Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File:                     O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier:          gZQvWjZuz/7my6T4Lodli30yFe5wWqj06MR8EIyYbR8=
Subject key identifier:   32:B4:A1:44:99:6B:94:F2:6D:84:CD:3C:AC:32:FF:CF:B8:56:38:2D
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer:       /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial:       018F874966913D857EF49C8DFC1C0D4B946A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number:          0704
Signing time:             Fri 17 May 2024 16:01:25 +0000
Manifest this update:     Fri 17 May 2024 16:01:25 +0000
Manifest next update:     Sat 18 May 2024 16:01:25 +0000
Files and hashes:         1: 5hjhV_qh2XFESbHTdDFG53vXqYE.roa (hash: nzi/xVmuO2XyvOFDdza+7pq610U/W5qKYRFb9ECgoOY=)
                          2: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: 7PblXEdCvkZuuXvYgESyG91MlK1IZQO9rAXKTuuoCs8=)
                          3: RqG-Jz778Zi9tyoECedsdnUZe1Q.roa (hash: JxqgWeiefmxaKrROuDs0k4n5KB5wn+WpjIB4OWo43PM=)
                          4: nQvKheQdx9TgefqBc71QnNS-Eqw.roa (hash: TVE2cosMxy8wbPeH2c/FAshBYJ18YHCC3KjO4b/QA3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:66:91:3d:85:7e:f4:9c:8d:fc:1c:0d:4b:94:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
        Validity
            Not Before: May 17 16:01:25 2024 GMT
            Not After : May 18 16:01:25 2024 GMT
        Subject: CN=32b4a144996b94f26d84cd3cac32ffcfb856382d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e9:ab:c6:8f:0e:99:4b:db:1f:3f:67:03:fa:
                    5b:6e:08:c7:01:f4:44:9e:b2:a3:c1:54:8b:80:e8:
                    21:52:2b:93:db:a0:15:f8:e7:48:f7:6a:de:69:eb:
                    5e:1b:ca:6b:a5:43:26:fc:0d:68:87:e0:5e:33:28:
                    92:71:c3:a7:1f:74:c1:1d:08:e4:21:7b:01:d5:17:
                    6b:33:61:19:91:12:e1:b2:30:4b:15:1a:cc:8d:a4:
                    3d:5e:c3:7d:83:81:8e:ae:e8:26:ce:01:5f:f5:46:
                    9f:c6:a3:b0:e9:c6:f7:88:16:52:93:c6:eb:86:ac:
                    f1:39:07:5a:51:49:a6:ce:5c:8b:75:86:a8:c0:2b:
                    97:bc:ba:a2:3d:7a:b2:d9:db:9a:2f:16:58:73:e1:
                    70:cc:f1:e4:14:0e:7a:c7:67:7f:78:00:f9:c2:68:
                    e6:f3:78:8c:f4:64:0c:73:f8:d9:96:aa:90:55:95:
                    9d:93:b4:99:81:fa:4b:0b:f4:df:24:ff:ea:a3:e4:
                    70:b1:e9:68:91:43:47:48:93:49:0d:e6:e6:5e:85:
                    74:c3:fc:f8:fe:38:e8:26:96:68:e6:f1:e4:f0:4e:
                    31:97:f7:e6:07:a7:76:42:b0:15:b1:85:4d:f0:55:
                    d6:3b:a7:14:b5:e0:c7:8c:df:9f:d9:08:8b:42:76:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B4:A1:44:99:6B:94:F2:6D:84:CD:3C:AC:32:FF:CF:B8:56:38:2D
            X509v3 Authority Key Identifier:
                keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:ba:cd:e3:68:d6:90:b8:20:f7:93:77:e5:70:95:98:8f:
         35:e9:4b:f7:d2:e0:46:e7:62:33:cf:93:2c:33:1b:9b:f7:b0:
         9e:b0:46:22:03:5e:ba:65:e5:b4:ea:d8:be:fe:6d:37:cc:e3:
         af:24:bf:2e:d0:72:e1:5c:ee:79:c9:9a:9d:63:2d:f1:ca:12:
         76:e8:b0:b6:e7:64:55:80:43:70:7c:3e:1c:dd:25:68:fb:a5:
         e2:4c:bf:02:8b:6c:eb:76:28:3c:a4:91:1e:7d:e6:db:4b:07:
         ff:c1:82:3b:5c:09:60:70:05:6f:1d:07:99:66:7d:87:30:03:
         03:12:36:8c:78:1b:9c:f8:16:10:84:25:0e:2d:a0:7f:65:33:
         a0:70:42:99:3a:c0:1e:de:86:70:3b:1e:88:5e:a7:96:97:26:
         df:61:06:a1:48:a6:39:01:29:bf:bf:f8:be:0b:ad:eb:71:28:
         ce:5e:2c:96:fe:3f:f6:b1:fd:70:a3:63:24:05:a6:5f:0d:bd:
         d3:a8:5a:6e:2b:d0:93:17:37:10:31:64:0c:99:6c:95:ce:28:
         e1:8d:08:f5:42:e9:f4:bb:c9:67:3a:22:0d:c6:e2:1a:7d:09:
         51:3a:38:48:64:d7:6d:70:d1:39:ac:ba:cb:36:0f:6e:64:13:
         1a:92:01:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSWaRPYV+9JyN/BwNS5RqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm
N2JmMmEwHhcNMjQwNTE3MTYwMTI1WhcNMjQwNTE4MTYwMTI1WjAzMTEwLwYDVQQD
EygzMmI0YTE0NDk5NmI5NGYyNmQ4NGNkM2NhYzMyZmZjZmI4NTYzODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8umrxo8OmUvbHz9nA/pbbgjHAfRE
nrKjwVSLgOghUiuT26AV+OdI92reaeteG8prpUMm/A1oh+BeMyiSccOnH3TBHQjk
IXsB1RdrM2EZkRLhsjBLFRrMjaQ9XsN9g4GOrugmzgFf9UafxqOw6cb3iBZSk8br
hqzxOQdaUUmmzlyLdYaowCuXvLqiPXqy2duaLxZYc+FwzPHkFA56x2d/eAD5wmjm
83iM9GQMc/jZlqqQVZWdk7SZgfpLC/TfJP/qo+RwselokUNHSJNJDebmXoV0w/z4
/jjoJpZo5vHk8E4xl/fmB6d2QrAVsYVN8FXWO6cUteDHjN+f2QiLQnZviQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK0oUSZa5TybYTNPKwy/8+4VjgtMB8GA1UdIwQY
MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt
YzY2MzJjYzAxNGIwLzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw
LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrG6zeNo
1pC4IPeTd+VwlZiPNelL99LgRudiM8+TLDMbm/ewnrBGIgNeumXltOrYvv5tN8zj
ryS/LtBy4VzuecmanWMt8coSduiwtudkVYBDcHw+HN0laPul4ky/Aots63YoPKSR
Hn3m20sH/8GCO1wJYHAFbx0HmWZ9hzADAxI2jHgbnPgWEIQlDi2gf2UzoHBCmTrA
Ht6GcDseiF6nlpcm32EGoUimOQEpv7/4vgut63Eozl4slv4/9rH9cKNjJAWmXw29
06habivQkxc3EDFkDJlslc4o4Y0I9ULp9LvJZzoiDcbiGn0JUTo4SGTXbXDROay6
yzYPbmQTGpIBhw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:05:36 2024 by rpki-client on console-ams.rpki-client.org