Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File:                     omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier:          Fr7rlnZzkAZlDMlHHbIoNHhTxMAmSyw2mEvyxT+Y5pI=
Subject key identifier:   56:C0:B8:89:C4:BB:A1:94:5D:B1:61:39:82:3C:1F:1B:CE:70:5E:0C
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer:       /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial:       018F8749B59A216AA2BFF71BD05CD61D2ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:45 +0000
Manifest this update:     Fri 17 May 2024 16:01:45 +0000
Manifest next update:     Sat 18 May 2024 16:01:45 +0000
Files and hashes:         1: 4rszpkCQobD-ZDI935hx45pMYUQ.roa (hash: VRlsi3BPlBkws+3s76+x2d5v/7l4MaH3ncsKjCUNAjY=)
                          2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: 1+5F11hOxTwaOfVMHYn3hZixyY1yXJ1GTgf4wRE1Odg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b5:9a:21:6a:a2:bf:f7:1b:d0:5c:d6:1d:2a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
        Validity
            Not Before: May 17 16:01:45 2024 GMT
            Not After : May 18 16:01:45 2024 GMT
        Subject: CN=56c0b889c4bba1945db16139823c1f1bce705e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:72:23:b7:36:0c:5f:bb:48:2c:a8:73:ee:
                    3b:5d:d1:ca:15:7b:d7:1a:97:b3:ac:d0:8c:54:4b:
                    b4:af:55:50:10:b6:e1:e4:8c:f8:53:36:af:1e:2c:
                    e4:c9:53:f3:4c:73:a1:7c:b6:1e:9d:bc:88:7c:0c:
                    16:17:44:e2:29:03:a7:83:f5:c2:5b:85:b6:00:d0:
                    96:41:65:d4:50:9a:6e:83:f2:6e:2c:06:cc:8a:cf:
                    30:bf:72:89:59:d9:76:40:f0:cf:81:5b:a3:3d:b5:
                    33:35:7d:fb:9f:f0:0f:68:1a:2d:32:0f:bd:b9:f3:
                    24:48:c1:c0:e9:48:55:f6:ae:f4:c0:db:92:bf:77:
                    ce:76:74:8a:dd:f2:60:5f:65:b6:18:56:01:6f:c1:
                    6d:b7:c5:4f:3d:1b:be:b6:71:2c:fa:49:3f:f3:aa:
                    e0:18:12:da:e0:a3:d4:a1:c9:e0:f2:52:6d:06:c0:
                    e7:52:e4:81:3f:48:d6:9c:45:63:eb:d3:a2:3e:ce:
                    ff:be:c1:25:6e:b2:b3:93:3a:70:26:ac:31:5a:ca:
                    e0:a4:ce:b0:9d:25:79:af:40:55:1e:a8:45:d4:32:
                    c0:64:34:9e:0c:d5:e7:3f:30:a1:cb:57:3d:4a:d7:
                    99:6e:2f:ac:d0:32:5b:fd:a1:14:b7:e4:92:b9:90:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C0:B8:89:C4:BB:A1:94:5D:B1:61:39:82:3C:1F:1B:CE:70:5E:0C
            X509v3 Authority Key Identifier:
                keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:53:b7:e4:fd:84:7a:f1:16:fd:a1:7d:ff:82:79:a0:cf:3a:
         01:00:fb:4d:12:ed:45:46:e7:fe:fa:96:60:b5:b8:f0:4b:63:
         54:35:ad:1f:8c:88:e0:d3:06:73:52:5f:27:01:03:f4:0d:94:
         d8:2f:4c:a3:9f:d9:f5:45:01:72:4f:b4:15:2c:7f:15:47:46:
         02:27:ea:51:5f:84:10:af:7d:45:10:ed:9f:e6:64:8f:3a:7f:
         d0:2b:b6:0d:c9:65:b0:1b:41:0f:c3:3b:67:e4:d2:a1:3c:02:
         10:f2:e5:70:3c:4b:24:7d:2f:e9:af:62:ef:28:78:e6:f9:f6:
         bc:12:f4:74:7a:8a:3a:74:8c:59:fd:a1:60:af:d2:98:e7:af:
         38:fb:48:47:28:d4:15:cd:26:2a:2b:9d:7f:df:92:ac:a1:10:
         47:f6:20:5d:75:22:91:cf:67:ca:3b:66:86:15:d5:c2:2d:9f:
         01:a5:b4:d7:92:4c:b1:7f:ab:24:32:b3:c1:be:cf:ec:7e:35:
         db:53:e9:64:ae:a3:1d:aa:77:2e:d2:7a:ef:2a:d4:75:29:97:
         d9:6e:99:4e:8f:fd:47:ec:d9:75:9d:a2:92:bb:8a:ea:db:19:
         c5:2b:7a:17:37:f3:fd:77:d7:a5:91:65:c3:d8:e7:5b:f8:1d:
         05:57:fa:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSbWaIWqiv/cb0FzWHSreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNjg1NTk4MGIyNzNlNWFlNTdkYzFiOWViMjJlOWY1ZjNh
N2NkZjcwHhcNMjQwNTE3MTYwMTQ1WhcNMjQwNTE4MTYwMTQ1WjAzMTEwLwYDVQQD
Eyg1NmMwYjg4OWM0YmJhMTk0NWRiMTYxMzk4MjNjMWYxYmNlNzA1ZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKFyI7c2DF+7SCyoc+47XdHKFXvX
GpezrNCMVEu0r1VQELbh5Iz4UzavHizkyVPzTHOhfLYenbyIfAwWF0TiKQOng/XC
W4W2ANCWQWXUUJpug/JuLAbMis8wv3KJWdl2QPDPgVujPbUzNX37n/APaBotMg+9
ufMkSMHA6UhV9q70wNuSv3fOdnSK3fJgX2W2GFYBb8Ftt8VPPRu+tnEs+kk/86rg
GBLa4KPUocng8lJtBsDnUuSBP0jWnEVj69OiPs7/vsElbrKzkzpwJqwxWsrgpM6w
nSV5r0BVHqhF1DLAZDSeDNXnPzChy1c9SteZbi+s0DJb/aEUt+SSuZACAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbAuInEu6GUXbFhOYI8HxvOcF4MMB8GA1UdIwQY
MBaAFKJoVZgLJz5a5X3Buesi6fXzp833MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEt
ODFlYjYxZjViNzFlLzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEtODFlYjYxZjViNzFl
LzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFO35P2E
evEW/aF9/4J5oM86AQD7TRLtRUbn/vqWYLW48EtjVDWtH4yI4NMGc1JfJwED9A2U
2C9Mo5/Z9UUBck+0FSx/FUdGAifqUV+EEK99RRDtn+Zkjzp/0Cu2DcllsBtBD8M7
Z+TSoTwCEPLlcDxLJH0v6a9i7yh45vn2vBL0dHqKOnSMWf2hYK/SmOevOPtIRyjU
Fc0mKiudf9+SrKEQR/YgXXUikc9nyjtmhhXVwi2fAaW015JMsX+rJDKzwb7P7H41
21PpZK6jHap3LtJ67yrUdSmX2W6ZTo/9R+zZdZ2ikruK6tsZxSt6Fzfz/XfXpZFl
w9jnW/gdBVf6+A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:11:41 2024 by rpki-client on console-ams.rpki-client.org