Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File:                     obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier:          sOExaDKjnMzzOH12m1IXU6d2fjhNXBF35fz96B1t41I=
Subject key identifier:   F0:44:9E:B0:41:35:49:A5:B6:56:03:CD:10:A6:8F:B0:14:D4:80:E4
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer:       /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial:       01901DEB68C5155796664744B01C9E0DD0A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number:          100A
Signing time:             Sat 15 Jun 2024 22:01:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:25 +0000
Files and hashes:         1: AFNvdpTozU-HSpE2Z117hQEmUAY.roa (hash: YPwhydqe5oJGCjoiGw7evElKiJE69427BiZ6370kXq8=)
                          2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: Bg45PMjPv+Lmob7Lva92VxIXWMrv8JyfiUc2iwN2UX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:68:c5:15:57:96:66:47:44:b0:1c:9e:0d:d0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
        Validity
            Not Before: Jun 15 22:01:25 2024 GMT
            Not After : Jun 16 22:01:25 2024 GMT
        Subject: CN=f0449eb0413549a5b65603cd10a68fb014d480e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:da:3a:ee:cf:f5:b5:14:01:a8:bd:80:fe:
                    89:c1:d5:b2:a8:7c:f6:4c:fd:be:9e:9b:ad:f0:e6:
                    02:dd:69:ea:d4:5b:5d:5e:9d:f1:1a:63:12:47:ef:
                    b0:33:8d:79:5d:10:7d:60:43:1a:e0:c0:81:bb:f5:
                    01:08:24:a1:4e:26:34:0d:10:12:24:92:f2:2b:c0:
                    30:b7:0a:5b:da:cc:e5:bb:86:b7:77:f6:58:51:3c:
                    d3:22:a2:b4:09:b4:0c:26:dc:4b:94:1b:52:87:78:
                    fb:a4:8f:89:60:01:ea:4d:4a:46:da:b8:29:58:a0:
                    14:64:0b:68:f9:ee:25:1b:90:b4:bd:cb:eb:2b:8f:
                    61:bd:c9:51:e9:1c:92:e0:84:4d:92:47:19:c5:da:
                    3c:d9:45:a3:19:3a:29:56:41:5b:9b:5d:2b:01:bd:
                    fc:04:30:57:39:34:8d:3d:91:57:d6:0d:33:aa:33:
                    e0:39:2d:e1:a1:d2:f9:60:01:b8:ef:db:c2:da:59:
                    98:79:d3:e1:2b:ba:31:db:52:89:c5:b2:5c:0f:d0:
                    fe:02:c9:f0:b2:83:5e:b4:07:d1:29:56:62:70:1a:
                    38:d3:8b:46:75:e6:4a:79:0a:ff:f4:f8:8d:ab:0b:
                    a4:cc:ca:ec:06:4f:43:42:f3:5f:77:29:78:9c:15:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:9E:B0:41:35:49:A5:B6:56:03:CD:10:A6:8F:B0:14:D4:80:E4
            X509v3 Authority Key Identifier:
                keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b1:31:8a:30:0c:0e:d0:19:d4:09:2e:44:2a:fb:8d:8a:ba:
         df:f2:f3:6a:62:09:17:10:e3:f2:f9:a6:aa:4e:9a:cc:e6:2b:
         50:11:8c:01:ab:9a:ed:72:fc:05:3a:72:32:6f:e6:9d:8c:25:
         a9:33:04:a2:18:57:2c:d9:30:20:bc:64:7f:a2:51:50:24:2b:
         eb:c2:90:6a:1f:c8:18:aa:fc:7b:71:3e:bc:0e:62:1e:b5:fd:
         9f:fe:65:d8:e8:b2:91:78:7f:95:9f:aa:c8:e8:97:c5:5d:56:
         e2:d3:da:5d:6a:a7:ed:42:8e:60:a3:cf:a8:84:1e:b2:80:d3:
         c8:7c:c4:fd:d3:ec:5e:15:a8:6c:64:69:77:16:82:03:3c:c2:
         91:10:cb:86:52:63:db:ad:b8:6c:03:a8:58:91:78:13:97:96:
         e0:7c:2d:0b:bd:91:5d:14:44:60:7e:f1:7e:66:8b:82:2f:7b:
         2d:b4:5a:72:ea:67:8c:2e:61:f1:5b:d4:ac:52:ed:37:aa:ac:
         32:6c:6d:cf:9f:f9:4a:52:18:33:34:0d:0d:1f:a4:3d:4b:30:
         6f:d6:93:27:96:57:12:79:3b:e0:44:55:c6:00:04:2b:c6:75:
         d5:6e:e7:3d:7d:c4:c2:14:e2:4b:01:54:10:76:48:53:b5:4e:
         6a:5e:8b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd62jFFVeWZkdEsByeDdCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjRkZDgzZmM1ZWNkMjEwZjRmNjg0ZmI2YmY0MGZiMzE2
MGRiMjEwHhcNMjQwNjE1MjIwMTI1WhcNMjQwNjE2MjIwMTI1WjAzMTEwLwYDVQQD
EyhmMDQ0OWViMDQxMzU0OWE1YjY1NjAzY2QxMGE2OGZiMDE0ZDQ4MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupfaOu7P9bUUAai9gP6JwdWyqHz2
TP2+nput8OYC3Wnq1FtdXp3xGmMSR++wM415XRB9YEMa4MCBu/UBCCShTiY0DRAS
JJLyK8Awtwpb2szlu4a3d/ZYUTzTIqK0CbQMJtxLlBtSh3j7pI+JYAHqTUpG2rgp
WKAUZAto+e4lG5C0vcvrK49hvclR6RyS4IRNkkcZxdo82UWjGTopVkFbm10rAb38
BDBXOTSNPZFX1g0zqjPgOS3hodL5YAG479vC2lmYedPhK7ox21KJxbJcD9D+Asnw
soNetAfRKVZicBo404tGdeZKeQr/9PiNqwukzMrsBk9DQvNfdyl4nBWjcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBEnrBBNUmltlYDzRCmj7AU1IDkMB8GA1UdIwQY
MBaAFKG03YP8Xs0hD09oT7a/QPsxYNshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgt
ZmIxODZiOTQzMzRmLzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgtZmIxODZiOTQzMzRm
LzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLExijAM
DtAZ1AkuRCr7jYq63/LzamIJFxDj8vmmqk6azOYrUBGMAaua7XL8BTpyMm/mnYwl
qTMEohhXLNkwILxkf6JRUCQr68KQah/IGKr8e3E+vA5iHrX9n/5l2OiykXh/lZ+q
yOiXxV1W4tPaXWqn7UKOYKPPqIQesoDTyHzE/dPsXhWobGRpdxaCAzzCkRDLhlJj
2624bAOoWJF4E5eW4HwtC72RXRREYH7xfmaLgi97LbRacupnjC5h8VvUrFLtN6qs
Mmxtz5/5SlIYMzQNDR+kPUswb9aTJ5ZXEnk74ERVxgAEK8Z11W7nPX3EwhTiSwFU
EHZIU7VOal6LTg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:59 2024 by rpki-client on console-ams.rpki-client.org