Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
File:                     OkjgM962SsQkPHLOiZ1Tgi32mW0.mft (raw, json)
Hash identifier:          E/tkQV3iWdx4oeYG8/3EyfX/Izs7HqfcmrrWHwZVhOE=
Subject key identifier:   61:5F:CF:A1:AB:E0:48:08:10:C1:39:7C:A5:39:46:EF:25:14:F1:DE
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Certificate issuer:       /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial:       019236CB7A40151E8C12D7B192E24FD6A00E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
Manifest number:          126D
Signing time:             Sat 28 Sep 2024 04:02:37 +0000
Manifest this update:     Sat 28 Sep 2024 04:02:37 +0000
Manifest next update:     Sun 29 Sep 2024 04:02:37 +0000
Files and hashes:         1: OkjgM962SsQkPHLOiZ1Tgi32mW0.crl (hash: UvdyMUAzecExFdIGZR04VOx7FIKoHJY0eRzHSo+iY+c=)
                          2: r3VfElHFlzgK18PLPSTKOe0t4zY.roa (hash: qDgPmuY3Bge/MAqaTZc/fphRBdx65Bthn+EKEw8dADI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:cb:7a:40:15:1e:8c:12:d7:b1:92:e2:4f:d6:a0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
        Validity
            Not Before: Sep 28 04:02:37 2024 GMT
            Not After : Sep 29 04:02:37 2024 GMT
        Subject: CN=615fcfa1abe0480810c1397ca53946ef2514f1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fc:09:5d:58:f4:d1:4f:90:98:92:ce:15:25:
                    67:4b:6d:57:f4:dc:d2:fd:93:e6:87:44:80:34:ad:
                    ae:77:b0:20:f9:d4:bc:79:9f:a9:81:0e:e6:0e:4b:
                    8b:86:c8:59:41:e7:2d:11:b4:12:9d:35:79:d9:47:
                    ca:88:e3:be:83:5f:aa:47:1e:c5:27:30:48:9a:11:
                    e5:b7:90:32:94:4d:fa:5d:4e:f8:07:c8:af:a0:0e:
                    61:c3:21:23:6e:1c:1b:97:d2:3d:c7:92:72:ce:f9:
                    6c:b0:1a:f2:e2:8b:f8:d0:2d:ae:02:2b:46:22:bc:
                    c3:4f:33:b1:67:c9:df:c3:35:df:d1:cd:fd:f8:93:
                    6b:06:ff:24:47:d5:07:08:ee:73:97:00:3f:19:b5:
                    51:bc:22:d4:7b:60:47:a5:72:93:bd:fe:22:08:f7:
                    64:bb:4f:66:e3:cf:85:eb:1e:c2:71:7f:cb:31:6b:
                    36:8b:b7:e3:36:04:a7:c0:d6:94:63:9c:be:d2:ea:
                    80:de:7c:91:d8:37:14:38:1e:0f:70:35:89:de:dd:
                    1b:61:29:6c:f5:c2:d4:7c:8b:7c:46:4c:16:ed:09:
                    f8:f2:99:08:45:d3:af:a0:93:e6:8d:36:4b:12:60:
                    b7:ba:ef:69:40:5d:99:12:95:ff:24:fa:1d:a3:7b:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:CF:A1:AB:E0:48:08:10:C1:39:7C:A5:39:46:EF:25:14:F1:DE
            X509v3 Authority Key Identifier:
                keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:34:6e:90:7c:84:18:19:d6:36:c7:60:26:b4:cd:3f:72:99:
         57:ae:af:11:6e:08:b5:83:e1:18:22:dc:4d:08:4c:04:da:d1:
         fd:da:a9:64:29:58:5e:20:9e:98:77:a8:60:67:79:cd:97:71:
         99:08:5d:63:f4:b1:ba:19:e5:10:47:ce:e2:2a:2d:91:dc:8c:
         05:e9:da:4e:a6:48:c5:89:64:77:1f:1c:70:aa:5b:a5:ce:04:
         a6:64:2a:7f:40:3d:6b:fc:87:4f:7a:d7:95:b6:c2:c4:c3:60:
         f6:cc:f4:c1:19:7d:98:6f:d0:73:14:73:ce:e6:62:9f:bb:ec:
         02:81:7b:6e:5c:ed:69:02:48:c0:8e:ff:ee:bb:21:24:4f:fd:
         41:1e:4f:0c:03:b7:d5:ea:60:e0:38:83:dc:d4:3d:7c:c4:b3:
         84:2f:1a:70:7b:e4:f1:ce:26:75:17:a5:5a:3e:fa:8e:c2:41:
         a9:7d:95:2d:a9:92:17:c4:86:72:1d:ce:4c:59:51:71:f6:d9:
         b5:f9:0d:4f:54:93:05:60:89:a0:7f:ca:3e:c8:be:87:9e:83:
         78:41:24:40:aa:18:47:59:35:51:a6:84:f8:a8:c3:bb:ef:fc:
         83:84:84:eb:e2:97:fc:48:13:f0:a5:55:33:5f:48:14:bf:2a:
         95:94:6d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI2y3pAFR6MEtexkuJP1qAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDhlMDMzZGViNjRhYzQyNDNjNzJjZTg5OWQ1MzgyMmRm
Njk5NmQwHhcNMjQwOTI4MDQwMjM3WhcNMjQwOTI5MDQwMjM3WjAzMTEwLwYDVQQD
Eyg2MTVmY2ZhMWFiZTA0ODA4MTBjMTM5N2NhNTM5NDZlZjI1MTRmMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vwJXVj00U+QmJLOFSVnS21X9NzS
/ZPmh0SANK2ud7Ag+dS8eZ+pgQ7mDkuLhshZQectEbQSnTV52UfKiOO+g1+qRx7F
JzBImhHlt5AylE36XU74B8ivoA5hwyEjbhwbl9I9x5JyzvlssBry4ov40C2uAitG
IrzDTzOxZ8nfwzXf0c39+JNrBv8kR9UHCO5zlwA/GbVRvCLUe2BHpXKTvf4iCPdk
u09m48+F6x7CcX/LMWs2i7fjNgSnwNaUY5y+0uqA3nyR2DcUOB4PcDWJ3t0bYSls
9cLUfIt8RkwW7Qn48pkIRdOvoJPmjTZLEmC3uu9pQF2ZEpX/JPodo3t0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFfz6Gr4EgIEME5fKU5Ru8lFPHeMB8GA1UdIwQY
MBaAFDpI4DPetkrEJDxyzomdU4It9pltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tqZ005NjJTc1FrUEhMT2laMVRnaTMybVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83ZmE3YjAtYWNlNC00OTJkLThlOTEt
YzUzMjFkYzllNjRiLzEvT2tqZ005NjJTc1FrUEhMT2laMVRnaTMybVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83ZmE3YjAtYWNlNC00OTJkLThlOTEtYzUzMjFkYzllNjRi
LzEvT2tqZ005NjJTc1FrUEhMT2laMVRnaTMybVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzRukHyE
GBnWNsdgJrTNP3KZV66vEW4ItYPhGCLcTQhMBNrR/dqpZClYXiCemHeoYGd5zZdx
mQhdY/SxuhnlEEfO4iotkdyMBenaTqZIxYlkdx8ccKpbpc4EpmQqf0A9a/yHT3rX
lbbCxMNg9sz0wRl9mG/QcxRzzuZin7vsAoF7blztaQJIwI7/7rshJE/9QR5PDAO3
1epg4DiD3NQ9fMSzhC8acHvk8c4mdRelWj76jsJBqX2VLamSF8SGch3OTFlRcfbZ
tfkNT1STBWCJoH/KPsi+h56DeEEkQKoYR1k1UaaE+KjDu+/8g4SE6+KX/EgT8KVV
M19IFL8qlZRtnA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:38 2024 by rpki-client on console-fra.rpki-client.org