Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File:                     OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier:          Yt2hP9oNMAltl7TtoZzGAH6N+7CV9AY1kzwyh7QuQs0=
Subject key identifier:   41:A3:2A:42:FB:25:A5:A7:42:6E:1D:D8:48:03:4A:FA:02:25:A7:9D
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer:       /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial:       018F874A37A7789A212F00CD6974228FC404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number:          069A
Signing time:             Fri 17 May 2024 16:02:19 +0000
Manifest this update:     Fri 17 May 2024 16:02:19 +0000
Manifest next update:     Sat 18 May 2024 16:02:19 +0000
Files and hashes:         1: 1-rD-wfu8vyZ787pNbsLl0LRbsoA.roa (hash: +RBYoxokBRzSDMi2Oyx9NxuyDdmUl3Ozvy+nGuK4NKc=)
                          2: CAHrILDi7JAU1KoY9fZvDY0WcL0.roa (hash: 9cc+BBCLpHyZHWEQj7UOHoLsuPe4SEBq52chOIU74ig=)
                          3: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: pdhzzfVXXcRuquCbqu2wBf6EAkLgZTs4WzMRtiP6agQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:37:a7:78:9a:21:2f:00:cd:69:74:22:8f:c4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
        Validity
            Not Before: May 17 16:02:19 2024 GMT
            Not After : May 18 16:02:19 2024 GMT
        Subject: CN=41a32a42fb25a5a7426e1dd848034afa0225a79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6e:61:de:c4:11:44:43:55:cd:89:57:be:eb:
                    84:a0:7d:a9:55:d7:7e:3a:d4:ca:c0:b8:5b:10:26:
                    2b:c9:25:1f:72:36:09:61:d5:d5:da:a8:e0:4a:e9:
                    64:cf:84:5b:1b:0f:95:ed:c2:65:95:f9:c4:e7:ae:
                    47:fc:45:f8:7d:32:15:03:fb:f8:3b:c3:b4:c0:98:
                    3e:0f:f5:f7:17:a4:30:b7:4f:46:60:64:7e:38:ed:
                    f5:4c:88:f5:50:69:31:41:c3:78:df:74:bc:22:2a:
                    1b:55:3b:66:21:e9:bb:38:8e:e5:40:cc:ac:fa:29:
                    6c:44:91:42:98:81:8c:7c:86:56:83:a7:c4:31:67:
                    21:da:0d:1e:06:aa:9c:07:ad:95:ba:cf:12:74:0f:
                    8d:1c:5a:6f:7b:4a:17:80:e7:3d:10:b2:d8:1d:6c:
                    29:74:79:8f:62:9e:b0:a5:da:0f:63:a8:26:fe:63:
                    50:d9:4e:e6:3e:65:34:d8:6b:7f:f5:41:b2:4c:6e:
                    54:10:5b:b1:74:a4:0f:20:18:b9:ff:f6:a7:81:2a:
                    af:c6:d7:50:1e:97:3f:76:41:81:7d:b1:34:44:86:
                    f7:e9:16:b2:42:9d:0d:0a:e2:02:6f:eb:17:19:f3:
                    ce:69:f3:77:cd:45:9c:d8:43:e2:c4:44:c4:bf:88:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:2A:42:FB:25:A5:A7:42:6E:1D:D8:48:03:4A:FA:02:25:A7:9D
            X509v3 Authority Key Identifier:
                keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0e:3b:ba:4d:7b:73:49:cc:b2:94:7c:3a:c9:10:97:5d:96:
         df:ab:71:30:25:74:94:aa:d6:74:88:65:0e:98:a7:50:16:27:
         4f:d7:68:73:24:17:2e:f7:c5:8d:e1:91:6d:16:71:e1:fe:9d:
         28:dc:7e:99:d7:54:42:6b:b7:ba:e5:30:47:ab:bf:04:10:19:
         d6:c4:3b:0d:e2:79:d4:c9:18:f5:5e:5a:11:e7:22:94:0e:63:
         96:9c:cf:21:aa:5c:23:e4:ff:99:e9:63:81:a3:fc:8e:08:42:
         fc:a1:f4:49:49:80:28:8c:5c:45:39:98:c7:85:fa:94:2c:ba:
         fe:d4:ac:fa:e9:e5:77:df:e1:a4:fe:37:19:2e:88:d8:26:15:
         15:12:f2:e2:83:e5:19:33:13:43:00:92:87:71:68:0a:c2:d4:
         27:5f:38:38:0e:5f:25:ba:54:75:e7:f9:e1:e3:a3:55:01:a5:
         4b:75:c2:2e:c8:f9:fb:f6:b6:0b:c2:2a:9e:84:e6:b1:dc:2a:
         2a:4b:fb:ae:70:15:63:62:5f:95:72:ca:c9:e0:41:d1:5b:57:
         12:dc:2d:3c:b5:63:22:2a:28:db:36:ee:56:02:28:9e:92:e3:
         29:2a:6c:0c:35:f3:ed:d1:78:1c:01:6d:ef:42:de:60:fa:63:
         2a:47:44:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSjeneJohLwDNaXQij8QEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2
ZGJmMDQwHhcNMjQwNTE3MTYwMjE5WhcNMjQwNTE4MTYwMjE5WjAzMTEwLwYDVQQD
Eyg0MWEzMmE0MmZiMjVhNWE3NDI2ZTFkZDg0ODAzNGFmYTAyMjVhNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m5h3sQRRENVzYlXvuuEoH2pVdd+
OtTKwLhbECYrySUfcjYJYdXV2qjgSulkz4RbGw+V7cJllfnE565H/EX4fTIVA/v4
O8O0wJg+D/X3F6Qwt09GYGR+OO31TIj1UGkxQcN433S8IiobVTtmIem7OI7lQMys
+ilsRJFCmIGMfIZWg6fEMWch2g0eBqqcB62Vus8SdA+NHFpve0oXgOc9ELLYHWwp
dHmPYp6wpdoPY6gm/mNQ2U7mPmU02Gt/9UGyTG5UEFuxdKQPIBi5//angSqvxtdQ
Hpc/dkGBfbE0RIb36RayQp0NCuICb+sXGfPOafN3zUWc2EPixETEv4j8pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGjKkL7JaWnQm4d2EgDSvoCJaedMB8GA1UdIwQY
MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt
NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz
LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw47uk17
c0nMspR8OskQl12W36txMCV0lKrWdIhlDpinUBYnT9docyQXLvfFjeGRbRZx4f6d
KNx+mddUQmu3uuUwR6u/BBAZ1sQ7DeJ51MkY9V5aEecilA5jlpzPIapcI+T/melj
gaP8jghC/KH0SUmAKIxcRTmYx4X6lCy6/tSs+unld9/hpP43GS6I2CYVFRLy4oPl
GTMTQwCSh3FoCsLUJ184OA5fJbpUdef54eOjVQGlS3XCLsj5+/a2C8IqnoTmsdwq
Kkv7rnAVY2JflXLKyeBB0VtXEtwtPLVjIioo2zbuVgIonpLjKSpsDDXz7dF4HAFt
70LeYPpjKkdE/A==
-----END CERTIFICATE-----