Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File:                     odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier:          HIkASxksWYcXFe+M1R1z+hsXMZDs1BUj0tfmK2/1vEw=
Subject key identifier:   53:4F:8A:50:76:F2:EB:89:ED:D8:1C:FD:18:7A:DC:20:87:0D:75:3E
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer:       /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial:       018F8891FF4E5E0F4923F5FC59ECC42BED1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number:          B7
Signing time:             Fri 17 May 2024 22:00:20 +0000
Manifest this update:     Fri 17 May 2024 22:00:20 +0000
Manifest next update:     Sat 18 May 2024 22:00:20 +0000
Files and hashes:         1: XBq308eieXeFe7v7gdL3LZrohj4.roa (hash: xSlshgkVM4idAl3uP4UuqOmUJsGEvTmF0k7eSkLEpbQ=)
                          2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: YiYDxbIREHrGK0wGXJcY8+7lmvl4c2ElOq0tUjvtNfo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:ff:4e:5e:0f:49:23:f5:fc:59:ec:c4:2b:ed:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
        Validity
            Not Before: May 17 22:00:20 2024 GMT
            Not After : May 18 22:00:20 2024 GMT
        Subject: CN=534f8a5076f2eb89edd81cfd187adc20870d753e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:03:8a:72:15:a5:8c:96:d9:e2:e7:35:05:
                    fd:8f:40:4b:b6:3b:45:82:38:b2:32:43:4b:37:77:
                    5c:a6:53:43:d0:44:1d:d5:4e:fb:e0:05:5e:b7:5f:
                    52:c2:1e:18:21:f4:79:6e:61:c3:a9:2c:e4:fa:b1:
                    0c:6d:21:44:dc:83:21:bb:33:aa:f3:32:78:79:ce:
                    6d:f4:de:7c:0a:f2:f7:16:e5:09:88:99:ba:eb:fb:
                    57:78:48:44:3f:7d:36:89:3c:fc:9e:37:6f:46:77:
                    90:ae:13:65:f1:65:7c:fb:7d:7d:e3:d0:9d:3e:a7:
                    5d:57:39:a9:f7:e1:cc:ec:79:7a:8f:06:8d:ff:96:
                    5c:11:c0:74:26:d1:82:93:1a:e8:1b:7d:0b:f8:2f:
                    1b:53:d1:2c:1e:72:de:7a:32:8e:e6:db:f0:c3:da:
                    4a:5f:f3:4e:2b:94:79:bd:08:e4:70:24:6c:89:fd:
                    1e:7a:3c:8b:a9:67:f5:ce:aa:b7:53:ca:73:2c:c8:
                    fe:b4:d6:9f:d1:80:b6:25:2e:50:fa:ed:c6:92:b4:
                    61:e4:fc:a3:07:51:96:a5:ce:6c:8c:92:ab:89:d9:
                    30:72:66:f4:55:8d:19:b1:45:7d:dc:81:05:ed:ef:
                    74:d6:d1:f3:4e:8c:2f:7d:52:d2:36:05:e8:c4:0f:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:8A:50:76:F2:EB:89:ED:D8:1C:FD:18:7A:DC:20:87:0D:75:3E
            X509v3 Authority Key Identifier:
                keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a7:e8:99:3a:51:55:81:42:e2:1c:be:28:32:c1:c7:ee:f6:
         48:fe:0e:8b:7c:81:cf:fa:fc:07:33:22:d8:02:49:d2:fe:1b:
         a6:79:00:5c:68:e7:b8:eb:67:3c:aa:70:a8:9e:7a:02:26:11:
         eb:33:4b:dd:f5:7f:00:b3:2b:fa:ba:c2:b6:25:26:9f:f3:1a:
         7f:87:ce:f6:e2:dd:68:ac:ef:c9:60:97:28:2c:ce:2e:18:02:
         4b:51:b2:0e:14:24:f7:a5:74:89:60:f8:c4:43:7f:b2:8b:7e:
         56:8d:52:f1:b7:85:21:49:7f:95:9f:2b:36:81:f6:d9:fe:40:
         27:7e:52:56:12:eb:ea:e4:75:61:15:aa:3e:10:ef:59:25:f8:
         66:c6:df:26:72:3d:0b:8d:d3:10:91:11:2d:23:58:fb:81:4f:
         8e:4a:40:43:2f:1a:dc:02:78:31:34:a3:64:ee:c3:9a:f2:9e:
         92:0d:7d:a4:0e:71:ef:1d:9c:28:db:b7:7a:2f:85:b5:90:aa:
         b8:ba:4b:22:d2:64:ae:a5:21:a5:0e:34:fb:04:b0:9b:b6:69:
         d4:d6:f1:23:2c:0c:fc:0e:24:02:ff:28:d6:57:40:39:a5:39:
         e8:76:0d:a7:a7:40:1e:b1:b1:41:e2:4c:84:a4:ef:c8:5d:01:
         1a:bd:2d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Ikf9OXg9JI/X8WezEK+0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGMwNjMwZTk2MDk2ZGU0ODIyZDFmNTFlZjgwYzZmZmY1
NDE5MWIwHhcNMjQwNTE3MjIwMDIwWhcNMjQwNTE4MjIwMDIwWjAzMTEwLwYDVQQD
Eyg1MzRmOGE1MDc2ZjJlYjg5ZWRkODFjZmQxODdhZGMyMDg3MGQ3NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18ADinIVpYyW2eLnNQX9j0BLtjtF
gjiyMkNLN3dcplND0EQd1U774AVet19Swh4YIfR5bmHDqSzk+rEMbSFE3IMhuzOq
8zJ4ec5t9N58CvL3FuUJiJm66/tXeEhEP302iTz8njdvRneQrhNl8WV8+31949Cd
PqddVzmp9+HM7Hl6jwaN/5ZcEcB0JtGCkxroG30L+C8bU9EsHnLeejKO5tvww9pK
X/NOK5R5vQjkcCRsif0eejyLqWf1zqq3U8pzLMj+tNaf0YC2JS5Q+u3GkrRh5Pyj
B1GWpc5sjJKridkwcmb0VY0ZsUV93IEF7e901tHzTowvfVLSNgXoxA97NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNPilB28uuJ7dgc/Rh63CCHDXU+MB8GA1UdIwQY
MBaAFKHcBjDpYJbeSCLR9R74DG//VBkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYt
M2UwNmEwMTgyNjE0LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYtM2UwNmEwMTgyNjE0
LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqfomTpR
VYFC4hy+KDLBx+72SP4Oi3yBz/r8BzMi2AJJ0v4bpnkAXGjnuOtnPKpwqJ56AiYR
6zNL3fV/ALMr+rrCtiUmn/Maf4fO9uLdaKzvyWCXKCzOLhgCS1GyDhQk96V0iWD4
xEN/sot+Vo1S8beFIUl/lZ8rNoH22f5AJ35SVhLr6uR1YRWqPhDvWSX4ZsbfJnI9
C43TEJERLSNY+4FPjkpAQy8a3AJ4MTSjZO7DmvKekg19pA5x7x2cKNu3ei+FtZCq
uLpLItJkrqUhpQ40+wSwm7Zp1NbxIywM/A4kAv8o1ldAOaU56HYNp6dAHrGxQeJM
hKTvyF0BGr0tYw==
-----END CERTIFICATE-----
Generated at Fri May 17 22:54:03 2024 by rpki-client on console-ams.rpki-client.org