Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File:                     OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier:          iGj7cW4c1/L91858MBzErm5PsLXVR6Pwl97X2EVHCIE=
Subject key identifier:   A0:81:2A:E0:A6:85:D9:65:44:AF:4F:E4:77:43:75:CD:79:21:67:82
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer:       /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial:       01907207AC2912E0727265248A7393819456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number:          11F1
Signing time:             Tue 02 Jul 2024 06:00:23 +0000
Manifest this update:     Tue 02 Jul 2024 06:00:23 +0000
Manifest next update:     Wed 03 Jul 2024 06:00:23 +0000
Files and hashes:         1: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: zCvtDO80/qDIfhBHzFFpl+s4isGXWEo1FUY/vdUhtRU=)
                          2: sydj1g8aOyHHcpl-cnS6urwiH9Y.roa (hash: qOa0H9HFeUGIIe/u3q65rYJvj02XaObiuj8+wJwZbro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:07:ac:29:12:e0:72:72:65:24:8a:73:93:81:94:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
        Validity
            Not Before: Jul  2 06:00:23 2024 GMT
            Not After : Jul  3 06:00:23 2024 GMT
        Subject: CN=a0812ae0a685d96544af4fe4774375cd79216782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:86:20:1f:22:17:65:44:30:83:21:87:9b:
                    46:2c:f5:7b:c0:d1:09:63:be:ea:a9:1e:eb:cd:89:
                    4b:5f:40:74:9d:ea:26:fc:ec:09:31:cf:ff:d7:e5:
                    a9:40:f9:87:9d:73:03:ff:6e:84:63:07:eb:a6:96:
                    a1:08:d5:6e:8f:c3:38:1d:50:8d:ff:77:34:3b:3a:
                    6a:94:c1:c5:c3:0c:43:2a:86:f0:f0:38:ef:ee:13:
                    d0:cf:73:5d:44:6c:56:61:84:58:61:5e:c7:08:f0:
                    c9:19:00:af:37:b0:98:06:e3:ac:5f:68:8d:36:08:
                    31:da:82:c2:7a:59:1a:b4:28:30:21:fe:f2:01:77:
                    8e:43:83:a6:e4:be:8e:4a:37:f9:1c:bf:cc:54:e6:
                    16:2d:ea:38:a0:5f:d6:9e:bb:ba:46:b2:97:09:c1:
                    d5:af:07:d3:78:39:91:df:e7:d7:56:dd:7e:87:fe:
                    b3:76:23:6a:d5:c8:9d:06:d5:c9:c4:00:bd:30:2d:
                    25:78:84:70:cb:c7:ab:b5:d4:23:a9:d6:1e:b9:6d:
                    db:09:97:9e:85:cd:16:d4:cf:5d:9c:9a:8a:39:ac:
                    f7:ea:fc:15:c1:a5:b1:fb:ae:f7:79:06:74:60:d1:
                    a0:5d:1f:13:ee:4a:64:eb:91:e7:e6:72:c3:3e:5d:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:81:2A:E0:A6:85:D9:65:44:AF:4F:E4:77:43:75:CD:79:21:67:82
            X509v3 Authority Key Identifier:
                keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a8:ba:ea:aa:2f:ca:51:28:ed:78:2a:35:b6:22:8e:57:a6:
         6e:d8:be:d7:f7:24:0b:b9:8f:c8:18:cb:f7:a4:d3:12:e8:44:
         8f:da:8f:c8:fe:7b:88:92:b7:38:d1:3f:b7:c2:1b:6e:3b:9d:
         e3:db:cd:be:6d:5a:1c:60:18:0f:09:71:dd:79:4f:bb:23:5e:
         c3:b8:7f:21:99:9f:51:f1:2f:99:91:65:27:30:20:4c:d5:08:
         2f:1f:6b:53:0e:84:43:62:2e:f9:f5:ed:b6:b5:4f:e4:a9:40:
         7e:e1:e6:1a:84:56:4c:54:e6:72:b5:2a:ba:24:57:a4:fe:b5:
         ff:6b:e1:db:0b:48:42:63:26:be:24:a4:8b:fd:47:41:34:90:
         1e:5d:42:3d:91:88:60:13:ed:7b:47:0a:e1:3b:38:77:95:84:
         ea:b5:42:eb:02:2c:77:69:16:10:7e:d9:cc:f1:64:57:78:66:
         cd:90:84:f7:43:0c:d1:d2:6f:8b:fa:1d:85:e1:59:8c:ae:90:
         27:51:85:bb:1f:53:27:80:49:ae:5c:ec:81:61:99:67:92:63:
         33:4d:5b:08:58:4d:6f:09:ab:57:43:d6:2c:84:61:a1:6f:22:
         48:0f:a2:81:2d:f6:0c:58:39:d0:fb:3e:1a:f6:3f:a9:4b:2a:
         d2:2f:0d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZByB6wpEuBycmUkinOTgZRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NGM2ZjczYjNjODM4ODFmZmM4ZTY2MDNhNmI2NGY0NTM2
NWFjZjEwHhcNMjQwNzAyMDYwMDIzWhcNMjQwNzAzMDYwMDIzWjAzMTEwLwYDVQQD
EyhhMDgxMmFlMGE2ODVkOTY1NDRhZjRmZTQ3NzQzNzVjZDc5MjE2NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwGGIB8iF2VEMIMhh5tGLPV7wNEJ
Y77qqR7rzYlLX0B0neom/OwJMc//1+WpQPmHnXMD/26EYwfrppahCNVuj8M4HVCN
/3c0OzpqlMHFwwxDKobw8Djv7hPQz3NdRGxWYYRYYV7HCPDJGQCvN7CYBuOsX2iN
Nggx2oLCelkatCgwIf7yAXeOQ4Om5L6OSjf5HL/MVOYWLeo4oF/Wnru6RrKXCcHV
rwfTeDmR3+fXVt1+h/6zdiNq1cidBtXJxAC9MC0leIRwy8ertdQjqdYeuW3bCZee
hc0W1M9dnJqKOaz36vwVwaWx+673eQZ0YNGgXR8T7kpk65Hn5nLDPl3NmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCBKuCmhdllRK9P5HdDdc15IWeCMB8GA1UdIwQY
MBaAFDlMb3OzyDiB/8jmYDprZPRTZazxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEt
Njk2OGUyZDgxODI2LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEtNjk2OGUyZDgxODI2
LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqi66qov
ylEo7XgqNbYijlembti+1/ckC7mPyBjL96TTEuhEj9qPyP57iJK3ONE/t8Ibbjud
49vNvm1aHGAYDwlx3XlPuyNew7h/IZmfUfEvmZFlJzAgTNUILx9rUw6EQ2Iu+fXt
trVP5KlAfuHmGoRWTFTmcrUquiRXpP61/2vh2wtIQmMmviSki/1HQTSQHl1CPZGI
YBPte0cK4Ts4d5WE6rVC6wIsd2kWEH7ZzPFkV3hmzZCE90MM0dJvi/odheFZjK6Q
J1GFux9TJ4BJrlzsgWGZZ5JjM01bCFhNbwmrV0PWLIRhoW8iSA+igS32DFg50Ps+
GvY/qUsq0i8NWg==
-----END CERTIFICATE-----
Generated at Tue Jul 2 14:22:06 2024 by rpki-client on console-ams.rpki-client.org