Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File:                     oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier:          KAdGS3CoozxFMYEmL4qRH23RbGxVRCMxraNwVqw/xrU=
Subject key identifier:   BD:E3:81:C8:AB:A3:3F:C1:C9:3F:A8:C2:07:B9:72:8E:D6:17:E1:90
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer:       /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial:       018F874963406E7B2D77BB08C002FAD206C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number:          0D9F
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: dWvBcWemXfZV3odBZBR1G4rg6KM.roa (hash: ths+9p0W3ZtpT7Dxl6F25w1KF9Uzw0zMNF+ZgYw+RJU=)
                          2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: ORHfCyC0+AQGwy59CsSloCuzdQSCRbMuaaKb2UzuNoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:63:40:6e:7b:2d:77:bb:08:c0:02:fa:d2:06:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=bde381c8aba33fc1c93fa8c207b9728ed617e190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:d2:b9:fc:7a:d9:a9:f8:cb:9d:47:08:f3:
                    df:2d:1f:e5:76:60:39:bf:b2:a7:a8:dc:fe:1d:88:
                    ed:d2:15:88:c6:eb:a5:6d:53:6a:9e:ac:da:a0:f1:
                    fe:67:27:df:24:a9:12:37:db:57:ea:fa:da:25:d9:
                    16:0b:0e:db:30:04:31:32:b1:d8:c7:5d:01:ea:e9:
                    9f:f7:de:d0:bd:ec:b5:51:b9:3f:0c:f1:62:ac:01:
                    26:f9:ac:dd:f6:12:48:19:26:be:9f:44:0f:5c:15:
                    97:17:11:e8:c3:12:a9:0e:cf:3a:ca:1b:2b:39:ff:
                    19:f2:8c:5e:fd:e9:ab:56:ea:56:2f:7f:e2:69:59:
                    95:6d:be:e8:60:1e:d9:59:3d:ff:67:f1:24:25:6d:
                    ad:fc:9e:8e:60:52:53:2e:b3:d2:a3:5a:df:61:64:
                    b7:b6:06:0f:d7:6d:1e:29:36:03:6d:62:16:84:40:
                    df:89:91:58:6e:72:ed:9e:58:6f:ee:aa:3a:a2:ca:
                    f0:86:db:5c:c6:5b:3d:d5:40:ad:31:a2:64:9d:af:
                    cc:84:c0:a5:96:5a:8c:1a:bd:41:7f:cc:ab:90:ca:
                    af:91:a3:4c:83:71:30:e8:59:8b:b2:dd:ae:5d:f6:
                    02:83:1d:2d:14:f9:57:28:71:f2:93:ac:5c:80:a5:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E3:81:C8:AB:A3:3F:C1:C9:3F:A8:C2:07:B9:72:8E:D6:17:E1:90
            X509v3 Authority Key Identifier:
                keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:59:85:8b:c2:49:cb:5f:ee:81:6a:69:8b:f5:cb:31:8a:
         78:3c:6b:10:04:e1:14:47:fb:cd:d7:78:86:d2:4d:47:b4:31:
         49:e0:26:3f:12:93:3f:21:8c:de:3e:94:82:bf:17:1f:cb:a1:
         4f:0f:f7:35:37:53:94:e8:e7:d8:96:1f:bd:f2:0a:de:af:47:
         ac:80:0f:9b:b1:4e:18:75:a9:6c:18:d4:54:1f:1d:b8:5f:91:
         52:5d:69:89:a0:bb:ac:9e:62:09:2b:96:a4:a2:93:d3:d5:12:
         38:14:34:6b:e7:7d:ef:b1:fc:23:d2:42:13:ce:43:c2:5e:c9:
         5d:6b:6f:d1:bc:b3:bb:85:64:74:1c:f6:d1:34:68:32:cb:03:
         4c:07:4b:f7:25:9b:6a:7d:3f:ea:bb:0c:04:33:db:aa:51:8e:
         40:91:c9:a4:74:57:93:dd:28:86:c1:a9:40:71:fc:1f:92:28:
         8c:39:89:5c:ea:53:88:28:2f:23:75:f8:dc:92:ae:22:51:dc:
         9e:4e:ed:2a:5e:be:5f:2c:b5:a0:f7:b6:4c:b6:9e:c4:f1:46:
         a9:78:1d:17:a1:6a:ac:6e:8f:70:c5:00:0e:93:2e:9a:91:2d:
         76:1b:11:f6:be:e0:3f:f8:70:49:2f:97:09:7c:ec:86:67:eb:
         ce:87:f3:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSWNAbnstd7sIwAL60gbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODQ0MDllNWMxODNiYmNjMzE1MzVmNGM3ZWVlNDc4MmNk
NjdiZTMwHhcNMjQwNTE3MTYwMTI0WhcNMjQwNTE4MTYwMTI0WjAzMTEwLwYDVQQD
EyhiZGUzODFjOGFiYTMzZmMxYzkzZmE4YzIwN2I5NzI4ZWQ2MTdlMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuonSufx62an4y51HCPPfLR/ldmA5
v7KnqNz+HYjt0hWIxuulbVNqnqzaoPH+ZyffJKkSN9tX6vraJdkWCw7bMAQxMrHY
x10B6umf997Qvey1Ubk/DPFirAEm+azd9hJIGSa+n0QPXBWXFxHowxKpDs86yhsr
Of8Z8oxe/emrVupWL3/iaVmVbb7oYB7ZWT3/Z/EkJW2t/J6OYFJTLrPSo1rfYWS3
tgYP120eKTYDbWIWhEDfiZFYbnLtnlhv7qo6osrwhttcxls91UCtMaJkna/MhMCl
llqMGr1Bf8yrkMqvkaNMg3Ew6FmLst2uXfYCgx0tFPlXKHHyk6xcgKVd9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3jgciroz/ByT+owge5co7WF+GQMB8GA1UdIwQY
MBaAFKGEQJ5cGDu8wxU19Mfu5Hgs1nvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2It
YzJiN2NmZjA2NjFjLzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2ItYzJiN2NmZjA2NjFj
LzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7dZhYvC
Sctf7oFqaYv1yzGKeDxrEAThFEf7zdd4htJNR7QxSeAmPxKTPyGM3j6Ugr8XH8uh
Tw/3NTdTlOjn2JYfvfIK3q9HrIAPm7FOGHWpbBjUVB8duF+RUl1piaC7rJ5iCSuW
pKKT09USOBQ0a+d977H8I9JCE85Dwl7JXWtv0byzu4VkdBz20TRoMssDTAdL9yWb
an0/6rsMBDPbqlGOQJHJpHRXk90ohsGpQHH8H5IojDmJXOpTiCgvI3X43JKuIlHc
nk7tKl6+Xyy1oPe2TLaexPFGqXgdF6FqrG6PcMUADpMumpEtdhsR9r7gP/hwSS+X
CXzshmfrzofzow==
-----END CERTIFICATE-----
Generated at Fri May 17 18:03:44 2024 by rpki-client on console-ams.rpki-client.org