Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File:                     v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier:          yyracak7G+89jLrk/OAR5b7vj5AtmhFwWldXCGfPrgo=
Subject key identifier:   D3:4C:FB:4A:18:4C:0C:FD:33:7E:24:4D:33:9B:6A:D2:4B:46:E5:86
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer:       /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial:       0190358581DB445E1283869550AEA9F53F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number:          0107
Signing time:             Thu 20 Jun 2024 12:01:00 +0000
Manifest this update:     Thu 20 Jun 2024 12:01:00 +0000
Manifest next update:     Fri 21 Jun 2024 12:01:00 +0000
Files and hashes:         1: IG7gdaBOFfdP9w3uDMOBfYAgXps.roa (hash: iNF7ztfkPQlvzxToDebAWUsl73wJn88ghjj5Ced0anQ=)
                          2: becoYMrgopCA0iBH5t8ZYNUkdL8.roa (hash: FXsYYzHokZmr0SozalIs92JeSmgUKwQt0OFSxaUZcKg=)
                          3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: 6pCZScQneTgdoxhSx1vOqB8cCrBnexI1TWelJBsbksk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 11:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:85:81:db:44:5e:12:83:86:95:50:ae:a9:f5:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
        Validity
            Not Before: Jun 20 12:01:00 2024 GMT
            Not After : Jun 21 12:01:00 2024 GMT
        Subject: CN=d34cfb4a184c0cfd337e244d339b6ad24b46e586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fc:88:a3:9f:a7:db:f8:0f:69:39:07:71:46:
                    80:25:2e:51:71:02:a6:59:50:11:1e:2b:10:c3:b9:
                    3a:7f:d8:7d:cf:3c:ca:71:80:e1:03:50:c9:78:14:
                    8e:02:ba:45:d3:e8:ad:71:09:b4:55:90:c1:39:32:
                    3a:e3:65:f2:2b:3f:94:73:8e:c0:f0:07:4c:36:45:
                    5b:4d:5e:a7:16:3e:65:38:a8:02:1a:ba:5f:b8:e5:
                    f8:2c:36:7d:a1:57:42:f7:38:86:91:78:e8:d8:5f:
                    84:65:53:ef:16:53:ee:b7:6c:4f:b2:de:a5:24:9c:
                    0a:fd:2e:5d:72:60:3c:c5:17:1b:1b:10:d6:49:44:
                    e9:e2:48:1c:09:80:02:7a:f7:e8:9d:ab:09:3b:33:
                    12:bb:5b:1c:be:72:9d:5b:cf:b0:71:b2:f4:0e:1f:
                    2e:eb:64:7a:89:4e:8f:5c:b1:c4:94:c7:46:8b:10:
                    90:ca:e7:a4:cc:3e:3f:0c:5c:62:82:7c:ea:34:ff:
                    69:9e:dd:96:50:23:b4:10:a2:ac:00:9e:96:75:f0:
                    ef:48:0c:a8:a2:63:47:64:d8:1c:3e:b3:d5:c4:79:
                    29:4e:0c:3e:0a:03:29:07:7f:fc:b1:9e:0d:ba:14:
                    cd:5a:f8:4a:17:32:bc:91:cb:a0:fd:bb:63:ee:f2:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4C:FB:4A:18:4C:0C:FD:33:7E:24:4D:33:9B:6A:D2:4B:46:E5:86
            X509v3 Authority Key Identifier:
                keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:58:3d:ea:52:88:ca:fb:2f:64:63:6b:74:b6:7c:03:a5:
         61:8b:23:6f:9c:b3:f2:f4:c7:4b:7a:e8:6d:76:8e:53:30:b5:
         1a:e6:56:49:5c:ec:07:c3:4e:04:71:6b:a3:90:a5:5a:5b:ce:
         60:aa:92:f7:e4:dd:07:f3:10:59:0d:ed:89:55:19:a5:eb:06:
         0d:5f:82:b7:94:1c:74:f1:d0:5e:55:fb:f3:ff:48:bf:4a:a8:
         d1:24:2c:6e:d0:b4:a2:c6:c3:cc:3a:17:8b:6d:1f:2d:8a:c3:
         53:c4:5a:6f:a0:c4:c4:4a:2b:f4:7b:23:7d:9c:dc:2c:07:83:
         3a:ac:a8:6b:71:ac:36:5c:69:a7:06:e1:3e:a7:11:9d:d1:84:
         8f:6c:03:ae:d9:c8:48:03:48:e1:92:65:85:9d:47:2d:f4:60:
         41:21:99:b8:e8:55:75:f0:47:4f:4b:be:69:4c:d9:d3:ba:85:
         7d:f5:51:d1:57:22:35:3c:d7:6f:ca:f1:95:c6:62:2d:d4:81:
         60:d8:ef:aa:67:27:52:66:40:02:c2:9c:dc:f0:ae:90:ee:76:
         b1:c5:44:12:76:fa:ad:cb:23:18:34:85:b2:73:4b:44:11:12:
         08:b2:99:c7:ef:5d:84:12:ff:06:44:cc:82:1d:83:b4:4c:1b:
         24:b1:a3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA1hYHbRF4Sg4aVUK6p9T9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmN2EwMjU4YTUyMWU5OWQyMTNmYjMwZTc5NjY3ZTU4NGUz
N2M3ZGIwHhcNMjQwNjIwMTIwMTAwWhcNMjQwNjIxMTIwMTAwWjAzMTEwLwYDVQQD
EyhkMzRjZmI0YTE4NGMwY2ZkMzM3ZTI0NGQzMzliNmFkMjRiNDZlNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vyIo5+n2/gPaTkHcUaAJS5RcQKm
WVARHisQw7k6f9h9zzzKcYDhA1DJeBSOArpF0+itcQm0VZDBOTI642XyKz+Uc47A
8AdMNkVbTV6nFj5lOKgCGrpfuOX4LDZ9oVdC9ziGkXjo2F+EZVPvFlPut2xPst6l
JJwK/S5dcmA8xRcbGxDWSUTp4kgcCYACevfonasJOzMSu1scvnKdW8+wcbL0Dh8u
62R6iU6PXLHElMdGixCQyuekzD4/DFxignzqNP9pnt2WUCO0EKKsAJ6WdfDvSAyo
omNHZNgcPrPVxHkpTgw+CgMpB3/8sZ4NuhTNWvhKFzK8kcug/btj7vIbHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNM+0oYTAz9M34kTTObatJLRuWGMB8GA1UdIwQY
MBaAFL96AlilIemdIT+zDnlmflhON8fbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgt
YjUzOWQ2Y2VhNmUxLzEvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgtYjUzOWQ2Y2VhNmUx
LzEvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILZYPepS
iMr7L2Rja3S2fAOlYYsjb5yz8vTHS3robXaOUzC1GuZWSVzsB8NOBHFro5ClWlvO
YKqS9+TdB/MQWQ3tiVUZpesGDV+Ct5QcdPHQXlX78/9Iv0qo0SQsbtC0osbDzDoX
i20fLYrDU8Rab6DExEor9HsjfZzcLAeDOqyoa3GsNlxppwbhPqcRndGEj2wDrtnI
SANI4ZJlhZ1HLfRgQSGZuOhVdfBHT0u+aUzZ07qFffVR0VciNTzXb8rxlcZiLdSB
YNjvqmcnUmZAAsKc3PCukO52scVEEnb6rcsjGDSFsnNLRBESCLKZx+9dhBL/BkTM
gh2DtEwbJLGjPg==
-----END CERTIFICATE-----
Generated at Thu Jun 20 13:49:13 2024 by rpki-client on console-fra.rpki-client.org