Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File:                     0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier:          VMhLTat1DBdfXbuzYP0a13XC9mmPH1iSVhTO6JOp3hM=
Subject key identifier:   22:37:50:85:6E:E6:65:7E:E4:87:82:C0:EC:49:7D:F7:26:44:B8:F9
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer:       /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial:       01901DECDE9E51247285E3B5795FF1587BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number:          05D2
Signing time:             Sat 15 Jun 2024 22:03:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:00 +0000
Files and hashes:         1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: C0uhtG5gPhy81iYmKKaSLfFiU3su+Qq40Tt2kn5O5hs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:de:9e:51:24:72:85:e3:b5:79:5f:f1:58:7b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
        Validity
            Not Before: Jun 15 22:03:00 2024 GMT
            Not After : Jun 16 22:03:00 2024 GMT
        Subject: CN=223750856ee6657ee48782c0ec497df72644b8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:80:fc:5d:b5:10:2a:a6:57:7a:3d:b0:a6:20:
                    f3:ff:b6:e6:73:4c:1d:c8:94:aa:92:ee:d8:ec:f3:
                    cc:14:4b:6a:5c:cc:26:11:48:24:1a:52:5a:3e:b9:
                    b3:a8:20:85:23:79:e9:5b:fc:d6:68:48:0e:b2:48:
                    a4:0f:5f:d6:47:9e:64:22:60:ba:5d:09:9a:cf:07:
                    ee:2b:36:3d:83:55:4d:13:89:41:1b:16:29:27:8f:
                    1a:1f:ae:91:06:4f:70:d1:98:cf:77:d4:70:3f:21:
                    11:55:e0:51:89:d4:b5:65:e5:19:76:be:d0:bf:fc:
                    24:95:31:10:f2:f2:5e:4a:e9:7e:2b:e4:7c:8c:e2:
                    ab:28:85:ad:e9:57:1a:1b:05:1d:bd:90:4e:57:87:
                    8d:7e:d4:93:57:47:fd:bf:b9:0c:f3:b9:39:9d:7d:
                    76:95:08:f7:72:5b:a1:cb:42:be:58:85:24:f6:8a:
                    ea:d7:47:ec:36:97:ef:99:34:39:13:d7:76:50:e7:
                    d1:9a:57:13:ee:df:ba:36:30:55:1f:a0:96:45:e4:
                    16:7c:5a:ec:65:ef:41:ed:17:48:4d:6f:6c:34:d3:
                    2b:8b:7c:08:65:e7:c9:4d:10:7e:37:6d:39:17:83:
                    53:9c:17:65:8e:89:57:6f:57:fa:64:d3:21:06:f0:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:50:85:6E:E6:65:7E:E4:87:82:C0:EC:49:7D:F7:26:44:B8:F9
            X509v3 Authority Key Identifier:
                keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b3:23:25:b8:9d:b8:03:ba:36:20:58:1b:d4:83:b3:1b:20:
         64:21:a9:47:4a:9a:9e:73:e6:f9:dd:5a:26:6d:cd:26:ce:c9:
         c6:28:cf:8f:40:86:09:bd:8a:3c:62:ee:31:2d:7c:c5:5e:d3:
         87:99:5e:9b:47:de:11:b2:04:7b:c8:ae:c3:cd:7a:74:f7:16:
         49:4f:22:7c:64:67:69:3e:0c:f9:79:32:cf:de:3e:c8:5a:b4:
         76:b2:77:ea:9a:be:e7:6c:69:55:f5:49:66:ed:98:4f:34:d7:
         86:04:3d:36:bd:be:2e:4f:7d:d6:9a:ea:7e:8e:be:ef:49:b5:
         1d:da:95:76:ac:19:32:06:8b:1b:d6:67:95:9d:5f:89:2b:29:
         70:78:0c:ac:e0:52:4d:a3:22:65:3f:75:e3:30:43:c3:f5:e7:
         27:ab:5f:3e:b2:6f:bf:79:71:09:f7:c6:81:75:1e:60:ff:65:
         6a:a0:98:2a:3e:93:fb:0e:ae:80:bf:f3:5b:e2:56:ff:17:d8:
         a5:fd:3e:f8:df:08:40:77:25:0a:08:44:e5:0f:43:6d:09:d3:
         aa:8c:01:9a:81:37:56:6c:f1:19:b4:e0:3f:65:8b:8f:cf:c7:
         fb:2e:b8:ec:9d:49:8e:1b:60:87:ec:32:c6:f7:bb:5e:2b:ef:
         53:13:49:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7N6eUSRyheO1eV/xWHu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODk3YjMzNTM4MmY4MjI0ZjVkODkwZTMxYjM4NjMyMWM2
YmIzZWQwHhcNMjQwNjE1MjIwMzAwWhcNMjQwNjE2MjIwMzAwWjAzMTEwLwYDVQQD
EygyMjM3NTA4NTZlZTY2NTdlZTQ4NzgyYzBlYzQ5N2RmNzI2NDRiOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ID8XbUQKqZXej2wpiDz/7bmc0wd
yJSqku7Y7PPMFEtqXMwmEUgkGlJaPrmzqCCFI3npW/zWaEgOskikD1/WR55kImC6
XQmazwfuKzY9g1VNE4lBGxYpJ48aH66RBk9w0ZjPd9RwPyERVeBRidS1ZeUZdr7Q
v/wklTEQ8vJeSul+K+R8jOKrKIWt6VcaGwUdvZBOV4eNftSTV0f9v7kM87k5nX12
lQj3cluhy0K+WIUk9orq10fsNpfvmTQ5E9d2UOfRmlcT7t+6NjBVH6CWReQWfFrs
Ze9B7RdITW9sNNMri3wIZefJTRB+N205F4NTnBdljolXb1f6ZNMhBvDCGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI3UIVu5mV+5IeCwOxJffcmRLj5MB8GA1UdIwQY
MBaAFNKJezNTgvgiT12JDjGzhjIca7PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTct
NWI1MzMyYWYxODUxLzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTctNWI1MzMyYWYxODUx
LzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7MjJbid
uAO6NiBYG9SDsxsgZCGpR0qannPm+d1aJm3NJs7JxijPj0CGCb2KPGLuMS18xV7T
h5lem0feEbIEe8iuw816dPcWSU8ifGRnaT4M+Xkyz94+yFq0drJ36pq+52xpVfVJ
Zu2YTzTXhgQ9Nr2+Lk991prqfo6+70m1HdqVdqwZMgaLG9ZnlZ1fiSspcHgMrOBS
TaMiZT914zBDw/XnJ6tfPrJvv3lxCffGgXUeYP9laqCYKj6T+w6ugL/zW+JW/xfY
pf0++N8IQHclCghE5Q9DbQnTqowBmoE3VmzxGbTgP2WLj8/H+y647J1Jjhtgh+wy
xve7XivvUxNJqw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:51:58 2024 by rpki-client on console-ams.rpki-client.org