Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File:                     oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier:          vwwC/abQ4mBYpsHsiNe0cxqk3n4If+oU452mQmKQwWE=
Subject key identifier:   89:1B:2C:42:C9:6B:00:C1:58:C0:16:40:D4:30:28:B6:14:32:24:D4
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer:       /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial:       018F8748BF8962EF6E434A253918DF4D0116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number:          0B3F
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: LxDV/05LwfZx6f9PdunG00nykMlpDRrIgkvp3z379Qk=)
                          2: zrAZ7mGtNoaHqJhokRJDLmTJGfU.roa (hash: xePTqj6jseK4V9y0vP+MjbQhyLuSwb7HrglvKMlaW54=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bf:89:62:ef:6e:43:4a:25:39:18:df:4d:01:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=891b2c42c96b00c158c01640d43028b6143224d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:01:77:b9:a2:5f:e6:b9:3a:0f:8a:98:b6:
                    55:01:67:79:7d:54:fb:d8:0f:0a:d0:b0:85:fe:f9:
                    0b:39:53:c6:48:10:c9:5e:9d:41:8c:f6:0d:0d:7c:
                    2c:42:de:d0:43:b5:f1:78:65:c1:bd:35:73:f9:2b:
                    33:a9:84:08:e1:e0:b3:0b:c4:90:26:c3:af:70:ff:
                    a3:06:6c:e5:79:6b:b6:e1:25:1b:43:7b:32:ab:35:
                    e2:93:c3:95:30:bd:70:39:b3:1d:53:29:83:69:76:
                    ef:00:ee:72:c2:4f:59:69:46:ff:03:d0:28:45:d2:
                    d8:28:7f:db:a1:90:41:8c:ec:ab:d0:7b:29:6b:3e:
                    0c:fa:81:eb:18:a4:39:1a:f0:86:bf:dc:83:20:ce:
                    1a:29:12:e1:ab:b5:e0:47:86:07:cd:70:34:bb:cc:
                    97:bb:18:8d:7b:0c:d2:f7:25:4b:d0:1b:50:66:83:
                    8e:e2:f7:4e:36:5f:7f:b6:82:e7:59:5b:2a:7e:24:
                    59:dd:03:3f:6f:86:3e:2d:d6:fe:4b:61:57:1c:81:
                    44:8c:5c:fd:53:77:42:f4:51:f9:16:eb:3a:58:56:
                    9d:1a:29:86:49:33:7f:f6:4f:3f:19:33:60:f5:99:
                    70:8b:a9:67:4e:42:ff:4c:2b:d1:61:7d:21:21:19:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1B:2C:42:C9:6B:00:C1:58:C0:16:40:D4:30:28:B6:14:32:24:D4
            X509v3 Authority Key Identifier:
                keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:02:5e:64:5c:71:38:96:5d:ae:af:98:8a:ab:24:4f:1a:e5:
         4f:94:e7:76:63:1c:2d:17:7c:14:b6:dd:3c:76:94:b9:4f:3d:
         36:69:2e:fb:78:37:8f:21:d8:3e:b3:7e:81:a4:a9:49:a3:83:
         60:05:a6:a6:91:53:9f:82:1e:8d:f4:e1:92:02:87:88:b7:7e:
         ab:90:59:07:d3:16:92:59:a5:46:18:78:11:24:20:1f:70:b7:
         91:a2:f4:df:4d:c8:26:c1:11:58:cc:c3:f7:86:94:4e:46:f9:
         a6:8a:7b:3d:22:b8:0b:00:ba:c3:fd:65:35:6d:d3:47:ce:26:
         65:fa:4d:99:4c:87:6f:50:89:64:8e:75:84:44:fa:6f:2f:a7:
         54:cb:04:c3:3d:03:00:6f:06:a7:67:05:5a:2b:b6:ef:47:06:
         91:68:82:05:fe:8f:4f:41:ab:31:4d:84:99:eb:8b:64:8c:e6:
         43:09:18:a2:1f:93:d5:3a:32:ba:53:d4:e6:82:e0:da:60:de:
         b7:94:d1:81:ea:d6:d1:57:16:74:55:4f:19:50:0c:29:2e:0f:
         77:50:52:07:30:f4:ba:d0:81:7c:3e:1f:ce:c6:e4:d6:52:77:
         73:ad:0b:ef:d1:78:1d:b3:d4:8d:08:63:f7:79:10:c1:93:ba:
         10:9f:4a:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSL+JYu9uQ0olORjfTQEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzE1NzFjOGUxMGI0MTlkN2EzYmYzNmUxMDg1ZmZkNWNk
NzhhOTgwHhcNMjQwNTE3MTYwMDQyWhcNMjQwNTE4MTYwMDQyWjAzMTEwLwYDVQQD
Eyg4OTFiMmM0MmM5NmIwMGMxNThjMDE2NDBkNDMwMjhiNjE0MzIyNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtIBd7miX+a5Og+KmLZVAWd5fVT7
2A8K0LCF/vkLOVPGSBDJXp1BjPYNDXwsQt7QQ7XxeGXBvTVz+SszqYQI4eCzC8SQ
JsOvcP+jBmzleWu24SUbQ3syqzXik8OVML1wObMdUymDaXbvAO5ywk9ZaUb/A9Ao
RdLYKH/boZBBjOyr0Hspaz4M+oHrGKQ5GvCGv9yDIM4aKRLhq7XgR4YHzXA0u8yX
uxiNewzS9yVL0BtQZoOO4vdONl9/toLnWVsqfiRZ3QM/b4Y+Ldb+S2FXHIFEjFz9
U3dC9FH5Fus6WFadGimGSTN/9k8/GTNg9Zlwi6lnTkL/TCvRYX0hIRnCQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkbLELJawDBWMAWQNQwKLYUMiTUMB8GA1UdIwQY
MBaAFKBxVxyOELQZ16O/NuEIX/1c14qYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2Yt
MGMxZjY5YjdhZWU3LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2YtMGMxZjY5YjdhZWU3
LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAJeZFxx
OJZdrq+YiqskTxrlT5TndmMcLRd8FLbdPHaUuU89Nmku+3g3jyHYPrN+gaSpSaOD
YAWmppFTn4IejfThkgKHiLd+q5BZB9MWklmlRhh4ESQgH3C3kaL0303IJsERWMzD
94aUTkb5pop7PSK4CwC6w/1lNW3TR84mZfpNmUyHb1CJZI51hET6by+nVMsEwz0D
AG8Gp2cFWiu270cGkWiCBf6PT0GrMU2EmeuLZIzmQwkYoh+T1ToyulPU5oLg2mDe
t5TRgerW0VcWdFVPGVAMKS4Pd1BSBzD0utCBfD4fzsbk1lJ3c60L79F4HbPUjQhj
93kQwZO6EJ9KzQ==
-----END CERTIFICATE-----
Generated at Fri May 17 23:50:22 2024 by rpki-client on console-ams.rpki-client.org