    59:8d:aa:a2:05:2a:34:0d:a5:5f:36:dc:b4:34:91:
                    8a:bb:32:7c:14:b8:f7:22:76:51:fc:29:17:5a:30:
                    3d:38:a6:9b:f8:c0:23:03:d6:8f:a3:3b:ee:63:82:
                    c8:62:45:18:f4:13:db:59:12:f1:1c:e3:c5:2f:7c:
                    82:70:e5:8d:51:a4:df:df:82:b7:7c:ad:da:a6:d3:
                    63:11:89:bc:2b:cc:a0:39:45:38:1c:94:1b:99:25:
                    88:94:88:17:71:32:a9:1c:3a:21:0e:e9:73:68:e0:
                    32:91:5e:ff:d2:83:b2:a4:27:a6:f3:0e:11:84:94:
                    71:2a:fc:8c:f2:ed:4b:8a:fb:00:b7:7e:29:70:61:
                    c8:28:fa:23:98:09:c9:2c:f5:9b:81:d2:48:cd:82:
                    b4:9e:e3:d1:eb:69:48:8d:4c:b6:82:4e:5f:8c:31:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FE:C0:01:06:7F:CA:45:51:D2:BF:47:85:2A:8B:D4:12:AA:39:31
            X509v3 Authority Key Identifier:
                keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:85:14:d7:29:be:41:5b:1f:39:56:ac:1a:82:96:70:a5:de:
         b6:de:b2:f9:81:46:85:60:3f:89:31:18:da:42:11:c6:84:b0:
         84:c1:ac:30:fd:84:9d:3a:8f:61:8a:ea:fd:ec:4f:bb:6f:7e:
         00:7f:1e:2c:a3:aa:e9:88:64:ff:a4:1d:7e:a0:62:8d:dc:9e:
         c3:25:84:3e:ef:9b:e3:e2:c2:d6:2e:09:76:9c:22:c9:d1:1b:
         0f:34:f4:f3:f5:59:e0:74:cf:a0:89:68:12:e3:bb:11:bb:8c:
         2b:72:46:be:5f:9b:2e:64:9b:7a:4a:a1:86:b7:ea:df:d3:cc:
         ac:76:c2:13:88:2f:ad:d0:87:62:6d:57:6c:e7:9e:d5:b8:57:
         a2:0a:7d:f0:5c:f4:05:73:d0:d9:b8:7d:d3:73:38:af:19:4a:
         f7:00:55:33:45:40:61:b9:5b:cd:5a:89:d3:f7:ed:9a:c5:34:
         e4:69:1e:36:1e:4c:14:ce:80:ac:c9:98:b7:11:19:c6:bd:73:
         0b:b6:3a:dd:2a:f3:33:50:c0:a7:f7:34:9a:a4:3b:ca:1f:c6:
         a5:f6:86:3e:7b:26:0f:79:be:91:2b:72:97:0e:fc:0e:53:4d:
         1d:db:14:6e:76:88:36:5c:e0:5b:bf:2f:2b:a0:fa:d1:6b:6b:
         a5:ca:26:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68hvQKvgOmN88f1e65lblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2
OTQ1NTAwHhcNMjUwMTMxMDYwMDE2WhcNMjUwMjAxMDYwMDE2WjAzMTEwLwYDVQQD
EygzYmZlYzAwMTA2N2ZjYTQ1NTFkMmJmNDc4NTJhOGJkNDEyYWEzOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL5rvwdB6jxuyMqUwzc0i8Vvko7+
8ZL88527tt/r5jmxgkHdrecLHMP9VKuIdG4W3wDFVSKEN5l4zVGv9eOakOtU8DS0
MVX/Tib8VaU6K+t0hqRVfjVPHilZjaqiBSo0DaVfNty0NJGKuzJ8FLj3InZR/CkX
WjA9OKab+MAjA9aPozvuY4LIYkUY9BPbWRLxHOPFL3yCcOWNUaTf34K3fK3aptNj
EYm8K8ygOUU4HJQbmSWIlIgXcTKpHDohDulzaOAykV7/0oOypCem8w4RhJRxKvyM
8u1LivsAt34pcGHIKPojmAnJLPWbgdJIzYK0nuPR62lIjUy2gk5fjDECMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv+wAEGf8pFUdK/R4Uqi9QSqjkxMB8GA1UdIwQY
MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt
NGQ0YjE2MTQ0ZDY4LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4
LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIUU1ym+
QVsfOVasGoKWcKXett6y+YFGhWA/iTEY2kIRxoSwhMGsMP2EnTqPYYrq/exPu29+
AH8eLKOq6Yhk/6QdfqBijdyewyWEPu+b4+LC1i4JdpwiydEbDzT08/VZ4HTPoIlo
EuO7EbuMK3JGvl+bLmSbekqhhrfq39PMrHbCE4gvrdCHYm1XbOee1bhXogp98Fz0
BXPQ2bh903M4rxlK9wBVM0VAYblbzVqJ0/ftmsU05GkeNh5MFM6ArMmYtxEZxr1z
C7Y63SrzM1DAp/c0mqQ7yh/GpfaGPnsmD3m+kStylw78DlNNHdsUbnaINlzgW78v
K6D60WtrpcomMA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:28 2025 by rpki-client on console-fra.rpki-client.org