Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File:                     _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier:          dlQXbBSi9cpU6uoEyM+2fY30qbRhGyOjMlQaOl9BI0k=
Subject key identifier:   0B:2B:BB:9D:94:CB:51:54:6B:CB:DC:55:49:8E:29:31:98:24:EB:B4
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer:       /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial:       01901E58D7450E906FA6DDB2C123D63CE69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number:          05AD
Signing time:             Sun 16 Jun 2024 00:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:57 +0000
Files and hashes:         1: 5pVV75LVEWJ-UISZW9X1OAguEaQ.roa (hash: 8D3xLtKyWkUMxpT4v8hgfb/BW9Xqy7fxSQW25rVJExM=)
                          2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: HcZuTU4IPodT+7FRfiEDKSAZAiqFBb+sFyCNIJQLBf4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:d7:45:0e:90:6f:a6:dd:b2:c1:23:d6:3c:e6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
        Validity
            Not Before: Jun 16 00:00:57 2024 GMT
            Not After : Jun 17 00:00:57 2024 GMT
        Subject: CN=0b2bbb9d94cb51546bcbdc55498e29319824ebb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:b7:35:6d:60:77:73:f0:e3:47:b1:6f:4b:
                    61:d4:f8:ac:7a:cb:c5:e4:e8:d5:d5:e4:c1:2e:0b:
                    41:f6:6b:54:77:e0:39:cb:0e:b6:13:63:c9:54:0e:
                    eb:24:69:4e:52:c8:c6:9b:db:4e:a7:48:6b:be:17:
                    1a:3f:63:ea:89:c4:b4:86:84:08:fb:68:f0:43:68:
                    40:03:a6:41:e9:8b:0f:e8:b5:72:54:25:6b:24:78:
                    72:f7:32:a3:cd:9c:23:d3:63:cf:b0:99:9a:8b:33:
                    ba:d4:f0:f7:5d:03:d6:6c:19:29:52:18:ec:6f:12:
                    f6:49:48:c4:5d:7c:a5:1a:6f:69:58:2c:d3:81:d7:
                    63:b0:f2:44:ac:5c:8e:e1:fb:40:8e:81:71:08:11:
                    77:60:49:26:e2:c8:16:e5:92:d1:52:52:ce:e9:db:
                    9b:9c:80:fb:90:77:fb:f3:5c:8e:86:61:91:2a:74:
                    00:87:a0:96:46:4b:2e:ee:75:b7:55:9c:13:90:7b:
                    eb:6d:ea:16:ff:11:4a:7a:fa:e6:f9:11:cd:bf:0c:
                    3a:63:16:4b:03:8a:bb:33:b7:52:9e:25:d8:30:bb:
                    87:8f:bd:16:ba:23:0e:c5:f9:30:04:7a:43:5e:3c:
                    b2:ac:bc:5e:4b:01:be:e0:01:15:17:5e:6f:f5:67:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:BB:9D:94:CB:51:54:6B:CB:DC:55:49:8E:29:31:98:24:EB:B4
            X509v3 Authority Key Identifier:
                keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d1:c5:18:42:0f:a6:74:69:d5:11:67:95:61:95:cb:1b:19:
         a8:ba:5f:76:aa:d9:79:df:61:25:11:31:2e:a4:ac:f8:9c:56:
         b1:15:b9:3d:4b:f5:db:d5:20:24:3d:76:b8:c2:2d:b8:34:69:
         c9:bc:0a:df:01:93:74:b7:7c:ce:0f:bb:e4:8c:9e:00:78:d5:
         eb:8e:b3:d8:43:82:92:f9:2a:c1:2e:ce:d6:28:13:d8:f1:20:
         40:13:76:31:24:4e:4f:de:1c:f4:60:a6:b1:4b:6a:7c:2e:f3:
         2b:01:67:64:2c:2b:24:94:46:ba:80:94:05:0b:dd:33:bf:9e:
         97:49:68:62:6c:56:86:10:68:5c:19:57:56:81:2c:a6:5b:b5:
         48:06:51:ab:09:e6:3d:60:a6:c4:24:c0:b1:31:7a:8b:18:89:
         9d:cb:40:df:19:30:ca:8c:9b:1e:b2:f2:a1:94:ca:31:e1:92:
         d6:4e:35:a2:f0:db:78:2d:87:a2:55:19:92:7a:91:19:67:0b:
         cd:ba:66:89:a7:3b:75:2c:f4:a8:66:3d:9c:6c:af:0a:93:21:
         7f:eb:44:49:e3:78:71:76:49:13:cf:83:1c:d3:9b:80:e0:91:
         71:a8:5e:c0:c0:24:ca:95:32:3c:35:57:d4:f1:cc:3e:06:94:
         7c:a1:4d:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWNdFDpBvpt2ywSPWPOafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOGI0OTQ0NTUyNzdmZjUzMDAyNWNlZjJkNTFkZjdlYWI4
ZTQ1MTAwHhcNMjQwNjE2MDAwMDU3WhcNMjQwNjE3MDAwMDU3WjAzMTEwLwYDVQQD
EygwYjJiYmI5ZDk0Y2I1MTU0NmJjYmRjNTU0OThlMjkzMTk4MjRlYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWi3NW1gd3Pw40exb0th1PisesvF
5OjV1eTBLgtB9mtUd+A5yw62E2PJVA7rJGlOUsjGm9tOp0hrvhcaP2PqicS0hoQI
+2jwQ2hAA6ZB6YsP6LVyVCVrJHhy9zKjzZwj02PPsJmaizO61PD3XQPWbBkpUhjs
bxL2SUjEXXylGm9pWCzTgddjsPJErFyO4ftAjoFxCBF3YEkm4sgW5ZLRUlLO6dub
nID7kHf781yOhmGRKnQAh6CWRksu7nW3VZwTkHvrbeoW/xFKevrm+RHNvww6YxZL
A4q7M7dSniXYMLuHj70WuiMOxfkwBHpDXjyyrLxeSwG+4AEVF15v9WelmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsru52Uy1FUa8vcVUmOKTGYJOu0MB8GA1UdIwQY
MBaAFP6LSURVJ3/1MAJc7y1R336rjkUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYt
YzhjYzViMmQwYWVkLzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83NjFhM2UtODgwZS00ZjdjLTkzNjYtYzhjYzViMmQwYWVk
LzEvX290SlJGVW5mX1V3QWx6dkxWSGZmcXVPUlJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9HFGEIP
pnRp1RFnlWGVyxsZqLpfdqrZed9hJRExLqSs+JxWsRW5PUv129UgJD12uMItuDRp
ybwK3wGTdLd8zg+75IyeAHjV646z2EOCkvkqwS7O1igT2PEgQBN2MSROT94c9GCm
sUtqfC7zKwFnZCwrJJRGuoCUBQvdM7+el0loYmxWhhBoXBlXVoEsplu1SAZRqwnm
PWCmxCTAsTF6ixiJnctA3xkwyoybHrLyoZTKMeGS1k41ovDbeC2HolUZknqRGWcL
zbpmiac7dSz0qGY9nGyvCpMhf+tESeN4cXZJE8+DHNObgOCRcahewMAkypUyPDVX
1PHMPgaUfKFNUA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:54:21 2024 by rpki-client on console-ams.rpki-client.org