Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
File:                     OmaGndGplxZLpPoj4P1B-zrLEL4.mft (raw, json)
Hash identifier:          3MV+BG74ftoiwkN+h9nrboM7CQrncDaO5qM1ozZFUEM=
Subject key identifier:   A6:61:6D:AD:5F:7A:04:5D:92:E9:4F:A4:C4:38:33:A4:45:21:A2:2F
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Certificate issuer:       /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial:       018F874921464C55C3EFABD14266320CEBE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
Manifest number:          0D5D
Signing time:             Fri 17 May 2024 16:01:07 +0000
Manifest this update:     Fri 17 May 2024 16:01:07 +0000
Manifest next update:     Sat 18 May 2024 16:01:07 +0000
Files and hashes:         1: OmaGndGplxZLpPoj4P1B-zrLEL4.crl (hash: vkdhGQUTW4hfs+0PYoI3YDGh87cbyxOqz588Req2L4w=)
                          2: oDdMxqE17Hsm7G_OWYXEzIpv1do.roa (hash: SZno/8hc7V6yQ/Vn8tFE0ItZx4ZT59YkL01ICPSdbdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:21:46:4c:55:c3:ef:ab:d1:42:66:32:0c:eb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
        Validity
            Not Before: May 17 16:01:07 2024 GMT
            Not After : May 18 16:01:07 2024 GMT
        Subject: CN=a6616dad5f7a045d92e94fa4c43833a44521a22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:e9:fc:83:9b:f0:3d:f6:13:e2:34:b9:9a:
                    3f:2e:79:33:44:fa:ea:dc:65:4c:cd:a6:4f:c7:21:
                    1e:78:ff:99:3b:1a:6a:59:35:79:bf:6b:e5:d7:65:
                    80:43:6e:9e:2d:53:96:d5:2d:b5:93:10:2d:2e:c1:
                    96:29:37:b0:a7:fb:5c:43:a6:90:e3:86:b8:88:c1:
                    f4:55:09:8a:cb:00:92:d0:e1:ba:e8:18:6d:32:67:
                    0b:8c:f0:41:90:a2:e7:b6:53:7e:b1:bf:7f:ad:e5:
                    85:fc:5c:01:77:07:27:e1:34:a6:4a:3e:4e:b1:83:
                    f7:bd:d2:c6:93:8f:ea:2d:2e:ba:df:5c:0a:a5:1c:
                    80:3b:4b:0e:76:92:71:f7:97:6c:26:01:0d:60:6e:
                    8f:2a:88:f5:d0:80:1a:1b:5f:3a:6e:38:e2:fd:b8:
                    a7:ce:2b:16:c5:df:0e:dc:27:1e:a1:de:b1:0b:a5:
                    83:fc:8c:0e:24:c2:8d:44:8b:6a:ae:d6:84:89:2e:
                    0e:12:ee:5f:ae:7d:11:90:05:fd:df:ec:88:c1:6e:
                    58:9b:25:0e:51:a2:e3:0f:88:90:7a:97:6a:bc:94:
                    fd:87:1c:70:09:10:bd:ff:3d:ab:9d:ea:2e:87:22:
                    33:c5:cc:a1:e0:22:9e:5d:68:88:56:5a:6e:f4:72:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:6D:AD:5F:7A:04:5D:92:E9:4F:A4:C4:38:33:A4:45:21:A2:2F
            X509v3 Authority Key Identifier:
                keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1c:dd:e6:bb:52:41:a7:32:0e:88:f3:8c:d5:4f:35:30:ed:
         de:43:6d:2c:3a:15:b1:60:b9:27:48:df:b3:b4:c2:66:ad:e3:
         68:55:40:5f:64:ce:eb:0a:89:89:1f:ce:ef:e2:de:24:7f:e2:
         cc:16:4f:44:8c:2d:a4:5b:00:6f:d3:ac:6b:88:4a:2b:29:91:
         90:91:26:37:79:2a:d9:10:87:6f:b2:08:72:d7:2a:d2:19:c3:
         0a:c5:50:74:08:9b:5e:3c:fb:69:d2:ea:47:f0:33:7a:57:51:
         f0:ec:17:aa:a7:87:47:41:f2:3b:da:7c:d2:d0:45:c3:76:52:
         8c:b9:6c:c7:0c:b5:51:cd:73:85:2c:71:85:39:cd:53:f7:a4:
         3e:c7:ab:df:13:44:38:6e:2f:06:d3:21:88:6a:19:af:64:e9:
         a9:70:bc:fd:b2:c9:31:d8:61:cf:ee:04:4f:74:bd:7d:ab:cb:
         c3:95:2f:fc:c0:7e:38:48:20:f5:83:bb:66:55:57:22:1c:d4:
         ff:2e:1a:74:05:53:50:de:e6:2c:93:a9:fd:b9:48:4c:06:1d:
         ab:a8:e8:12:2a:49:58:88:4d:c8:8c:0c:de:ea:c2:f4:4a:1e:
         eb:cd:00:13:48:11:7e:f2:dd:c4:93:3f:a8:a2:73:b0:7b:64:
         97:b6:f0:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSSFGTFXD76vRQmYyDOviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjY4NjlkZDFhOTk3MTY0YmE0ZmEyM2UwZmQ0MWZiM2Fj
YjEwYmUwHhcNMjQwNTE3MTYwMTA3WhcNMjQwNTE4MTYwMTA3WjAzMTEwLwYDVQQD
EyhhNjYxNmRhZDVmN2EwNDVkOTJlOTRmYTRjNDM4MzNhNDQ1MjFhMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMnp/IOb8D32E+I0uZo/LnkzRPrq
3GVMzaZPxyEeeP+ZOxpqWTV5v2vl12WAQ26eLVOW1S21kxAtLsGWKTewp/tcQ6aQ
44a4iMH0VQmKywCS0OG66BhtMmcLjPBBkKLntlN+sb9/reWF/FwBdwcn4TSmSj5O
sYP3vdLGk4/qLS6631wKpRyAO0sOdpJx95dsJgENYG6PKoj10IAaG186bjji/bin
zisWxd8O3Cceod6xC6WD/IwOJMKNRItqrtaEiS4OEu5frn0RkAX93+yIwW5YmyUO
UaLjD4iQepdqvJT9hxxwCRC9/z2rneouhyIzxcyh4CKeXWiIVlpu9HIwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZhba1fegRdkulPpMQ4M6RFIaIvMB8GA1UdIwQY
MBaAFDpmhp3RqZcWS6T6I+D9Qfs6yxC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgt
NzExZmMxYTJkMGEwLzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgtNzExZmMxYTJkMGEw
LzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRzd5rtS
QacyDojzjNVPNTDt3kNtLDoVsWC5J0jfs7TCZq3jaFVAX2TO6wqJiR/O7+LeJH/i
zBZPRIwtpFsAb9Osa4hKKymRkJEmN3kq2RCHb7IIctcq0hnDCsVQdAibXjz7adLq
R/AzeldR8OwXqqeHR0HyO9p80tBFw3ZSjLlsxwy1Uc1zhSxxhTnNU/ekPser3xNE
OG4vBtMhiGoZr2TpqXC8/bLJMdhhz+4ET3S9favLw5Uv/MB+OEgg9YO7ZlVXIhzU
/y4adAVTUN7mLJOp/blITAYdq6joEipJWIhNyIwM3urC9Eoe680AE0gRfvLdxJM/
qKJzsHtkl7bwiQ==
-----END CERTIFICATE-----
Generated at Sat May 18 00:05:39 2024 by rpki-client on console-ams.rpki-client.org