Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File:                     0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier:          s6NIeBB6XnCRG10XF5+1JjEXx/lC8oa+Eu70B0Yd+Ls=
Subject key identifier:   70:48:AE:E9:FC:66:06:5D:0C:22:A8:E8:32:2F:45:D7:EA:71:41:11
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer:       /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial:       0190535963E5A6EC1143009F9381E8117798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number:          0B52
Signing time:             Wed 26 Jun 2024 07:01:25 +0000
Manifest this update:     Wed 26 Jun 2024 07:01:25 +0000
Manifest next update:     Thu 27 Jun 2024 07:01:25 +0000
Files and hashes:         1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: nxr7JWSyNU7jv0ZfSsvEaKahK932+rR1vuR0nX6HZ1o=)
                          2: Pfd9uLKOETdr6YTqfKMplIWUh4k.roa (hash: zXc7hMC0z3vNfPZLo7csYBHZ/ASJRgX7VOGpIsNiQ58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:59:63:e5:a6:ec:11:43:00:9f:93:81:e8:11:77:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
        Validity
            Not Before: Jun 26 07:01:25 2024 GMT
            Not After : Jun 27 07:01:25 2024 GMT
        Subject: CN=7048aee9fc66065d0c22a8e8322f45d7ea714111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:70:5f:fa:33:1f:8f:90:16:19:07:e9:54:
                    22:7f:6d:16:a2:df:10:38:b2:28:88:5e:99:e7:c9:
                    bd:a5:ff:df:a7:c0:6e:8a:07:a5:81:ed:52:c5:e9:
                    05:7f:e2:86:ba:ee:18:f2:5e:90:fe:e0:ae:ca:38:
                    df:65:b9:7d:2b:c6:6c:d7:e4:a5:17:6d:90:2b:e5:
                    71:7d:f1:e0:6d:e9:7c:d9:81:4c:df:bb:bb:8e:2f:
                    04:a9:a8:42:94:77:df:ed:8b:ca:96:ea:e9:53:c8:
                    72:e1:b9:93:7b:41:c1:31:ca:8b:dd:a8:07:12:be:
                    c2:bc:2f:f9:93:7e:67:cf:d5:67:45:a9:69:8d:0f:
                    39:12:99:76:b0:26:f5:3d:ce:f6:bf:28:a4:26:5d:
                    9f:59:4f:70:f9:d2:84:ea:e5:a9:90:43:a4:6d:1f:
                    6c:4e:4e:50:61:0c:ad:0a:b5:87:9c:87:24:ac:af:
                    80:a0:09:fc:ba:87:c1:dd:7c:24:32:e4:34:9f:b2:
                    7b:8c:e0:28:17:bf:f1:6a:86:cb:d3:da:95:ae:5b:
                    ab:7e:4e:31:30:60:e8:23:27:9e:d2:4c:96:14:56:
                    37:17:ad:db:b0:26:6c:ef:b1:4d:f8:68:74:2e:f1:
                    70:28:52:d3:35:5e:48:dc:2a:4c:17:2b:3e:be:73:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:AE:E9:FC:66:06:5D:0C:22:A8:E8:32:2F:45:D7:EA:71:41:11
            X509v3 Authority Key Identifier:
                keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:56:8a:11:18:d9:9d:72:29:41:ce:16:a7:3a:04:67:22:c6:
         65:19:d5:69:05:66:ed:81:f8:81:20:05:1a:6d:71:ed:4c:42:
         39:68:cc:c3:21:31:b1:d6:fb:b7:1a:1b:c0:f8:59:d3:f0:aa:
         a5:f2:64:2a:ce:d5:0c:97:b7:e8:ca:a6:75:85:f5:ed:69:de:
         fb:de:cf:73:bf:46:2d:e7:3b:aa:ca:b4:76:ba:e9:18:ab:c9:
         bf:ae:8c:57:36:1c:2e:df:26:24:c8:ce:f7:d7:6d:47:8e:03:
         c6:81:2a:d1:4c:fb:ed:fa:5b:3a:71:5a:3c:cd:be:5f:2b:e4:
         82:cf:3f:78:46:e1:8a:b5:1c:60:0a:47:70:6b:c0:bd:1d:70:
         c4:0a:76:18:e5:b5:d8:1e:eb:92:8a:6a:c4:b2:55:f8:3a:b1:
         ff:5c:7c:74:ee:1e:21:3c:2b:41:0f:2b:28:59:38:f0:c0:1d:
         89:71:a5:9f:c7:93:06:c5:8a:9a:f1:19:95:4c:22:ed:0c:96:
         93:63:7c:cf:3c:68:c9:4e:c0:28:4d:d3:f6:7c:62:66:02:3d:
         bd:28:59:ed:bc:c0:70:d6:26:db:dc:97:4b:fd:18:b7:1c:f9:
         ea:4f:53:32:5d:5c:8d:ed:b8:fe:6b:39:0b:a0:30:51:42:5a:
         3a:49:8d:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBTWWPlpuwRQwCfk4HoEXeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMDNhZjE5NzY0NWE0OTQxYzZjZGIwODY2OWFmMDA4Yjc5
MTAyYmUwHhcNMjQwNjI2MDcwMTI1WhcNMjQwNjI3MDcwMTI1WjAzMTEwLwYDVQQD
Eyg3MDQ4YWVlOWZjNjYwNjVkMGMyMmE4ZTgzMjJmNDVkN2VhNzE0MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C9wX/ozH4+QFhkH6VQif20Wot8Q
OLIoiF6Z58m9pf/fp8Buigelge1SxekFf+KGuu4Y8l6Q/uCuyjjfZbl9K8Zs1+Sl
F22QK+VxffHgbel82YFM37u7ji8EqahClHff7YvKlurpU8hy4bmTe0HBMcqL3agH
Er7CvC/5k35nz9VnRalpjQ85Epl2sCb1Pc72vyikJl2fWU9w+dKE6uWpkEOkbR9s
Tk5QYQytCrWHnIckrK+AoAn8uofB3XwkMuQ0n7J7jOAoF7/xaobL09qVrlurfk4x
MGDoIyee0kyWFFY3F63bsCZs77FN+Gh0LvFwKFLTNV5I3CpMFys+vnP1YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBIrun8ZgZdDCKo6DIvRdfqcUERMB8GA1UdIwQY
MBaAFNEDrxl2RaSUHGzbCGaa8Ai3kQK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDkt
N2RiM2VjNmZhMzAyLzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDktN2RiM2VjNmZhMzAy
LzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFaKERjZ
nXIpQc4WpzoEZyLGZRnVaQVm7YH4gSAFGm1x7UxCOWjMwyExsdb7txobwPhZ0/Cq
pfJkKs7VDJe36MqmdYX17Wne+97Pc79GLec7qsq0drrpGKvJv66MVzYcLt8mJMjO
99dtR44DxoEq0Uz77fpbOnFaPM2+Xyvkgs8/eEbhirUcYApHcGvAvR1wxAp2GOW1
2B7rkopqxLJV+Dqx/1x8dO4eITwrQQ8rKFk48MAdiXGln8eTBsWKmvEZlUwi7QyW
k2N8zzxoyU7AKE3T9nxiZgI9vShZ7bzAcNYm29yXS/0Ytxz56k9TMl1cje24/ms5
C6AwUUJaOkmNkQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:47:15 2024 by rpki-client on console-ams.rpki-client.org