Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
File:                     OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json)
Hash identifier:          6y/I8sycvSJ+/gDYemYSBSme0vQXDo2c8fRAEytj1EE=
Subject key identifier:   16:A1:0C:49:9A:A8:C6:E5:9A:BA:8C:1E:C7:8A:8C:04:D8:87:7D:F8
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Certificate issuer:       /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial:       018F8D81C938E27912F096207E043255FD8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
Manifest number:          117C
Signing time:             Sat 18 May 2024 21:00:44 +0000
Manifest this update:     Sat 18 May 2024 21:00:44 +0000
Manifest next update:     Sun 19 May 2024 21:00:44 +0000
Files and hashes:         1: N7XKsqB319qAAGzhQpZJ4PriCj0.roa (hash: emgIPPjuHQLOPvcC5E3u/QnPz8g2Gepv2EwHAjpJCQ8=)
                          2: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: 8WLpQ3/6ZlyvUOr8IUa/VjQN7SHh24ruEte+K7tjNsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:81:c9:38:e2:79:12:f0:96:20:7e:04:32:55:fd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39469af33611b79084f575e95b13e66550edb383
        Validity
            Not Before: May 18 21:00:44 2024 GMT
            Not After : May 19 21:00:44 2024 GMT
        Subject: CN=16a10c499aa8c6e59aba8c1ec78a8c04d8877df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:51:f6:3f:b5:66:76:36:d4:91:99:5b:cf:
                    a7:a2:f5:5c:8b:ea:77:14:84:ef:85:7e:cc:d4:77:
                    89:95:66:5c:c5:9f:be:f6:52:67:5b:34:34:10:b1:
                    f2:40:0c:28:46:e5:1c:cf:7b:d3:3d:62:b4:e2:2c:
                    85:8e:d1:c2:be:05:9d:33:cf:82:65:86:7a:c8:54:
                    7b:8d:8e:d5:7d:be:51:b6:88:da:34:ee:69:21:2c:
                    86:d9:0c:53:9e:ac:fe:05:be:a0:38:46:7c:2a:ce:
                    44:1f:72:df:b5:3a:7e:5c:25:c9:8f:0c:da:60:4f:
                    e7:09:ca:42:82:72:4e:fb:df:26:15:f3:5a:45:e6:
                    94:9d:ac:a5:68:a8:93:f1:8e:42:5b:f3:44:23:c5:
                    3e:c4:00:87:73:60:27:c2:4c:13:13:af:fd:ca:c9:
                    8a:34:2b:94:8e:74:e9:a4:a8:e6:4b:e3:71:85:da:
                    f9:1c:6b:7b:c0:32:40:0c:e3:6e:78:ef:8f:90:d9:
                    6c:c4:49:1d:6b:00:50:9b:9d:48:81:fa:ac:2c:ae:
                    17:31:c6:41:c1:1b:7e:09:6e:cd:5a:89:a9:e5:a8:
                    4e:fb:f3:49:00:5a:3e:6d:42:df:87:36:f6:91:c4:
                    66:21:ce:07:4a:55:1c:f7:45:9d:88:0d:79:09:f8:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:0C:49:9A:A8:C6:E5:9A:BA:8C:1E:C7:8A:8C:04:D8:87:7D:F8
            X509v3 Authority Key Identifier:
                keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8c:35:db:53:a1:bc:4b:43:09:db:81:e2:78:ce:97:cd:5d:
         91:47:03:eb:b1:ae:66:5a:45:14:4e:ac:5a:c7:32:d8:9b:42:
         49:eb:aa:b4:e7:38:c2:01:e5:91:28:09:37:b5:af:44:0a:74:
         db:96:44:94:36:cc:ee:4d:b8:2d:63:fb:13:76:7e:90:26:6a:
         e3:59:5d:d6:bf:a1:fc:e4:44:da:26:ca:79:30:dd:ab:5d:16:
         55:aa:d1:a2:42:f3:19:05:24:70:54:12:81:5f:d3:ab:88:d2:
         10:32:5c:f7:a5:e7:d1:00:85:06:d5:6f:19:9d:9c:7d:d8:47:
         56:22:55:bb:f2:f5:a7:bd:81:3a:39:18:3b:78:d9:ca:cb:7e:
         7a:4a:77:ed:37:e7:9f:5b:da:79:79:f8:b4:f8:a2:57:f7:60:
         e4:ae:2e:bd:a9:8b:87:52:c0:6c:95:ee:f7:63:81:27:8c:43:
         82:6f:a1:61:fd:fc:cc:b4:d0:b3:bf:2f:89:c5:ca:21:04:a8:
         c1:6f:1c:ec:67:db:7c:5f:ec:ac:73:31:8f:2c:31:44:54:14:
         d3:6d:04:ec:70:4f:ff:a8:27:7c:ff:85:1b:f6:70:ff:35:57:
         80:c4:6c:cc:f0:17:e0:ae:59:79:fc:4b:5c:f0:67:d2:49:49:
         ef:ae:ba:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Ngck44nkS8JYgfgQyVf2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDY5YWYzMzYxMWI3OTA4NGY1NzVlOTViMTNlNjY1NTBl
ZGIzODMwHhcNMjQwNTE4MjEwMDQ0WhcNMjQwNTE5MjEwMDQ0WjAzMTEwLwYDVQQD
EygxNmExMGM0OTlhYThjNmU1OWFiYThjMWVjNzhhOGMwNGQ4ODc3ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dJR9j+1ZnY21JGZW8+novVci+p3
FITvhX7M1HeJlWZcxZ++9lJnWzQ0ELHyQAwoRuUcz3vTPWK04iyFjtHCvgWdM8+C
ZYZ6yFR7jY7Vfb5RtojaNO5pISyG2QxTnqz+Bb6gOEZ8Ks5EH3LftTp+XCXJjwza
YE/nCcpCgnJO+98mFfNaReaUnaylaKiT8Y5CW/NEI8U+xACHc2AnwkwTE6/9ysmK
NCuUjnTppKjmS+Nxhdr5HGt7wDJADONueO+PkNlsxEkdawBQm51IgfqsLK4XMcZB
wRt+CW7NWomp5ahO+/NJAFo+bULfhzb2kcRmIc4HSlUc90WdiA15Cfjh5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBahDEmaqMblmrqMHseKjATYh334MB8GA1UdIwQY
MBaAFDlGmvM2EbeQhPV16VsT5mVQ7bODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMt
NjZkZDJhOTFmYWNhLzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yNWUzOGYtYTA5MS00ZTVjLWJmNjMtNjZkZDJhOTFmYWNh
LzEvT1VhYTh6WVJ0NUNFOVhYcFd4UG1aVkR0czRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4w121Oh
vEtDCduB4njOl81dkUcD67GuZlpFFE6sWscy2JtCSeuqtOc4wgHlkSgJN7WvRAp0
25ZElDbM7k24LWP7E3Z+kCZq41ld1r+h/ORE2ibKeTDdq10WVarRokLzGQUkcFQS
gV/Tq4jSEDJc96Xn0QCFBtVvGZ2cfdhHViJVu/L1p72BOjkYO3jZyst+ekp37Tfn
n1vaeXn4tPiiV/dg5K4uvamLh1LAbJXu92OBJ4xDgm+hYf38zLTQs78vicXKIQSo
wW8c7GfbfF/srHMxjywxRFQU020E7HBP/6gnfP+FG/Zw/zVXgMRszPAX4K5ZefxL
XPBn0klJ7666yw==
-----END CERTIFICATE-----
Generated at Sat May 18 22:49:19 2024 by rpki-client on console-ams.rpki-client.org