Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File:                     om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier:          W05djCrvwTBrghaRPcnO1Yx04q6wNyZqKME7/V8MKwk=
Subject key identifier:   24:48:23:B3:29:C8:7D:C2:8C:F0:3E:F5:E3:D2:4C:71:A8:35:2C:73
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer:       /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial:       019045D4B254CD0874FD89F651C49239CAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number:          08A5
Signing time:             Sun 23 Jun 2024 16:01:25 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:25 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:25 +0000
Files and hashes:         1: WwY-nLhTXzLlGKHswoQ2mOAXqRw.roa (hash: Xpch0RZVequjQtYrC/m4prhI18utYzRMRqpQ9XFjBJY=)
                          2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: 8fKlIuNw1p0wqlbAiLDX7shoLByMbDDl+ImV6OEAjQE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:b2:54:cd:08:74:fd:89:f6:51:c4:92:39:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
        Validity
            Not Before: Jun 23 16:01:25 2024 GMT
            Not After : Jun 24 16:01:25 2024 GMT
        Subject: CN=244823b329c87dc28cf03ef5e3d24c71a8352c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:4f:9b:b2:36:67:16:ad:2b:2a:c9:b0:3f:
                    30:28:fe:5f:5f:a5:00:63:1d:f1:44:d5:07:95:0e:
                    47:51:78:05:7d:95:cd:b3:db:e5:f6:6a:56:5e:91:
                    35:89:30:64:aa:4d:50:b2:05:3a:95:5a:03:d6:5e:
                    4d:cb:61:b9:47:03:41:3c:f4:43:49:66:10:b5:cf:
                    7a:cf:e3:a9:48:80:80:bf:e5:c8:73:7c:25:39:ac:
                    a6:b3:fe:37:ab:f7:b0:ad:f9:4b:5c:0a:d3:c2:45:
                    13:18:92:18:91:18:98:89:c7:e4:36:93:2d:5d:cc:
                    bf:22:12:63:c7:d1:d1:b4:a1:92:5e:06:f9:72:64:
                    45:72:1c:49:35:e5:44:c7:b9:aa:ec:67:61:13:67:
                    49:ce:df:af:86:22:df:9e:4a:be:0b:9e:19:c9:17:
                    c1:ac:2f:ad:80:ed:08:ae:ff:ed:b9:0e:3c:01:1f:
                    4b:29:b1:c7:05:d9:6c:a6:70:06:4d:d4:d9:5c:db:
                    48:60:38:c7:74:25:64:3d:db:50:78:9c:94:98:af:
                    9c:2a:c5:83:70:96:88:e5:fa:38:b1:40:67:0f:82:
                    70:1e:12:f7:69:68:7a:d4:5d:da:1b:aa:ae:34:d2:
                    0b:3a:50:42:b8:a0:0e:f7:65:02:0f:3c:ac:8d:7e:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:48:23:B3:29:C8:7D:C2:8C:F0:3E:F5:E3:D2:4C:71:A8:35:2C:73
            X509v3 Authority Key Identifier:
                keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:6d:cc:41:d9:2e:ff:96:61:30:30:56:c3:0e:ae:5f:7e:
         16:25:2c:83:fb:47:6a:6c:2d:c6:98:16:c5:de:21:f0:6e:a9:
         be:bb:c3:5e:36:84:1a:3a:49:16:2e:9d:31:f0:f0:57:d4:15:
         ac:68:74:a9:ff:cc:47:27:d9:54:11:4e:b0:46:d0:b9:58:16:
         06:9f:1c:74:d6:c3:16:13:01:a3:77:9e:3f:fd:cf:c3:74:5d:
         2c:fe:4e:4f:fc:eb:b3:34:02:66:2b:9f:45:14:97:c0:df:f0:
         f0:98:d1:46:bd:96:92:d9:3f:09:af:c6:d6:fd:c6:57:bb:49:
         16:fc:85:d5:04:24:89:d7:4d:b8:a8:63:30:66:a1:98:28:40:
         0a:35:9f:bd:ec:a2:e2:70:a8:a0:65:eb:96:4d:74:4c:f2:69:
         97:f7:16:43:d4:63:b9:27:18:d2:21:6b:b2:ee:d5:a1:76:c2:
         94:eb:1c:c1:53:70:49:60:55:a5:e5:d0:ab:68:11:5b:e9:d3:
         a5:99:0f:48:8d:e7:c0:ca:5b:a0:19:f6:4d:ea:9e:8c:c9:05:
         34:54:4d:e5:00:0f:80:0b:59:73:c0:67:71:42:be:bf:ce:88:
         e2:31:02:70:fd:a4:f8:fe:a6:f8:40:77:45:9c:ef:be:87:96:
         f4:1f:55:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBF1LJUzQh0/Yn2UcSSOcrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz
OWNhMDIwHhcNMjQwNjIzMTYwMTI1WhcNMjQwNjI0MTYwMTI1WjAzMTEwLwYDVQQD
EygyNDQ4MjNiMzI5Yzg3ZGMyOGNmMDNlZjVlM2QyNGM3MWE4MzUyYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSZPm7I2ZxatKyrJsD8wKP5fX6UA
Yx3xRNUHlQ5HUXgFfZXNs9vl9mpWXpE1iTBkqk1QsgU6lVoD1l5Ny2G5RwNBPPRD
SWYQtc96z+OpSICAv+XIc3wlOayms/43q/ewrflLXArTwkUTGJIYkRiYicfkNpMt
Xcy/IhJjx9HRtKGSXgb5cmRFchxJNeVEx7mq7GdhE2dJzt+vhiLfnkq+C54ZyRfB
rC+tgO0Irv/tuQ48AR9LKbHHBdlspnAGTdTZXNtIYDjHdCVkPdtQeJyUmK+cKsWD
cJaI5fo4sUBnD4JwHhL3aWh61F3aG6quNNILOlBCuKAO92UCDzysjX4cawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRII7MpyH3CjPA+9ePSTHGoNSxzMB8GA1UdIwQY
MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt
YmYyYzdhMzkwOGRhLzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh
LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArNtzEHZ
Lv+WYTAwVsMOrl9+FiUsg/tHamwtxpgWxd4h8G6pvrvDXjaEGjpJFi6dMfDwV9QV
rGh0qf/MRyfZVBFOsEbQuVgWBp8cdNbDFhMBo3eeP/3Pw3RdLP5OT/zrszQCZiuf
RRSXwN/w8JjRRr2Wktk/Ca/G1v3GV7tJFvyF1QQkiddNuKhjMGahmChACjWfveyi
4nCooGXrlk10TPJpl/cWQ9RjuScY0iFrsu7VoXbClOscwVNwSWBVpeXQq2gRW+nT
pZkPSI3nwMpboBn2TeqejMkFNFRN5QAPgAtZc8BncUK+v86I4jECcP2k+P6m+EB3
RZzvvoeW9B9Veg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:26:29 2024 by rpki-client on console-ams.rpki-client.org