Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File:                     OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier:          WISXJBTiFhG/YecI4Mt2O+bH0EMXoVvYhOXpBaQM4sM=
Subject key identifier:   65:16:E5:10:C8:0A:F3:63:A3:54:DB:C8:64:9A:4D:B3:5C:59:B1:9F
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer:       /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial:       018F889215EC02056F5667E3C040EE41975C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number:          0E0B
Signing time:             Fri 17 May 2024 22:00:26 +0000
Manifest this update:     Fri 17 May 2024 22:00:26 +0000
Manifest next update:     Sat 18 May 2024 22:00:26 +0000
Files and hashes:         1: M2Xp18U-PDBAtsOOuM80XS5SkQw.roa (hash: +GgloJbwt/3Brd9zOw37AqirtOoYu/qpQNv9SBDog6U=)
                          2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: bvpE/Z6VdZygplh5M9alm4rlzPhYKR9egGkVSQEIa14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:15:ec:02:05:6f:56:67:e3:c0:40:ee:41:97:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
        Validity
            Not Before: May 17 22:00:26 2024 GMT
            Not After : May 18 22:00:26 2024 GMT
        Subject: CN=6516e510c80af363a354dbc8649a4db35c59b19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:71:63:0e:77:bd:0c:1f:b3:6a:71:2d:76:
                    2b:b0:4a:94:28:98:45:19:a1:6b:65:70:e7:e1:bc:
                    47:74:3a:49:b4:2c:c1:a5:c5:e4:a5:1a:e7:bc:65:
                    38:b3:21:89:f7:a2:dc:66:73:a0:2a:6a:ca:2a:c7:
                    36:f4:7f:73:5c:7a:b5:25:69:3f:17:39:f0:91:35:
                    51:23:4b:53:f5:48:a4:89:d7:95:3d:e9:a7:56:10:
                    79:8f:ab:b2:eb:d7:dd:02:96:2e:e8:e9:04:e5:cb:
                    2b:12:7b:60:8a:32:5e:0c:7c:27:ed:27:9d:79:fc:
                    d4:11:ce:cc:85:ac:a8:76:07:d5:75:6c:40:b4:da:
                    08:85:51:ca:44:b8:52:f6:d6:4f:bb:e9:9e:60:b7:
                    b1:2f:40:c1:0e:fb:32:d1:ca:b9:72:85:38:cc:fd:
                    91:fe:c3:97:b5:c0:41:27:dd:f6:4a:e9:7d:30:64:
                    85:8e:04:0f:b4:0b:70:a9:3a:54:1f:e5:53:1c:21:
                    b5:82:0d:53:aa:9b:d0:ee:52:ae:79:30:ba:8d:bd:
                    30:c9:36:58:00:94:67:d6:22:1d:cc:1e:27:1c:42:
                    08:c3:8c:71:80:22:55:ef:51:f1:6c:cf:0b:7b:af:
                    9f:b1:fc:a5:35:78:73:18:cb:79:ea:0e:a4:81:9f:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:E5:10:C8:0A:F3:63:A3:54:DB:C8:64:9A:4D:B3:5C:59:B1:9F
            X509v3 Authority Key Identifier:
                keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a2:83:e6:54:7c:3b:f0:3d:ac:84:1d:e0:5f:4c:42:3a:41:
         f7:e3:15:8c:ce:4f:a9:d8:99:a3:72:9c:80:20:4b:a1:48:c3:
         ba:2c:9c:4e:be:c3:6b:c3:ed:02:57:d6:92:0b:e8:11:8f:ef:
         c3:31:8e:a4:66:1e:82:71:f9:e1:2f:5f:6b:2e:e6:5b:45:e7:
         c6:e6:f3:14:de:15:bd:e4:2f:b5:8a:88:81:d4:42:cb:a4:85:
         cb:4b:03:b8:bc:38:8e:45:d5:8b:9d:54:1d:52:2b:49:ae:5c:
         a2:b6:fd:ae:76:f0:f6:45:93:a9:d4:d6:f8:44:d2:c7:16:73:
         34:38:cd:e2:33:67:ea:dc:8f:a7:21:57:31:4e:23:fc:0f:f5:
         c8:f0:c6:00:e4:a6:1f:3f:fa:67:92:35:0b:36:d6:8d:e8:35:
         67:c7:19:cd:01:28:45:d3:17:ca:43:b7:08:cb:5d:bf:8e:19:
         13:26:ad:a8:b0:13:3b:1a:db:0c:06:db:74:0e:db:09:7a:37:
         a4:7d:cd:0d:ac:5a:3f:02:01:bd:0c:37:67:6c:cf:1c:c2:6a:
         b7:cc:42:e2:a2:e2:41:9c:c7:14:e6:c0:6a:cc:a5:db:7c:d4:
         7b:44:eb:ad:c9:cd:aa:cc:51:18:62:82:eb:2c:36:a2:fc:2f:
         59:56:24:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkhXsAgVvVmfjwEDuQZdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw
MjNhOTMwHhcNMjQwNTE3MjIwMDI2WhcNMjQwNTE4MjIwMDI2WjAzMTEwLwYDVQQD
Eyg2NTE2ZTUxMGM4MGFmMzYzYTM1NGRiYzg2NDlhNGRiMzVjNTliMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgZxYw53vQwfs2pxLXYrsEqUKJhF
GaFrZXDn4bxHdDpJtCzBpcXkpRrnvGU4syGJ96LcZnOgKmrKKsc29H9zXHq1JWk/
FznwkTVRI0tT9UikideVPemnVhB5j6uy69fdApYu6OkE5csrEntgijJeDHwn7Sed
efzUEc7MhayodgfVdWxAtNoIhVHKRLhS9tZPu+meYLexL0DBDvsy0cq5coU4zP2R
/sOXtcBBJ932Sul9MGSFjgQPtAtwqTpUH+VTHCG1gg1TqpvQ7lKueTC6jb0wyTZY
AJRn1iIdzB4nHEIIw4xxgCJV71HxbM8Le6+fsfylNXhzGMt56g6kgZ912wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUW5RDICvNjo1TbyGSaTbNcWbGfMB8GA1UdIwQY
MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt
ZWYzOGU4Y2UzM2QxLzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx
LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKKD5lR8
O/A9rIQd4F9MQjpB9+MVjM5PqdiZo3KcgCBLoUjDuiycTr7Da8PtAlfWkgvoEY/v
wzGOpGYegnH54S9fay7mW0XnxubzFN4VveQvtYqIgdRCy6SFy0sDuLw4jkXVi51U
HVIrSa5corb9rnbw9kWTqdTW+ETSxxZzNDjN4jNn6tyPpyFXMU4j/A/1yPDGAOSm
Hz/6Z5I1CzbWjeg1Z8cZzQEoRdMXykO3CMtdv44ZEyatqLATOxrbDAbbdA7bCXo3
pH3NDaxaPwIBvQw3Z2zPHMJqt8xC4qLiQZzHFObAasyl23zUe0TrrcnNqsxRGGKC
6yw2ovwvWVYktQ==
-----END CERTIFICATE-----
Generated at Fri May 17 23:44:53 2024 by rpki-client on console-fra.rpki-client.org