Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File:                     OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier:          fjEr3oDF6aKkLO1bFr1MZb+qQKZICT1BatognhMkLmQ=
Subject key identifier:   4E:74:D5:31:43:94:38:4D:AC:BB:82:7C:51:3A:CF:66:76:60:D3:F1
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer:       /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial:       01902424172EEA1D97A8A0EB263666A487C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number:          115B
Signing time:             Mon 17 Jun 2024 03:01:03 +0000
Manifest this update:     Mon 17 Jun 2024 03:01:03 +0000
Manifest next update:     Tue 18 Jun 2024 03:01:03 +0000
Files and hashes:         1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: ju6eh4Ak5d/khf1OJ2g3k1uHmajoI9wSNKKUzvRWCxY=)
                          2: SYp0J36rQZqtkqdTrXU5Svx2UXM.roa (hash: wOazDhLny4+Be8h/EYc6lqyAvxDId4sPK6NfRj7zydY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:24:24:17:2e:ea:1d:97:a8:a0:eb:26:36:66:a4:87:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
        Validity
            Not Before: Jun 17 03:01:03 2024 GMT
            Not After : Jun 18 03:01:03 2024 GMT
        Subject: CN=4e74d5314394384dacbb827c513acf667660d3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:33:65:3e:75:94:8c:21:4e:8d:31:50:91:
                    64:32:1e:48:55:e5:c1:f7:82:a3:b1:a5:5a:87:f0:
                    32:2a:fd:30:aa:95:de:d3:17:5e:96:4d:9a:a4:e8:
                    6b:6d:57:74:e4:8b:0c:46:42:c8:01:fe:a1:8b:dd:
                    8c:78:15:57:49:f7:bc:39:56:5d:79:03:64:db:5a:
                    38:f0:9f:dc:0d:9e:52:89:ec:9c:b7:9c:d0:c2:e8:
                    1e:57:50:9f:01:61:9e:db:48:a9:6a:91:cb:3c:39:
                    33:2a:7d:c5:a0:cc:65:cb:25:88:6b:44:84:b2:05:
                    d5:0b:cb:3a:08:cc:96:0f:44:9d:2b:2f:39:bb:76:
                    d2:2e:c7:88:7a:3e:6e:b4:10:27:cb:5b:12:a6:3b:
                    28:65:14:4a:e4:e3:c8:d0:5f:00:1f:45:14:34:1e:
                    31:60:53:5b:7a:3d:87:62:f5:17:89:b8:15:c7:ae:
                    4e:20:e1:51:e7:c5:18:8d:c0:8b:11:30:90:94:7f:
                    b8:f8:37:77:4c:08:e6:f2:c6:9d:3f:ed:6a:57:26:
                    16:fb:4d:92:3e:2a:f2:ad:1a:56:96:63:39:38:b7:
                    6a:1c:b7:60:2a:d8:da:93:15:a1:e6:c5:1b:2d:b3:
                    37:fd:2c:92:14:5f:d5:12:06:53:2e:1a:65:ce:a0:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:74:D5:31:43:94:38:4D:AC:BB:82:7C:51:3A:CF:66:76:60:D3:F1
            X509v3 Authority Key Identifier:
                keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:f6:57:d3:7c:8d:c4:34:b2:35:20:54:63:22:42:3c:7e:
         f9:c1:5c:6d:9e:65:f0:a4:ff:e3:bf:a1:27:5c:c1:5e:3c:b5:
         5a:94:ef:85:b2:28:e7:2a:54:cc:5f:ba:67:f3:97:84:6d:0d:
         0f:cd:d4:10:b8:ad:8c:e9:08:c0:b0:9e:8a:f0:08:ae:ea:aa:
         53:80:9e:aa:fb:a3:7c:b1:68:f0:73:b5:72:53:78:e7:76:b0:
         a6:5f:de:c0:e3:fc:65:a9:e4:d5:90:65:55:7d:2a:b1:3f:7e:
         10:62:81:ad:35:f6:16:c8:0b:f4:1f:60:d1:e9:98:4a:b0:11:
         76:bc:78:51:6a:8a:97:ac:5c:0b:78:fc:a6:3c:38:fe:d8:9b:
         66:2e:2e:5a:02:64:37:a7:3a:9a:1a:2f:5a:2d:b6:c9:55:8b:
         90:5b:68:89:e6:30:69:ed:56:2e:60:19:a7:1f:e7:8c:7f:6b:
         b3:1e:84:b6:e0:5c:b9:83:54:a1:6c:47:db:78:08:b6:2f:98:
         7e:79:86:eb:86:6b:d5:f1:d2:06:36:09:b1:d5:77:60:e9:dc:
         e6:f3:76:72:5f:2e:81:cf:dc:d9:1b:a6:e6:d9:25:7c:49:eb:
         5b:ca:e9:f9:9b:13:90:af:b0:dd:fd:11:f2:46:9a:66:24:65:
         41:cc:59:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAkJBcu6h2XqKDrJjZmpIfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWJmMjJlODY0NDQyNTVmZGY3OGEzMGM0Y2IwYjJkOTFl
NWI3NTcwHhcNMjQwNjE3MDMwMTAzWhcNMjQwNjE4MDMwMTAzWjAzMTEwLwYDVQQD
Eyg0ZTc0ZDUzMTQzOTQzODRkYWNiYjgyN2M1MTNhY2Y2Njc2NjBkM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uwzZT51lIwhTo0xUJFkMh5IVeXB
94KjsaVah/AyKv0wqpXe0xdelk2apOhrbVd05IsMRkLIAf6hi92MeBVXSfe8OVZd
eQNk21o48J/cDZ5Sieyct5zQwugeV1CfAWGe20ipapHLPDkzKn3FoMxlyyWIa0SE
sgXVC8s6CMyWD0SdKy85u3bSLseIej5utBAny1sSpjsoZRRK5OPI0F8AH0UUNB4x
YFNbej2HYvUXibgVx65OIOFR58UYjcCLETCQlH+4+Dd3TAjm8sadP+1qVyYW+02S
PiryrRpWlmM5OLdqHLdgKtjakxWh5sUbLbM3/SySFF/VEgZTLhplzqAmyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE501TFDlDhNrLuCfFE6z2Z2YNPxMB8GA1UdIwQY
MBaAFDrr8i6GREJV/feKMMTLCy2R5bdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt
MDE1MGM5NGY5NDBkLzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk
LzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWz2V9N8
jcQ0sjUgVGMiQjx++cFcbZ5l8KT/47+hJ1zBXjy1WpTvhbIo5ypUzF+6Z/OXhG0N
D83UELitjOkIwLCeivAIruqqU4CeqvujfLFo8HO1clN453awpl/ewOP8Zank1ZBl
VX0qsT9+EGKBrTX2FsgL9B9g0emYSrARdrx4UWqKl6xcC3j8pjw4/tibZi4uWgJk
N6c6mhovWi22yVWLkFtoieYwae1WLmAZpx/njH9rsx6EtuBcuYNUoWxH23gIti+Y
fnmG64Zr1fHSBjYJsdV3YOnc5vN2cl8ugc/c2Rum5tklfEnrW8rp+ZsTkK+w3f0R
8kaaZiRlQcxZJA==
-----END CERTIFICATE-----
Generated at Mon Jun 17 06:18:33 2024 by rpki-client on console-ams.rpki-client.org