Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File:                     OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier:          GDQ/MqcRQ5zg+OX08TWb2AJXYTvtirAXicJ/JJam/NM=
Subject key identifier:   ED:DC:ED:98:0A:58:9E:56:86:E8:68:42:D0:6F:FF:35:EA:91:24:AF
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer:       /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial:       018F893757D94916E450DB0171139DEA0C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number:          0497
Signing time:             Sat 18 May 2024 01:00:56 +0000
Manifest this update:     Sat 18 May 2024 01:00:56 +0000
Manifest next update:     Sun 19 May 2024 01:00:56 +0000
Files and hashes:         1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: Q8VXltT5LVcO7cl97Cc+PcrSNY9sFiSHSzrOXzaEWAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:57:d9:49:16:e4:50:db:01:71:13:9d:ea:0c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
        Validity
            Not Before: May 18 01:00:56 2024 GMT
            Not After : May 19 01:00:56 2024 GMT
        Subject: CN=eddced980a589e5686e86842d06fff35ea9124af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4a:25:ba:49:b4:9e:46:67:7a:e0:d6:22:de:
                    9c:00:6f:7a:88:46:61:e7:67:ec:d2:cb:18:c8:07:
                    be:f0:f6:e7:ca:9d:ac:5d:2c:ee:b7:02:19:bd:5c:
                    dc:75:f2:bb:4f:77:0c:7d:f7:6d:fb:81:17:2f:19:
                    4f:74:24:31:f8:0e:a5:37:f3:b6:e0:cd:85:d5:7d:
                    12:df:17:a9:5e:e7:6b:e6:f7:3f:90:7c:fd:86:54:
                    f8:ce:b0:cd:ff:47:41:eb:76:e3:f1:62:b3:ea:78:
                    c6:e2:85:a5:c9:8d:c9:20:98:d7:48:54:73:8e:79:
                    a2:cd:6e:e9:13:fd:11:f8:9c:c0:37:45:28:92:11:
                    69:3e:a2:78:32:43:92:38:71:e7:bf:08:01:38:f3:
                    24:6e:ca:a1:bb:7f:3f:0d:bb:da:e2:fc:96:7d:d7:
                    07:c4:ef:aa:1c:2c:73:35:94:3b:11:5c:b5:92:f9:
                    0d:4c:59:61:0b:e4:f0:78:52:91:d4:bc:c6:fb:39:
                    e0:21:63:5b:97:41:99:ef:3f:f3:a0:d1:df:da:74:
                    92:4a:36:53:5c:81:96:11:31:97:5d:14:1d:f6:f9:
                    5e:82:63:67:14:01:8b:f7:48:8b:91:d8:64:90:a7:
                    d2:ec:a3:89:5a:61:1d:32:04:f0:b9:af:2d:5e:1f:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:ED:98:0A:58:9E:56:86:E8:68:42:D0:6F:FF:35:EA:91:24:AF
            X509v3 Authority Key Identifier:
                keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:6c:e0:ed:54:59:5c:59:2f:30:cc:b6:bd:3b:43:ae:50:
         d5:47:a0:94:8f:01:77:90:03:51:b0:3e:3a:ee:e5:e2:d8:6c:
         df:b8:03:65:b5:6a:b0:14:0a:1e:81:ff:d0:99:99:9a:79:6c:
         95:3b:2d:a1:4e:3b:83:59:14:71:89:3a:e8:db:36:eb:6e:f8:
         56:0d:25:65:60:75:ef:a7:64:67:ed:8a:e1:40:ee:2f:d6:21:
         db:d0:aa:b8:1f:f2:34:0a:98:4e:56:f2:d1:52:09:e9:d3:82:
         c5:5a:ff:63:b7:b4:e4:85:ab:94:c1:40:54:21:3c:da:44:0c:
         e6:09:75:15:33:ef:2b:7e:0e:83:72:04:1b:ec:64:bd:62:28:
         af:b7:5f:79:e5:51:7e:b4:d4:c2:dd:34:ab:6b:92:bc:d4:44:
         b8:06:da:78:e7:22:5c:88:3a:c7:8b:f6:a8:23:7c:22:3a:43:
         15:da:f0:0f:9d:d3:45:e0:83:77:fd:43:9f:85:81:8d:21:9d:
         95:ea:d1:ae:44:fb:b8:52:da:a3:06:c7:70:0b:2c:56:6c:fe:
         02:fe:cf:73:6e:14:89:67:3c:a9:fe:21:80:cd:62:3a:d9:ab:
         24:24:de:ce:93:84:c1:fd:fb:5b:b5:56:d3:6f:51:f2:89:ca:
         98:7c:3b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN1fZSRbkUNsBcROd6gwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNTU1ZDg0ZGNkN2RkYjY0MDY5MWI5NDBjN2NhMDk3NzI4
OGExYzQwHhcNMjQwNTE4MDEwMDU2WhcNMjQwNTE5MDEwMDU2WjAzMTEwLwYDVQQD
EyhlZGRjZWQ5ODBhNTg5ZTU2ODZlODY4NDJkMDZmZmYzNWVhOTEyNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0olukm0nkZneuDWIt6cAG96iEZh
52fs0ssYyAe+8Pbnyp2sXSzutwIZvVzcdfK7T3cMffdt+4EXLxlPdCQx+A6lN/O2
4M2F1X0S3xepXudr5vc/kHz9hlT4zrDN/0dB63bj8WKz6njG4oWlyY3JIJjXSFRz
jnmizW7pE/0R+JzAN0UokhFpPqJ4MkOSOHHnvwgBOPMkbsqhu38/Dbva4vyWfdcH
xO+qHCxzNZQ7EVy1kvkNTFlhC+TweFKR1LzG+zngIWNbl0GZ7z/zoNHf2nSSSjZT
XIGWETGXXRQd9vlegmNnFAGL90iLkdhkkKfS7KOJWmEdMgTwua8tXh8flwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3c7ZgKWJ5WhuhoQtBv/zXqkSSvMB8GA1UdIwQY
MBaAFDpVXYTc1922QGkblAx8oJdyiKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YWQwODEtZGE1YS00MmE0LWE0MzAt
MWU2NzE3MGRmYmJhLzEvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy85YWQwODEtZGE1YS00MmE0LWE0MzAtMWU2NzE3MGRmYmJh
LzEvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdw9s4O1U
WVxZLzDMtr07Q65Q1UeglI8Bd5ADUbA+Ou7l4ths37gDZbVqsBQKHoH/0JmZmnls
lTstoU47g1kUcYk66Ns26274Vg0lZWB176dkZ+2K4UDuL9Yh29CquB/yNAqYTlby
0VIJ6dOCxVr/Y7e05IWrlMFAVCE82kQM5gl1FTPvK34Og3IEG+xkvWIor7dfeeVR
frTUwt00q2uSvNREuAbaeOciXIg6x4v2qCN8IjpDFdrwD53TReCDd/1Dn4WBjSGd
lerRrkT7uFLaowbHcAssVmz+Av7Pc24UiWc8qf4hgM1iOtmrJCTezpOEwf37W7VW
029R8onKmHw7fg==
-----END CERTIFICATE-----
Generated at Sat May 18 02:07:23 2024 by rpki-client on console-fra.rpki-client.org