Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File:                     o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier:          drqRVqvaGbej8stNu5lBZs1nbyTXpljNIPoAnKcQfB0=
Subject key identifier:   56:37:C8:62:B7:BE:11:02:2B:32:2E:AC:CF:16:FB:72:8E:1C:D6:A7
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer:       /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial:       018F885B130F44FD7B27CB0C7BA43E683D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number:          0B4B
Signing time:             Fri 17 May 2024 21:00:20 +0000
Manifest this update:     Fri 17 May 2024 21:00:20 +0000
Manifest next update:     Sat 18 May 2024 21:00:20 +0000
Files and hashes:         1: 2wE1NFnqHRsGDPuEvMLwoyQZfuI.roa (hash: bqrQ96sJiDgJy+ElrxvSTwuD5rccsD8EZd4pRvClx9E=)
                          2: 8wVrcMQ4U3Ab3FuuG-hQ5jkFBzM.roa (hash: it0xYF0sMu0jeFSfrzIezUku55q8XLdRL3yUtrgWAlg=)
                          3: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: V52CLHMKe2EOPWJNjUkc9LKDMoFvp9v4bWLzVw7WCtk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:13:0f:44:fd:7b:27:cb:0c:7b:a4:3e:68:3d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
        Validity
            Not Before: May 17 21:00:20 2024 GMT
            Not After : May 18 21:00:20 2024 GMT
        Subject: CN=5637c862b7be11022b322eaccf16fb728e1cd6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:57:60:89:44:b5:fb:f3:56:be:b9:85:b9:
                    94:4a:a9:70:b1:a8:5a:7f:d6:6e:ca:d8:95:0b:40:
                    58:f7:6d:8c:a1:6f:36:d6:1f:59:a3:5f:d1:81:7e:
                    69:61:8e:cb:bf:a3:93:85:9c:3e:28:60:a5:a0:1c:
                    4a:12:bd:5b:04:16:01:71:c2:40:11:d2:cf:cd:58:
                    01:64:05:35:ab:e0:0f:cd:46:9e:fb:0f:33:54:9b:
                    81:34:d5:78:06:11:01:d4:5c:3a:b2:47:f7:97:77:
                    9c:55:99:6b:68:6d:a3:b6:79:77:01:9d:d9:5c:2a:
                    09:ab:5c:f6:cf:e2:9e:09:0d:41:0d:eb:65:5a:0d:
                    4d:6f:81:da:8d:64:4f:1d:bf:a7:6b:5e:52:a6:8f:
                    50:55:e8:fe:e5:80:5d:42:b6:1f:e7:c8:82:2f:0f:
                    35:f6:3d:e2:40:c0:bc:b4:78:df:e5:53:fe:04:68:
                    b1:44:c8:77:17:2d:b7:3b:ea:eb:e4:8c:85:46:ab:
                    cd:3a:07:22:71:5f:ad:55:87:d7:4c:55:4d:a9:2f:
                    b1:eb:a6:6f:21:87:c8:ea:bc:22:de:6e:18:c6:30:
                    1b:89:8b:a9:0a:97:2b:d9:e9:d7:14:22:b0:36:70:
                    ff:98:7d:a6:40:d3:8e:1d:5e:36:d1:29:4e:22:25:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:37:C8:62:B7:BE:11:02:2B:32:2E:AC:CF:16:FB:72:8E:1C:D6:A7
            X509v3 Authority Key Identifier:
                keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:55:cb:e4:b9:a7:3d:77:54:04:72:5b:62:63:2c:c7:c0:2e:
         66:49:c6:6e:14:b0:ad:d1:83:5d:81:1d:ed:98:8b:df:ad:15:
         6a:9d:22:d4:9c:ad:8d:32:68:73:9c:b8:3b:37:ad:99:99:6e:
         48:98:8e:06:22:31:e4:e3:a3:15:44:58:e4:29:86:09:42:46:
         eb:a5:13:63:7f:54:f9:51:01:85:70:9b:b8:b1:10:08:26:0e:
         f0:4c:73:11:2e:b6:34:b9:66:8f:39:2c:bf:16:16:5d:46:41:
         b3:2a:3e:e6:6b:f4:7c:12:64:cb:2a:4c:d7:19:17:f5:57:e8:
         68:86:55:32:7b:8c:87:c2:77:6d:d8:3b:e0:89:17:cc:09:07:
         f1:56:72:42:a3:bb:ec:ae:df:e4:4d:28:ef:2d:65:37:0e:d8:
         cf:1d:14:2e:18:79:52:75:d2:e9:e1:3d:74:87:61:2a:0c:74:
         9e:da:6c:c1:3d:8d:de:64:1c:cf:6e:47:b1:aa:90:21:77:93:
         26:2c:c8:cc:ea:21:78:15:af:aa:54:db:cf:7f:90:df:62:86:
         2c:6b:7e:df:b2:55:1f:30:dd:4b:05:ff:9e:25:fa:e3:e5:d2:
         5c:81:18:60:f6:4f:c1:d4:7e:ca:8f:c2:e6:f0:a7:9b:50:4f:
         e3:e1:7a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWxMPRP17J8sMe6Q+aD1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz
ZTgxZjEwHhcNMjQwNTE3MjEwMDIwWhcNMjQwNTE4MjEwMDIwWjAzMTEwLwYDVQQD
Eyg1NjM3Yzg2MmI3YmUxMTAyMmIzMjJlYWNjZjE2ZmI3MjhlMWNkNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYZXYIlEtfvzVr65hbmUSqlwsaha
f9ZuytiVC0BY922MoW821h9Zo1/RgX5pYY7Lv6OThZw+KGCloBxKEr1bBBYBccJA
EdLPzVgBZAU1q+APzUae+w8zVJuBNNV4BhEB1Fw6skf3l3ecVZlraG2jtnl3AZ3Z
XCoJq1z2z+KeCQ1BDetlWg1Nb4HajWRPHb+na15Spo9QVej+5YBdQrYf58iCLw81
9j3iQMC8tHjf5VP+BGixRMh3Fy23O+rr5IyFRqvNOgcicV+tVYfXTFVNqS+x66Zv
IYfI6rwi3m4YxjAbiYupCpcr2enXFCKwNnD/mH2mQNOOHV420SlOIiUt2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY3yGK3vhECKzIurM8W+3KOHNanMB8GA1UdIwQY
MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt
YjYwMmNlZGFjMzZjLzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj
LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFXL5Lmn
PXdUBHJbYmMsx8AuZknGbhSwrdGDXYEd7ZiL360Vap0i1JytjTJoc5y4OzetmZlu
SJiOBiIx5OOjFURY5CmGCUJG66UTY39U+VEBhXCbuLEQCCYO8ExzES62NLlmjzks
vxYWXUZBsyo+5mv0fBJkyypM1xkX9VfoaIZVMnuMh8J3bdg74IkXzAkH8VZyQqO7
7K7f5E0o7y1lNw7Yzx0ULhh5UnXS6eE9dIdhKgx0ntpswT2N3mQcz25HsaqQIXeT
JizIzOoheBWvqlTbz3+Q32KGLGt+37JVHzDdSwX/niX64+XSXIEYYPZPwdR+yo/C
5vCnm1BP4+F6hw==
-----END CERTIFICATE-----
Generated at Sat May 18 00:09:30 2024 by rpki-client on console-ams.rpki-client.org