Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
File:                     O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json)
Hash identifier:          aQeBTn4tegvupAJWo2QDI0xOQQhDdC3G+mbc5Zk/14I=
Subject key identifier:   25:84:33:29:50:59:3B:06:CD:CA:B8:39:E5:C4:AF:05:DB:75:3B:EB
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Certificate issuer:       /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial:       01901DEB7A1C5E8B58533F7060F69F324D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
Manifest number:          05FE
Signing time:             Sat 15 Jun 2024 22:01:29 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:29 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:29 +0000
Files and hashes:         1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: vW/hDFas46MNzT5Ix7STDALYP11W2j4K2esrHqzN+wY=)
                          2: QugycpULQh-gXxmbxJJyhyXodBc.roa (hash: stJ0RgFSUMZ+VJYCDPlk1gzwzU3qFcoTmuuFzfVzk8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:7a:1c:5e:8b:58:53:3f:70:60:f6:9f:32:4d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
        Validity
            Not Before: Jun 15 22:01:29 2024 GMT
            Not After : Jun 16 22:01:29 2024 GMT
        Subject: CN=2584332950593b06cdcab839e5c4af05db753beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:2a:ef:be:6d:c4:68:4d:91:1e:19:c0:f5:
                    7a:fa:93:95:93:2a:89:83:d1:e8:56:a5:64:bf:63:
                    b8:a4:3c:7f:a5:2c:4b:2b:53:a3:be:52:31:2a:fe:
                    66:66:8b:a1:fa:7c:19:6e:46:af:33:a7:ad:27:60:
                    0b:18:a1:7c:53:e0:f4:32:db:a0:36:d2:75:f6:ab:
                    57:94:e2:66:5b:b9:99:30:6d:48:b5:7b:37:79:da:
                    f8:cc:47:b7:42:5b:e8:e7:ee:5f:fe:22:24:db:3b:
                    27:c1:b7:a3:dd:fb:2e:82:23:0b:79:9f:24:6c:5c:
                    87:44:a2:5d:94:14:11:a2:ad:99:e9:3d:ee:bb:ae:
                    61:ad:ee:5e:25:0d:d7:32:81:af:50:ac:3f:5d:db:
                    00:94:d7:ed:72:d6:e0:8c:8f:be:ef:a2:e7:75:39:
                    68:1f:33:35:e0:f6:75:94:8a:f3:01:b4:c3:00:3b:
                    08:e5:f3:01:a5:0a:f9:f8:bb:fb:79:ec:33:a6:06:
                    eb:92:b4:cb:cd:7d:e2:c2:aa:13:67:0c:09:b6:5e:
                    2a:06:bd:8a:2b:da:63:e1:b4:2c:6f:87:b2:8f:43:
                    4c:b7:87:c0:16:3a:32:00:c3:7a:af:f5:b0:c7:2b:
                    fd:3d:84:bb:81:3f:65:4a:51:11:91:89:8c:2a:b4:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:84:33:29:50:59:3B:06:CD:CA:B8:39:E5:C4:AF:05:DB:75:3B:EB
            X509v3 Authority Key Identifier:
                keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:eb:7a:d1:9f:ba:7f:ca:de:28:75:46:0f:80:85:03:a0:
         b5:4a:49:b2:09:c7:49:4d:4b:1f:8e:87:1a:9f:cb:3e:21:4c:
         82:2e:ad:8c:fe:47:16:d1:0c:c6:9a:1e:f0:1a:8a:fd:d5:73:
         09:48:29:33:10:be:c7:23:11:63:80:eb:3f:dc:9f:7d:06:15:
         e2:7e:26:5d:d3:e7:7d:d3:84:e9:e5:62:df:bf:5a:24:d6:f3:
         32:52:71:49:1d:e9:5d:da:1e:c5:bd:9f:81:0e:4a:24:21:e4:
         ff:c6:58:0a:b6:43:e4:b8:16:cf:43:8e:00:07:a4:a3:b7:7d:
         b8:dc:87:4c:a3:b3:b3:93:3b:07:0f:61:91:c6:e2:49:cf:f5:
         57:69:e0:cd:98:0b:33:04:2f:5c:01:d3:7a:b6:07:f7:c0:e8:
         f7:4c:a9:1d:48:43:9a:59:d9:25:e4:09:c8:1b:b0:2d:df:6c:
         3c:e0:cc:6b:b1:7c:95:0f:49:21:ae:bb:4a:6f:8d:47:7b:4c:
         7c:c9:a9:fb:b0:48:4f:16:33:63:8e:69:2c:5a:24:fe:d6:ac:
         a6:95:cf:bc:59:91:b0:60:80:d0:cf:f8:00:85:02:ae:ba:bf:
         77:1d:84:d1:10:5d:a4:42:29:23:ca:06:c5:a3:4a:a1:87:7a:
         71:d5:93:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd63ocXotYUz9wYPafMk1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj
OTgxYjYwHhcNMjQwNjE1MjIwMTI5WhcNMjQwNjE2MjIwMTI5WjAzMTEwLwYDVQQD
EygyNTg0MzMyOTUwNTkzYjA2Y2RjYWI4MzllNWM0YWYwNWRiNzUzYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Yq775txGhNkR4ZwPV6+pOVkyqJ
g9HoVqVkv2O4pDx/pSxLK1OjvlIxKv5mZouh+nwZbkavM6etJ2ALGKF8U+D0Mtug
NtJ19qtXlOJmW7mZMG1ItXs3edr4zEe3Qlvo5+5f/iIk2zsnwbej3fsugiMLeZ8k
bFyHRKJdlBQRoq2Z6T3uu65hre5eJQ3XMoGvUKw/XdsAlNftctbgjI++76LndTlo
HzM14PZ1lIrzAbTDADsI5fMBpQr5+Lv7eewzpgbrkrTLzX3iwqoTZwwJtl4qBr2K
K9pj4bQsb4eyj0NMt4fAFjoyAMN6r/Wwxyv9PYS7gT9lSlERkYmMKrS47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWEMylQWTsGzcq4OeXErwXbdTvrMB8GA1UdIwQY
MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt
ZWQ5OWVmNjRhZGJmLzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm
LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgR3retGf
un/K3ih1Rg+AhQOgtUpJsgnHSU1LH46HGp/LPiFMgi6tjP5HFtEMxpoe8BqK/dVz
CUgpMxC+xyMRY4DrP9yffQYV4n4mXdPnfdOE6eVi379aJNbzMlJxSR3pXdoexb2f
gQ5KJCHk/8ZYCrZD5LgWz0OOAAeko7d9uNyHTKOzs5M7Bw9hkcbiSc/1V2ngzZgL
MwQvXAHTerYH98Do90ypHUhDmlnZJeQJyBuwLd9sPODMa7F8lQ9JIa67Sm+NR3tM
fMmp+7BITxYzY45pLFok/tasppXPvFmRsGCA0M/4AIUCrrq/dx2E0RBdpEIpI8oG
xaNKoYd6cdWTMA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:52:24 2024 by rpki-client on console-fra.rpki-client.org