Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File:                     olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier:          NJW7LEYsimjlNlm0b/wwPbSCMHph8c1vBQuwEiIr850=
Subject key identifier:   5B:DC:05:C8:9F:20:F6:F1:03:A0:0B:67:00:0E:38:76:38:6A:E0:74
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer:       /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial:       01901CD89C548945AD3255FA113A9877B3C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number:          0BC0
Signing time:             Sat 15 Jun 2024 17:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:16 +0000
Files and hashes:         1: Y86euGQ_SA5ONcNaPLluLQROYxY.roa (hash: dnxVNmI9jDRCJpqvfca39nW8CJQJoC7sn9UBZfjph2s=)
                          2: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: wEz8uK2a7ZGU2KPYyxjuPDIVCaatN+Uv9yCXQz5D4RU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:9c:54:89:45:ad:32:55:fa:11:3a:98:77:b3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
        Validity
            Not Before: Jun 15 17:01:16 2024 GMT
            Not After : Jun 16 17:01:16 2024 GMT
        Subject: CN=5bdc05c89f20f6f103a00b67000e3876386ae074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:51:29:e3:14:83:40:2d:82:35:45:47:91:3f:
                    33:d5:b5:24:85:71:b1:90:90:b4:1a:31:9d:3c:a7:
                    8b:0c:53:9f:72:3a:f8:05:44:5b:02:a6:a0:3f:9f:
                    79:c9:99:13:02:2e:38:32:1e:f6:f0:c5:2a:1e:40:
                    23:28:23:46:d2:00:d1:db:d2:65:49:94:e0:b9:79:
                    5c:58:30:b7:99:cb:e5:ec:9c:68:0e:b8:e1:c1:d6:
                    90:dd:76:c5:31:d6:4c:fd:0d:93:c3:36:da:35:80:
                    21:d7:6c:47:53:48:0e:69:ee:f0:02:8c:3e:6d:0e:
                    f1:6f:90:81:aa:b2:0d:6b:7b:df:8f:2f:f3:cd:dd:
                    c9:f1:d9:14:87:00:29:11:4e:58:bd:e1:b0:de:ac:
                    3c:4e:17:f0:0f:d2:19:c2:7d:c6:10:b4:12:a4:ed:
                    ed:bb:35:a8:98:49:8f:61:e6:bd:51:25:fd:c7:79:
                    bc:1a:80:cc:e0:ca:79:10:4e:aa:55:9e:64:be:9f:
                    50:1c:db:6a:50:4e:60:cd:ab:36:df:c3:1f:02:f2:
                    ad:b8:7e:f8:67:f1:6c:04:6b:73:a1:d9:28:f1:b9:
                    7c:65:4d:f4:2e:1b:61:2a:cf:55:59:3e:f4:e8:1e:
                    1e:63:b7:1e:dd:28:5d:ed:45:86:9e:2d:49:28:e3:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DC:05:C8:9F:20:F6:F1:03:A0:0B:67:00:0E:38:76:38:6A:E0:74
            X509v3 Authority Key Identifier:
                keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:b3:34:98:31:61:38:15:e1:87:67:b6:97:78:94:34:fd:
         52:90:3e:5e:48:af:a2:bd:0a:82:67:2f:5a:1c:3f:86:a5:c2:
         df:32:de:ce:ea:d1:83:bc:a7:90:2b:3e:0b:bf:15:38:0b:90:
         34:f2:12:5d:14:b9:a7:58:e3:a6:68:30:27:f2:bf:6b:8a:f2:
         a2:fe:c0:f0:bb:62:b5:bc:d4:76:d8:6c:10:f6:3c:8a:07:37:
         2f:92:2d:87:03:14:eb:b8:d0:5b:78:f6:0d:ec:e0:e4:03:79:
         04:d1:47:42:98:ad:0b:e9:7a:6c:e7:cd:78:66:da:30:48:32:
         91:47:d5:17:65:61:34:6b:a2:81:cf:10:52:7f:9c:b4:cb:74:
         d0:b3:69:9e:b6:7f:66:75:cf:44:3d:c4:1e:31:14:96:f7:44:
         4c:73:d2:d7:f6:e8:54:d7:33:2b:ab:99:22:d9:8a:71:52:19:
         2d:6e:41:66:e0:c2:22:56:72:21:4d:f8:ae:b6:00:39:cf:ac:
         ed:7c:37:df:c1:de:fb:63:16:67:ed:ee:7a:97:01:71:7e:9e:
         8b:6d:fc:bc:d3:01:85:c4:1c:30:df:c7:8d:b3:d4:17:a7:67:
         6f:95:91:87:1c:02:26:66:c8:14:34:10:22:78:9d:69:0b:d0:
         10:15:6b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2JxUiUWtMlX6ETqYd7PGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTEwMjc5YmUxMzhjNDJjZGVmNjI3MThmMGY2YWZhY2Fl
MTgxOWUwHhcNMjQwNjE1MTcwMTE2WhcNMjQwNjE2MTcwMTE2WjAzMTEwLwYDVQQD
Eyg1YmRjMDVjODlmMjBmNmYxMDNhMDBiNjcwMDBlMzg3NjM4NmFlMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Ep4xSDQC2CNUVHkT8z1bUkhXGx
kJC0GjGdPKeLDFOfcjr4BURbAqagP595yZkTAi44Mh728MUqHkAjKCNG0gDR29Jl
SZTguXlcWDC3mcvl7JxoDrjhwdaQ3XbFMdZM/Q2TwzbaNYAh12xHU0gOae7wAow+
bQ7xb5CBqrINa3vfjy/zzd3J8dkUhwApEU5YveGw3qw8ThfwD9IZwn3GELQSpO3t
uzWomEmPYea9USX9x3m8GoDM4Mp5EE6qVZ5kvp9QHNtqUE5gzas238MfAvKtuH74
Z/FsBGtzodko8bl8ZU30LhthKs9VWT706B4eY7ce3Shd7UWGni1JKONp6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvcBcifIPbxA6ALZwAOOHY4auB0MB8GA1UdIwQY
MBaAFKJRAnm+E4xCze9icY8PavrK4YGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUt
ODZhZjUyZmI0ZWViLzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUtODZhZjUyZmI0ZWVi
LzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNGzNJgx
YTgV4Ydntpd4lDT9UpA+Xkivor0KgmcvWhw/hqXC3zLezurRg7ynkCs+C78VOAuQ
NPISXRS5p1jjpmgwJ/K/a4ryov7A8LtitbzUdthsEPY8igc3L5IthwMU67jQW3j2
Dezg5AN5BNFHQpitC+l6bOfNeGbaMEgykUfVF2VhNGuigc8QUn+ctMt00LNpnrZ/
ZnXPRD3EHjEUlvdETHPS1/boVNczK6uZItmKcVIZLW5BZuDCIlZyIU34rrYAOc+s
7Xw338He+2MWZ+3uepcBcX6ei238vNMBhcQcMN/HjbPUF6dnb5WRhxwCJmbIFDQQ
InidaQvQEBVreg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:29:15 2024 by rpki-client on console-ams.rpki-client.org