Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File:                     uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier:          FrqXtkwt351eVprdTXO87cXNJHfdrts05V67gThM90g=
Subject key identifier:   DB:0D:1F:C8:DE:68:1E:B6:C9:BC:C5:1F:7C:7F:7A:E2:09:49:84:29
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer:       /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial:       0191FAECA7A27506C210272088AA6E0224B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number:          0139
Signing time:             Mon 16 Sep 2024 13:01:38 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:38 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:38 +0000
Files and hashes:         1: HeGLMR8aS9ls-aT99LNVkRPJGIk.roa (hash: HDXHZ2zRy1ITl2BRNS4QImY0s4RpycKfd1/9LOdf97w=)
                          2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: OedzIRXj/KGqoJtW1mkhqQfuOMYApqOGQrddrYiJiF0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:a7:a2:75:06:c2:10:27:20:88:aa:6e:02:24:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
        Validity
            Not Before: Sep 16 13:01:38 2024 GMT
            Not After : Sep 17 13:01:38 2024 GMT
        Subject: CN=db0d1fc8de681eb6c9bcc51f7c7f7ae209498429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:b7:6b:d2:5f:40:a0:77:58:9c:d6:8e:65:
                    82:05:83:69:e6:08:f0:6d:af:14:3e:b1:71:c2:ce:
                    3e:bf:47:df:d6:eb:f1:45:64:04:04:23:e1:8e:a7:
                    a6:ce:c3:17:5c:a4:1e:5a:36:db:f7:16:b5:be:d9:
                    df:e4:67:7f:aa:c3:14:e4:d7:fa:10:1b:59:df:eb:
                    44:7e:cd:73:61:6d:4a:f5:96:82:ce:68:a1:0c:39:
                    97:1d:f1:9e:02:6d:45:53:22:7f:99:d6:c3:22:ae:
                    00:53:53:5e:46:4c:ec:ea:89:0d:a0:c0:3b:4f:91:
                    0d:b6:0d:a1:91:40:7d:ab:22:de:0d:fa:45:8d:d6:
                    95:ae:6c:d1:81:6d:34:e4:a3:8d:36:71:1b:ee:03:
                    79:dc:89:1a:f9:3c:6c:dd:a6:80:43:26:d6:dd:69:
                    e7:ff:93:cd:04:79:d1:23:70:e0:cc:b2:c6:24:1c:
                    8e:6e:d7:4d:5a:17:4d:42:20:85:a8:b6:6f:41:05:
                    f2:02:03:97:14:0a:8c:fa:26:2a:3a:b4:82:1b:49:
                    4e:34:b6:06:52:bd:46:08:63:0f:53:9e:8f:1a:ff:
                    ac:a6:8c:62:8b:37:52:b0:d3:cf:7f:5b:a4:e5:d8:
                    71:40:ff:9d:18:38:b2:75:53:26:15:61:fc:1a:b4:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0D:1F:C8:DE:68:1E:B6:C9:BC:C5:1F:7C:7F:7A:E2:09:49:84:29
            X509v3 Authority Key Identifier:
                keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:23:2b:c6:04:25:b2:1b:63:97:e6:ca:a3:d2:36:c4:62:e6:
         97:c3:f5:5e:92:5f:5c:5c:6a:7f:0b:89:14:02:e2:43:c6:0d:
         f9:43:8a:17:47:26:94:93:4d:4c:37:4e:11:db:2a:20:e0:86:
         7d:da:ba:3a:1c:26:3a:80:85:a3:6f:31:12:1e:70:e6:7a:ba:
         7f:cc:ed:67:98:65:97:55:83:c0:59:2f:07:e1:dc:d3:3f:72:
         da:10:2e:56:81:47:03:4a:33:4f:d3:99:46:1f:1f:97:08:88:
         9d:67:b0:52:22:71:a1:82:07:09:00:33:b5:3a:9b:c6:e8:b1:
         f6:93:73:7b:72:06:c3:ab:07:38:8f:ac:51:24:f7:c9:63:b6:
         2a:39:6a:b0:08:9e:73:c0:2c:fb:9d:7b:83:4d:e8:2a:02:2b:
         a7:2a:ed:9b:02:89:28:e3:40:3b:70:98:3e:ca:36:6b:a9:1d:
         d6:44:dd:a9:6f:a7:ca:e8:14:00:f8:ea:38:f1:56:13:c7:30:
         93:81:fa:82:f4:37:d5:05:b0:76:51:b7:fa:27:b6:d2:9f:e0:
         10:9c:90:e1:c1:27:4a:33:4b:01:67:8a:fc:20:45:0b:0a:c6:
         08:67:fb:e1:ab:8d:0b:42:e6:88:d2:bd:53:5f:c3:48:be:0b:
         03:bf:62:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67KeidQbCECcgiKpuAiS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOGRhZDJjNGEwZTExN2E2ODY4YzhkNjdiZTEwMzA4YTY0
OTc0YWQwHhcNMjQwOTE2MTMwMTM4WhcNMjQwOTE3MTMwMTM4WjAzMTEwLwYDVQQD
EyhkYjBkMWZjOGRlNjgxZWI2YzliY2M1MWY3YzdmN2FlMjA5NDk4NDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN+3a9JfQKB3WJzWjmWCBYNp5gjw
ba8UPrFxws4+v0ff1uvxRWQEBCPhjqemzsMXXKQeWjbb9xa1vtnf5Gd/qsMU5Nf6
EBtZ3+tEfs1zYW1K9ZaCzmihDDmXHfGeAm1FUyJ/mdbDIq4AU1NeRkzs6okNoMA7
T5ENtg2hkUB9qyLeDfpFjdaVrmzRgW005KONNnEb7gN53Ika+Txs3aaAQybW3Wnn
/5PNBHnRI3DgzLLGJByObtdNWhdNQiCFqLZvQQXyAgOXFAqM+iYqOrSCG0lONLYG
Ur1GCGMPU56PGv+spoxiizdSsNPPf1uk5dhxQP+dGDiydVMmFWH8GrQmfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsNH8jeaB62ybzFH3x/euIJSYQpMB8GA1UdIwQY
MBaAFLqNrSxKDhF6aGjI1nvhAwimSXStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYt
MjljMDIzZjk0NzgxLzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mM2M1ZDgtNWVhNS00ODJlLTkzMWYtMjljMDIzZjk0Nzgx
LzEvdW8ydExFb09FWHBvYU1qV2UtRURDS1pKZEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliMrxgQl
shtjl+bKo9I2xGLml8P1XpJfXFxqfwuJFALiQ8YN+UOKF0cmlJNNTDdOEdsqIOCG
fdq6OhwmOoCFo28xEh5w5nq6f8ztZ5hll1WDwFkvB+Hc0z9y2hAuVoFHA0ozT9OZ
Rh8flwiInWewUiJxoYIHCQAztTqbxuix9pNze3IGw6sHOI+sUST3yWO2KjlqsAie
c8As+517g03oKgIrpyrtmwKJKONAO3CYPso2a6kd1kTdqW+nyugUAPjqOPFWE8cw
k4H6gvQ31QWwdlG3+ie20p/gEJyQ4cEnSjNLAWeK/CBFCwrGCGf74auNC0LmiNK9
U1/DSL4LA79ieQ==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:09:51 2024 by rpki-client on console-ams.rpki-client.org