Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File:                     43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier:          zgqQtajzhW+bI2WHXGfnDVLUDsOGamcQA8McdsWMcQw=
Subject key identifier:   73:18:69:0F:C0:5F:02:7A:69:2C:B2:51:0D:3B:06:CE:28:91:38:EE
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer:       /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial:       01901DEADBDA7B9FD4A1A3ACE1DA2411F2C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number:          0E28
Signing time:             Sat 15 Jun 2024 22:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:49 +0000
Files and hashes:         1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: 20QfAyox2n9yVttrWr7JOR1MtEfrnOrr3aXByEHKe2U=)
                          2: JzQVAYplWW6qFez98FFKsjOKt1s.roa (hash: BFYfOcHHQPZ2kc69Ap1QEVtami7oRAJLxTvXiYSxNr8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:db:da:7b:9f:d4:a1:a3:ac:e1:da:24:11:f2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
        Validity
            Not Before: Jun 15 22:00:49 2024 GMT
            Not After : Jun 16 22:00:49 2024 GMT
        Subject: CN=7318690fc05f027a692cb2510d3b06ce289138ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:86:03:69:25:e7:48:52:7c:82:61:ea:0f:
                    78:20:28:1b:45:63:0e:19:2e:0d:9d:c8:b6:ec:0e:
                    98:2b:33:ce:50:5d:86:25:a7:eb:2a:5b:5b:8a:ab:
                    54:6d:f6:19:b1:90:54:71:46:4f:d0:f9:ac:f8:9f:
                    e8:cc:12:c8:d2:c9:7b:fc:78:18:57:39:28:3b:5e:
                    71:7d:0a:42:fa:86:f4:63:0e:06:34:9e:e3:f7:bc:
                    f5:91:40:a1:78:cf:34:31:80:7d:13:a1:53:b0:ce:
                    4d:ff:5e:ea:fe:94:c6:4e:69:35:1a:69:1b:d6:80:
                    71:c9:05:55:eb:d4:5f:bb:f3:20:0c:c3:3c:7f:c8:
                    a2:62:af:fc:25:95:a0:6f:1d:dd:88:ec:dd:50:77:
                    aa:4a:6c:2e:5f:a8:eb:98:5f:b1:05:0b:b3:f9:4b:
                    26:04:32:44:c4:16:4e:20:b9:5c:a9:de:3a:1e:45:
                    84:6f:8d:f8:13:4f:22:0b:85:4f:75:8b:0b:b2:ef:
                    ee:90:1b:c3:0c:5c:08:cc:c1:9e:7c:71:5c:36:e7:
                    83:47:c6:1f:be:83:7d:c5:4b:19:76:c8:e5:e3:69:
                    98:a5:59:c5:94:61:5b:1d:61:6a:ae:61:d4:0a:ba:
                    15:4c:08:bd:88:4f:9d:3f:d7:dd:ec:16:2d:2c:f3:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:69:0F:C0:5F:02:7A:69:2C:B2:51:0D:3B:06:CE:28:91:38:EE
            X509v3 Authority Key Identifier:
                keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:12:e6:64:c8:68:22:66:6c:61:37:8e:e0:c4:50:73:22:c3:
         d5:69:e9:f0:09:cf:0b:2f:b0:90:b2:ac:aa:ff:a4:96:3d:30:
         dd:35:d2:81:d0:b9:3d:f9:e4:9d:4e:62:6d:7e:48:fb:10:52:
         10:bf:d2:92:c8:a8:a5:cc:e7:e8:95:93:6c:26:e9:7b:59:4b:
         e7:84:17:72:da:c8:26:7c:85:31:ad:82:d4:1c:6b:0a:33:71:
         e8:fd:9e:ac:63:d2:e7:6b:81:fa:82:91:51:29:67:eb:ba:81:
         df:8d:35:12:26:40:d8:3e:33:ab:e7:f3:e9:8f:e7:b7:3a:e6:
         73:0e:f1:bf:59:c2:09:5f:22:19:ec:6c:5b:88:bf:bd:ac:62:
         56:b2:08:c7:97:e3:28:69:bd:79:19:6b:64:69:75:9d:cf:e2:
         cc:39:2c:0a:ac:32:2d:e2:9a:e7:e9:e1:60:e1:eb:e6:ac:4c:
         25:0e:20:71:89:89:81:d0:25:28:ce:34:b0:c9:c6:e6:ee:f4:
         46:1d:0d:ec:ec:62:b3:e8:eb:5b:22:96:91:c6:bd:ec:fb:37:
         5f:6b:9a:a3:19:43:75:86:dd:2c:73:25:26:6b:8d:89:27:19:
         b2:c9:87:e9:7e:3b:97:de:f6:9f:62:d8:c8:f1:96:53:9e:e8:
         91:8f:ba:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6tvae5/UoaOs4dokEfLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2EyMGE3ZjI4YTgyNGY2NzMxNWE1NjZlNTkyNDRhYWE4
YzdkNGEwHhcNMjQwNjE1MjIwMDQ5WhcNMjQwNjE2MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg3MzE4NjkwZmMwNWYwMjdhNjkyY2IyNTEwZDNiMDZjZTI4OTEzOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBWGA2kl50hSfIJh6g94ICgbRWMO
GS4Nnci27A6YKzPOUF2GJafrKltbiqtUbfYZsZBUcUZP0Pms+J/ozBLI0sl7/HgY
VzkoO15xfQpC+ob0Yw4GNJ7j97z1kUCheM80MYB9E6FTsM5N/17q/pTGTmk1Gmkb
1oBxyQVV69Rfu/MgDMM8f8iiYq/8JZWgbx3diOzdUHeqSmwuX6jrmF+xBQuz+Usm
BDJExBZOILlcqd46HkWEb434E08iC4VPdYsLsu/ukBvDDFwIzMGefHFcNueDR8Yf
voN9xUsZdsjl42mYpVnFlGFbHWFqrmHUCroVTAi9iE+dP9fd7BYtLPNuxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMYaQ/AXwJ6aSyyUQ07Bs4okTjuMB8GA1UdIwQY
MBaAFON6IKfyioJPZzFaVm5ZJEqqjH1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMt
NTcwNjllMDgwM2I1LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMtNTcwNjllMDgwM2I1
LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBLmZMho
ImZsYTeO4MRQcyLD1Wnp8AnPCy+wkLKsqv+klj0w3TXSgdC5PfnknU5ibX5I+xBS
EL/Sksiopczn6JWTbCbpe1lL54QXctrIJnyFMa2C1BxrCjNx6P2erGPS52uB+oKR
USln67qB3401EiZA2D4zq+fz6Y/ntzrmcw7xv1nCCV8iGexsW4i/vaxiVrIIx5fj
KGm9eRlrZGl1nc/izDksCqwyLeKa5+nhYOHr5qxMJQ4gcYmJgdAlKM40sMnG5u70
Rh0N7Oxis+jrWyKWkca97Ps3X2uaoxlDdYbdLHMlJmuNiScZssmH6X47l972n2LY
yPGWU57okY+6fQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:37 2024 by rpki-client on console-fra.rpki-client.org