Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File:                     OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier:          JBRd4aYv+CL1hEzwBOAU87YKXb1CB97Wk9v+OMerGyA=
Subject key identifier:   A9:69:60:98:EE:3E:46:AE:99:13:EF:4C:AA:A8:EB:AC:1D:F8:71:58
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer:       /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial:       019043AECC87CE2C0BBC9CD984F56835541F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number:          01B9
Signing time:             Sun 23 Jun 2024 06:00:47 +0000
Manifest this update:     Sun 23 Jun 2024 06:00:47 +0000
Manifest next update:     Mon 24 Jun 2024 06:00:47 +0000
Files and hashes:         1: L5zZZs0MQAmEI_mUwqixF24R8DE.roa (hash: BL3jL1fDNlqIL3I91WM6mHYcl682XCh5yYPHL3xw1RM=)
                          2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: ugF4I/ctJu08G21qnHdFsbI8g4YZJ6uBVmoRnkFCDAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:43:ae:cc:87:ce:2c:0b:bc:9c:d9:84:f5:68:35:54:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
        Validity
            Not Before: Jun 23 06:00:47 2024 GMT
            Not After : Jun 24 06:00:47 2024 GMT
        Subject: CN=a9696098ee3e46ae9913ef4caaa8ebac1df87158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:3f:0e:8d:ac:d1:0f:6b:6b:9e:34:46:63:
                    fc:38:c4:e4:ea:86:c7:6c:f9:34:66:14:0b:8b:66:
                    8a:37:f5:03:57:d1:9d:92:9d:a2:12:cc:42:c1:28:
                    16:57:a8:ee:68:b8:2a:ba:26:8c:73:ed:8d:f7:ee:
                    83:e3:f0:8c:ef:60:e2:49:26:57:13:ca:0f:fe:be:
                    1a:2a:e7:1f:04:2b:1f:5f:3a:05:aa:f1:b9:07:36:
                    92:0d:65:15:1c:92:21:4f:a7:fb:32:2b:81:87:c8:
                    cf:ff:8c:5d:b0:ac:b5:6b:3a:90:77:09:2c:69:0b:
                    a2:60:c3:20:39:e4:d2:13:de:36:41:7b:22:f5:68:
                    45:2e:f9:b2:32:a9:b8:f8:34:96:7f:13:58:a6:aa:
                    bd:b8:a5:4c:38:46:26:cc:ca:d0:f6:9b:54:ad:a0:
                    67:9f:cd:1a:83:25:f0:e9:34:2f:8d:c4:92:ac:0f:
                    6d:4d:c1:2e:b0:66:53:6a:fa:59:d2:03:f7:bd:4d:
                    26:c3:d8:c4:4f:90:8e:42:9c:77:03:85:e8:b6:53:
                    3b:01:16:3c:89:97:63:01:61:17:a9:c6:d4:24:2c:
                    42:c9:9a:7c:e8:b0:45:35:a4:e6:c5:ec:19:f8:4c:
                    94:b6:3f:a0:cc:ba:47:9e:ea:d4:33:21:6d:21:33:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:69:60:98:EE:3E:46:AE:99:13:EF:4C:AA:A8:EB:AC:1D:F8:71:58
            X509v3 Authority Key Identifier:
                keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:95:5a:17:68:46:aa:5d:cf:15:49:ed:2c:31:b8:d0:d3:
         81:2d:eb:42:33:87:0d:03:17:28:25:1b:74:ea:ad:7b:d1:fa:
         0d:69:55:7e:79:b9:46:5a:be:23:7a:9f:89:5b:c1:7c:c0:e6:
         c8:a5:2e:0c:bf:3e:42:56:72:6f:b4:7e:01:41:fa:33:27:c8:
         4b:1e:40:d4:79:40:73:21:a7:0b:0b:57:ef:3b:68:9c:06:7b:
         58:fa:56:71:57:75:94:c7:38:59:34:d8:c4:22:da:2a:f2:c0:
         19:0e:6f:fe:2b:aa:ad:b4:67:b4:6b:9f:5c:e7:dd:80:10:ca:
         f2:08:3f:64:ac:b3:88:53:4c:b0:50:ec:fb:17:21:a7:49:7f:
         38:c4:eb:09:ed:9c:61:65:67:ba:cd:10:ba:78:11:44:1e:f4:
         25:80:9e:c5:3a:df:29:30:20:00:f5:68:6f:e9:6b:d6:da:19:
         0f:ab:98:e7:35:7d:7e:2b:17:a3:20:a9:8c:ad:ca:d8:7a:59:
         22:ae:66:43:8f:aa:34:e1:13:ce:00:2c:a2:75:e7:5e:b8:a8:
         63:cf:00:0e:e1:ba:78:ce:80:05:21:dd:bc:65:12:b4:5c:a4:
         8b:f2:07:d8:c3:13:46:34:d1:f6:d2:66:c6:2d:e1:21:11:b8:
         7c:e6:92:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBDrsyHziwLvJzZhPVoNVQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiM2EwNWRiYjljNzdmYTE2ZWQxMDQ2OTc0N2E1YzZlNmVh
Yjg4ZGUwHhcNMjQwNjIzMDYwMDQ3WhcNMjQwNjI0MDYwMDQ3WjAzMTEwLwYDVQQD
EyhhOTY5NjA5OGVlM2U0NmFlOTkxM2VmNGNhYWE4ZWJhYzFkZjg3MTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXc/Do2s0Q9ra540RmP8OMTk6obH
bPk0ZhQLi2aKN/UDV9Gdkp2iEsxCwSgWV6juaLgquiaMc+2N9+6D4/CM72DiSSZX
E8oP/r4aKucfBCsfXzoFqvG5BzaSDWUVHJIhT6f7MiuBh8jP/4xdsKy1azqQdwks
aQuiYMMgOeTSE942QXsi9WhFLvmyMqm4+DSWfxNYpqq9uKVMOEYmzMrQ9ptUraBn
n80agyXw6TQvjcSSrA9tTcEusGZTavpZ0gP3vU0mw9jET5COQpx3A4XotlM7ARY8
iZdjAWEXqcbUJCxCyZp86LBFNaTmxewZ+EyUtj+gzLpHnurUMyFtITMyJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlpYJjuPkaumRPvTKqo66wd+HFYMB8GA1UdIwQY
MBaAFDs6Bdu5x3+hbtEEaXR6XG5uq4jeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgt
YTAxYzM3Yjg4NzI4LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgtYTAxYzM3Yjg4NzI4
LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZOVWhdo
RqpdzxVJ7SwxuNDTgS3rQjOHDQMXKCUbdOqte9H6DWlVfnm5Rlq+I3qfiVvBfMDm
yKUuDL8+QlZyb7R+AUH6MyfISx5A1HlAcyGnCwtX7ztonAZ7WPpWcVd1lMc4WTTY
xCLaKvLAGQ5v/iuqrbRntGufXOfdgBDK8gg/ZKyziFNMsFDs+xchp0l/OMTrCe2c
YWVnus0QungRRB70JYCexTrfKTAgAPVob+lr1toZD6uY5zV9fisXoyCpjK3K2HpZ
Iq5mQ4+qNOETzgAsonXnXrioY88ADuG6eM6ABSHdvGUStFyki/IH2MMTRjTR9tJm
xi3hIRG4fOaSsg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 14:52:48 2024 by rpki-client on console-ams.rpki-client.org