Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
File:                     oVHP748-2G0RrqutTRngal0HDTA.mft (raw, json)
Hash identifier:          mMJs1M1UR2rTGLVrC6YCHfpWkE4WwOfqIfB0sxSjlvY=
Subject key identifier:   12:67:6A:BE:65:7C:1A:0E:41:8D:B3:46:8E:F9:1A:8D:27:4A:50:97
Authority key identifier: A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30
Certificate issuer:       /CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
Certificate serial:       01903D3F41FDE81D018B2BBE26359239C7E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
Manifest number:          11D5
Signing time:             Sat 22 Jun 2024 00:01:14 +0000
Manifest this update:     Sat 22 Jun 2024 00:01:14 +0000
Manifest next update:     Sun 23 Jun 2024 00:01:14 +0000
Files and hashes:         1: iJxGrYvIz1tVmLswoPXEYDhiMvc.roa (hash: /isVZ+h8iMtHdgA/vXd8T+EhWzq32Fnmy9t3uXSxuxw=)
                          2: oVHP748-2G0RrqutTRngal0HDTA.crl (hash: ZNsrAzU7msFB296c1Q8v1sCA6bHp2VmRaVGI/o2cjts=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:3f:41:fd:e8:1d:01:8b:2b:be:26:35:92:39:c7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
        Validity
            Not Before: Jun 22 00:01:14 2024 GMT
            Not After : Jun 23 00:01:14 2024 GMT
        Subject: CN=12676abe657c1a0e418db3468ef91a8d274a5097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:e3:eb:6e:d9:20:8b:55:2c:64:2a:52:31:
                    9e:c9:e5:cb:42:75:18:4c:6d:54:0e:ac:6f:58:00:
                    be:8d:ab:9e:e5:e2:9d:5c:86:d4:67:fc:22:53:fa:
                    8e:d8:1e:78:26:74:2a:56:e0:75:28:76:ce:74:ff:
                    4c:2c:26:78:8e:02:1a:ea:1c:2e:f6:46:45:b1:2f:
                    9e:78:b2:07:0d:8e:20:de:61:73:18:a6:bd:92:ee:
                    bd:c4:e5:93:aa:8c:52:a6:4f:fe:56:49:72:02:58:
                    85:2d:d8:84:4b:69:8e:63:11:8e:3f:5d:24:cb:57:
                    15:46:71:fa:27:06:53:d0:8a:59:0d:fd:f6:bc:b8:
                    ea:35:2a:4f:7e:a0:74:b2:5d:1e:01:3a:71:09:a8:
                    8b:52:de:4f:74:01:16:e5:af:1e:8c:c4:53:87:b3:
                    7a:e7:97:a7:f7:e4:f5:81:44:54:84:61:e1:0b:a9:
                    77:a0:45:57:c3:9c:f4:44:7e:4e:30:c7:c1:2d:09:
                    b8:5b:25:2a:f9:8d:46:5b:eb:ab:26:bb:51:68:1c:
                    47:5a:46:7a:7d:e8:d5:02:69:79:44:4f:ad:76:81:
                    f3:c2:2c:ec:00:e9:77:a5:d6:07:47:0a:20:1b:87:
                    dd:ab:ee:f6:f8:78:1c:bb:bd:9b:09:3f:c1:d0:aa:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:6A:BE:65:7C:1A:0E:41:8D:B3:46:8E:F9:1A:8D:27:4A:50:97
            X509v3 Authority Key Identifier:
                keyid:A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:fa:84:90:47:a5:0a:c6:ac:57:dd:4e:48:57:ee:85:85:fa:
         ad:85:33:79:53:66:98:37:fa:c1:65:50:eb:67:c2:42:0c:ad:
         97:ab:73:a8:6d:c1:3e:67:a4:9e:7b:88:45:4c:89:c8:8a:31:
         9a:35:e2:03:68:75:63:60:0b:d3:f2:22:b4:51:c1:8f:fb:92:
         59:98:4f:6f:d2:47:28:6c:7a:76:75:09:33:4e:f2:d6:5c:70:
         67:7e:67:02:59:e5:df:3a:ef:fc:56:c9:74:b3:7a:7a:6b:d9:
         68:0f:87:05:b2:2c:a5:42:49:f7:50:4e:26:cd:2b:2b:19:e6:
         94:f0:22:fa:9c:b9:3f:26:e0:2a:66:2e:6a:07:05:dc:f0:22:
         63:77:2f:28:ac:41:67:94:19:47:8e:1a:f6:6b:ee:df:55:d5:
         d5:0d:06:6f:80:a3:da:a7:27:d3:8a:82:2b:19:b1:89:9e:8e:
         e4:df:b8:18:7c:16:af:bc:88:7a:72:d3:09:0d:5a:a5:7f:19:
         22:ad:a8:5a:47:9f:ee:ab:00:78:5c:96:de:cb:30:03:95:22:
         c8:82:67:81:24:fa:67:0b:7f:75:47:15:70:90:66:c5:a1:27:
         72:29:16:29:7e:c8:ff:23:f2:92:89:ae:fc:64:ff:f4:e1:a2:
         12:42:97:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA9P0H96B0Biyu+JjWSOcfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTFjZmVmOGYzZWQ4NmQxMWFlYWJhZDRkMTllMDZhNWQw
NzBkMzAwHhcNMjQwNjIyMDAwMTE0WhcNMjQwNjIzMDAwMTE0WjAzMTEwLwYDVQQD
EygxMjY3NmFiZTY1N2MxYTBlNDE4ZGIzNDY4ZWY5MWE4ZDI3NGE1MDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Dj627ZIItVLGQqUjGeyeXLQnUY
TG1UDqxvWAC+jaue5eKdXIbUZ/wiU/qO2B54JnQqVuB1KHbOdP9MLCZ4jgIa6hwu
9kZFsS+eeLIHDY4g3mFzGKa9ku69xOWTqoxSpk/+VklyAliFLdiES2mOYxGOP10k
y1cVRnH6JwZT0IpZDf32vLjqNSpPfqB0sl0eATpxCaiLUt5PdAEW5a8ejMRTh7N6
55en9+T1gURUhGHhC6l3oEVXw5z0RH5OMMfBLQm4WyUq+Y1GW+urJrtRaBxHWkZ6
fejVAml5RE+tdoHzwizsAOl3pdYHRwogG4fdq+72+Hgcu72bCT/B0KoVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJnar5lfBoOQY2zRo75Go0nSlCXMB8GA1UdIwQY
MBaAFKFRz++PPthtEa6rrU0Z4GpdBw0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZIUDc0OC0yRzBScnF1dFRSbmdhbDBIRFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS85NTliOWYtMTQwOC00Y2Y3LThlNzUt
NDA0NmEzMmQyN2E0LzEvb1ZIUDc0OC0yRzBScnF1dFRSbmdhbDBIRFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS85NTliOWYtMTQwOC00Y2Y3LThlNzUtNDA0NmEzMmQyN2E0
LzEvb1ZIUDc0OC0yRzBScnF1dFRSbmdhbDBIRFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPqEkEel
CsasV91OSFfuhYX6rYUzeVNmmDf6wWVQ62fCQgytl6tzqG3BPmeknnuIRUyJyIox
mjXiA2h1Y2AL0/IitFHBj/uSWZhPb9JHKGx6dnUJM07y1lxwZ35nAlnl3zrv/FbJ
dLN6emvZaA+HBbIspUJJ91BOJs0rKxnmlPAi+py5PybgKmYuagcF3PAiY3cvKKxB
Z5QZR44a9mvu31XV1Q0Gb4Cj2qcn04qCKxmxiZ6O5N+4GHwWr7yIenLTCQ1apX8Z
Iq2oWkef7qsAeFyW3sswA5UiyIJngST6Zwt/dUcVcJBmxaEncikWKX7I/yPykomu
/GT/9OGiEkKXwA==
-----END CERTIFICATE-----
Generated at Sat Jun 22 09:10:17 2024 by rpki-client on console-ams.rpki-client.org