Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File:                     OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier:          1iOnZqp7daGa6NrYNW2pxBKGht5LZHMUJ384qDEUUT8=
Subject key identifier:   9E:66:60:D6:E2:02:2B:6B:35:9D:BA:8B:B3:81:B2:5B:56:48:3C:78
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer:       /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial:       018F871151F97D1E634BA87CC25538203160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number:          0960
Signing time:             Fri 17 May 2024 15:00:10 +0000
Manifest this update:     Fri 17 May 2024 15:00:10 +0000
Manifest next update:     Sat 18 May 2024 15:00:10 +0000
Files and hashes:         1: 9fWrdysaOTYM7rMG-ryBC1S3gTk.roa (hash: YV+0PAHkjGhfDc7eeFTR6AOSCYEADjBu8q2NnXLWqnE=)
                          2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: 4i3U3WkVfNRErDUhOrY4t7gLP4gKcZbndaNG4Ip1bgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:51:f9:7d:1e:63:4b:a8:7c:c2:55:38:20:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
        Validity
            Not Before: May 17 15:00:10 2024 GMT
            Not After : May 18 15:00:10 2024 GMT
        Subject: CN=9e6660d6e2022b6b359dba8bb381b25b56483c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:7f:f5:b5:46:33:74:d7:ea:cd:24:41:f0:
                    ef:b8:9c:d9:63:42:88:58:a0:b3:e6:9c:30:5e:7f:
                    e5:11:cb:c0:22:79:d3:ef:b3:72:5a:1e:24:ca:42:
                    25:c1:2e:5d:f4:cf:fb:66:48:0b:f6:5f:ec:0c:13:
                    25:fb:da:f8:68:94:80:1b:27:ab:71:2f:5e:f1:cf:
                    7d:af:28:23:a0:5a:b7:61:1b:40:6d:de:64:c4:65:
                    29:91:7c:e9:c9:98:cf:5f:9d:4b:48:ef:15:cf:aa:
                    71:1c:a6:0f:eb:f2:6c:a2:59:d8:b4:6b:e0:d8:56:
                    f8:10:66:d5:97:b6:f9:4b:e3:0b:0a:50:fd:8f:c9:
                    b3:3f:78:da:1f:b3:e3:75:e2:46:0a:2f:3f:0b:6f:
                    31:5d:e2:29:3a:12:ee:0d:20:f1:e1:30:90:78:f8:
                    3c:f5:66:26:6b:fb:8d:11:f0:18:fd:a5:f5:d9:2e:
                    f6:20:d7:85:7f:a9:10:aa:53:d4:2c:c8:db:cc:0a:
                    c5:7f:74:ba:da:4f:8e:52:c0:79:89:a6:ca:8f:4f:
                    69:89:a9:d2:80:c2:fe:fa:ce:53:9a:2f:3d:80:b0:
                    6a:c0:ae:ba:2e:da:fd:91:1d:38:0f:a3:4b:75:b1:
                    81:b1:ab:f8:58:49:a9:73:8e:ec:10:d2:fd:fa:a0:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:66:60:D6:E2:02:2B:6B:35:9D:BA:8B:B3:81:B2:5B:56:48:3C:78
            X509v3 Authority Key Identifier:
                keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fb:5a:26:df:13:9a:e3:2e:e8:ca:07:3f:b5:c0:af:08:d5:
         f7:7c:e2:4b:5a:a6:23:2d:5a:62:3c:99:ad:27:2a:51:b1:28:
         37:33:c6:02:49:61:4a:ca:bb:c7:35:6a:c2:5b:d3:04:db:a5:
         00:76:18:d8:f8:57:95:fb:ce:c4:04:f2:e9:76:64:6e:b4:f6:
         7c:12:09:b5:c2:59:e4:92:07:42:4b:b4:2e:34:b1:74:79:6a:
         ce:e8:c3:84:1a:60:59:d4:2e:95:85:98:4a:97:77:cc:9e:02:
         90:8b:2a:0e:4b:69:2e:89:3a:d3:10:9e:87:e7:82:b1:79:29:
         4e:69:57:53:06:f6:ca:1d:44:19:73:ad:65:d9:05:fd:91:50:
         ff:77:38:82:bb:ec:cb:2c:8f:ce:61:dc:31:8b:68:8b:ec:ad:
         01:1a:e4:89:30:66:f8:50:40:3d:9c:3f:7c:c6:c1:15:5f:5c:
         e7:4a:00:4e:a7:51:8c:09:9e:cd:e3:df:a7:9f:95:69:bf:d8:
         5d:05:e2:51:51:01:88:b8:6a:ef:f9:1d:ae:66:27:46:b0:8a:
         74:d7:8e:b8:80:f8:9f:4d:9e:f8:18:e0:68:e7:97:bd:eb:98:
         f6:f4:b2:5d:d4:65:de:84:16:70:87:af:82:74:da:5a:b7:c3:
         af:a7:0f:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HEVH5fR5jS6h8wlU4IDFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWIyZmEzNjUxMzgzYTdmYzZhODZhZGJhNTZjN2M2MjA3
ZDc1NjgwHhcNMjQwNTE3MTUwMDEwWhcNMjQwNTE4MTUwMDEwWjAzMTEwLwYDVQQD
Eyg5ZTY2NjBkNmUyMDIyYjZiMzU5ZGJhOGJiMzgxYjI1YjU2NDgzYzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXR/9bVGM3TX6s0kQfDvuJzZY0KI
WKCz5pwwXn/lEcvAInnT77NyWh4kykIlwS5d9M/7ZkgL9l/sDBMl+9r4aJSAGyer
cS9e8c99rygjoFq3YRtAbd5kxGUpkXzpyZjPX51LSO8Vz6pxHKYP6/JsolnYtGvg
2Fb4EGbVl7b5S+MLClD9j8mzP3jaH7PjdeJGCi8/C28xXeIpOhLuDSDx4TCQePg8
9WYma/uNEfAY/aX12S72INeFf6kQqlPULMjbzArFf3S62k+OUsB5iabKj09pianS
gML++s5Tmi89gLBqwK66Ltr9kR04D6NLdbGBsav4WEmpc47sENL9+qBjDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5mYNbiAitrNZ26i7OBsltWSDx4MB8GA1UdIwQY
MBaAFDibL6NlE4On/GqGrbpWx8YgfXVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDIt
MzczYjUyMmE4MjFkLzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYWQyNmYtYTMzZS00MDY5LWE4MDItMzczYjUyMmE4MjFk
LzEvT0pzdm8yVVRnNmY4YW9hdHVsYkh4aUI5ZFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPtaJt8T
muMu6MoHP7XArwjV93ziS1qmIy1aYjyZrScqUbEoNzPGAklhSsq7xzVqwlvTBNul
AHYY2PhXlfvOxATy6XZkbrT2fBIJtcJZ5JIHQku0LjSxdHlqzujDhBpgWdQulYWY
Spd3zJ4CkIsqDktpLok60xCeh+eCsXkpTmlXUwb2yh1EGXOtZdkF/ZFQ/3c4grvs
yyyPzmHcMYtoi+ytARrkiTBm+FBAPZw/fMbBFV9c50oATqdRjAmezePfp5+Vab/Y
XQXiUVEBiLhq7/kdrmYnRrCKdNeOuID4n02e+BjgaOeXveuY9vSyXdRl3oQWcIev
gnTaWrfDr6cPfA==
-----END CERTIFICATE-----
Generated at Sat May 18 00:10:01 2024 by rpki-client on console-ams.rpki-client.org