Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
File:                     oLalsaFMhtTPtGxOhuzUBmgEzJA.mft (raw, json)
Hash identifier:          fqA0l7JtOIAMlib/EipBqH6fsCPWo8sgo45E9HcOmXY=
Subject key identifier:   00:B9:80:C1:1A:A6:3B:41:65:90:87:EF:B0:54:71:A7:34:68:C8:E0
Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Certificate issuer:       /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Certificate serial:       018F87491308500CD4B66C44E86C796E46BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
Manifest number:          0193
Signing time:             Fri 17 May 2024 16:01:03 +0000
Manifest this update:     Fri 17 May 2024 16:01:03 +0000
Manifest next update:     Sat 18 May 2024 16:01:03 +0000
Files and hashes:         1: Qo26hAuZVKofm9C4NGQXxVJP7eo.roa (hash: GLXRlSu4YCkQp5Ptizp62PJX97Bp1u+C1AlHtGCqGfE=)
                          2: oLalsaFMhtTPtGxOhuzUBmgEzJA.crl (hash: rCj+Y2JC8Mp2Gq31ODnphaFE/cPM8e6eQWxL6yd5R9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:13:08:50:0c:d4:b6:6c:44:e8:6c:79:6e:46:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
        Validity
            Not Before: May 17 16:01:03 2024 GMT
            Not After : May 18 16:01:03 2024 GMT
        Subject: CN=00b980c11aa63b41659087efb05471a73468c8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:e2:46:12:9e:0f:9d:ce:f7:43:02:77:55:
                    2e:4c:3d:9a:a7:6d:20:fe:a5:1a:18:a8:7b:71:d4:
                    8e:6e:97:ab:f2:93:7a:9e:7b:a3:2f:ae:e8:1b:34:
                    42:48:05:c1:f2:b0:f8:b6:75:49:35:37:43:6a:72:
                    22:28:5d:a6:d0:c5:7c:af:51:07:37:10:19:34:5d:
                    86:2c:79:53:5e:61:e2:4e:cc:fa:49:16:ff:5d:d6:
                    02:7a:ad:27:f2:60:d2:81:cd:ce:47:88:f9:3c:1e:
                    c1:32:22:a2:cb:32:fb:e8:39:ad:fa:dd:98:b6:7b:
                    4a:aa:2b:a8:43:cf:7b:f0:23:8f:95:6c:a6:d1:1b:
                    b2:a8:4e:5e:7f:7f:ed:71:ef:2b:56:ab:d8:8f:64:
                    f2:c7:92:10:45:d2:d6:61:60:65:9c:0a:cc:d5:af:
                    3b:49:d4:e4:68:85:91:dc:bc:fb:c0:55:e3:ad:fb:
                    e3:33:19:10:68:57:0f:ff:24:6e:c5:73:52:a8:21:
                    7e:01:e0:c5:02:13:72:5a:53:d0:73:58:7b:fe:60:
                    37:19:a9:bd:72:94:62:7f:c8:de:69:cd:d6:d0:0a:
                    b2:2d:ab:5d:98:1a:54:b8:e5:ef:f6:be:46:81:d4:
                    13:83:53:2d:3e:54:84:fb:f9:39:f2:76:cf:84:d3:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B9:80:C1:1A:A6:3B:41:65:90:87:EF:B0:54:71:A7:34:68:C8:E0
            X509v3 Authority Key Identifier:
                keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:36:0d:94:89:9c:52:ad:41:5e:1d:01:c5:cc:da:66:63:5f:
         53:03:37:2f:ef:c6:08:9f:ba:f7:95:f0:21:2f:7f:0d:da:a0:
         df:fc:06:7f:50:b3:81:45:76:78:5b:39:36:86:57:42:27:87:
         b3:33:29:c9:fc:1e:47:4e:c7:e3:fb:5e:f8:ee:c1:0e:b5:65:
         55:f6:b0:1c:49:82:4b:82:f0:e2:49:f7:bd:e6:3e:b4:05:7d:
         e9:34:c1:0c:55:55:34:a6:11:30:92:7f:71:15:5a:e2:a3:54:
         52:76:a3:dd:64:04:8f:7b:f1:51:17:5f:fe:bb:a0:bb:f1:21:
         d3:39:99:36:bd:37:e0:0c:6f:f4:e3:7c:bf:5b:d6:8c:ea:1a:
         42:e1:07:0f:33:cc:95:fc:2f:b0:05:2a:e3:ad:84:06:16:42:
         ec:1a:07:d2:ec:66:88:41:43:6a:56:7d:5b:b8:b4:b9:39:f0:
         f5:e2:72:99:44:03:64:65:c4:72:d2:d8:cd:b5:f2:2f:cc:f7:
         cb:f3:0a:7e:d3:e4:7b:11:f4:3c:d3:91:03:c6:7a:72:7d:e4:
         b1:b9:30:3a:ab:a5:7b:22:ca:d3:d6:ee:74:f4:60:b7:e6:75:
         cc:ae:09:58:4b:2a:aa:bf:1a:02:e6:fb:79:25:25:b5:77:0f:
         5f:28:4e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSRMIUAzUtmxE6Gx5bka8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYjZhNWIxYTE0Yzg2ZDRjZmI0NmM0ZTg2ZWNkNDA2Njgw
NGNjOTAwHhcNMjQwNTE3MTYwMTAzWhcNMjQwNTE4MTYwMTAzWjAzMTEwLwYDVQQD
EygwMGI5ODBjMTFhYTYzYjQxNjU5MDg3ZWZiMDU0NzFhNzM0NjhjOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBHiRhKeD53O90MCd1UuTD2ap20g
/qUaGKh7cdSObper8pN6nnujL67oGzRCSAXB8rD4tnVJNTdDanIiKF2m0MV8r1EH
NxAZNF2GLHlTXmHiTsz6SRb/XdYCeq0n8mDSgc3OR4j5PB7BMiKiyzL76Dmt+t2Y
tntKqiuoQ8978COPlWym0RuyqE5ef3/tce8rVqvYj2Tyx5IQRdLWYWBlnArM1a87
SdTkaIWR3Lz7wFXjrfvjMxkQaFcP/yRuxXNSqCF+AeDFAhNyWlPQc1h7/mA3Gam9
cpRif8jeac3W0AqyLatdmBpUuOXv9r5GgdQTg1MtPlSE+/k58nbPhNOf0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAC5gMEapjtBZZCH77BUcac0aMjgMB8GA1UdIwQY
MBaAFKC2pbGhTIbUz7RsTobs1AZoBMyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMWZiNTItOTc5ZC00NDM2LWJlNTEt
ODU4NGJlZjBiN2Q1LzEvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lMWZiNTItOTc5ZC00NDM2LWJlNTEtODU4NGJlZjBiN2Q1
LzEvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDYNlImc
Uq1BXh0BxczaZmNfUwM3L+/GCJ+695XwIS9/Ddqg3/wGf1CzgUV2eFs5NoZXQieH
szMpyfweR07H4/te+O7BDrVlVfawHEmCS4Lw4kn3veY+tAV96TTBDFVVNKYRMJJ/
cRVa4qNUUnaj3WQEj3vxURdf/rugu/Eh0zmZNr034Axv9ON8v1vWjOoaQuEHDzPM
lfwvsAUq462EBhZC7BoH0uxmiEFDalZ9W7i0uTnw9eJymUQDZGXEctLYzbXyL8z3
y/MKftPkexH0PNORA8Z6cn3ksbkwOquleyLK09budPRgt+Z1zK4JWEsqqr8aAub7
eSUltXcPXyhOkQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:45:04 2024 by rpki-client on console-fra.rpki-client.org