Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
File:                     OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json)
Hash identifier:          df1cFGV5bc7p+8OudfWeuBBNMbzfXbskqvGKKkGtsUk=
Subject key identifier:   DF:48:73:E7:D7:14:02:5E:84:13:A8:10:62:BD:DA:89:D7:40:2C:E3
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Certificate issuer:       /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial:       018F874965E4C7FF3DB3640648949437350C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
Manifest number:          106E
Signing time:             Fri 17 May 2024 16:01:25 +0000
Manifest this update:     Fri 17 May 2024 16:01:25 +0000
Manifest next update:     Sat 18 May 2024 16:01:25 +0000
Files and hashes:         1: 7aaQQrS50eQtliTK7Mj9vibOQk0.roa (hash: wFyDQep5dGSlAuOUAIUbH86TBUV91OH3UyuwMYQ6dIM=)
                          2: CpYvFQ6Kp3v5uUZ1qExXOvV46vQ.roa (hash: Kr7Z3a/d4Vgq9wCh3pbcyc56aLcz7PdN+AVVelLeum8=)
                          3: JmSaixQZb_mwVrlSNBnYiUug5ME.roa (hash: s9Crc7Ls0/TERUaENGv8P5bUwB4QshZ+9Afq00OrUZg=)
                          4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: T5W6ABH0tlzBMTgkwLi9rnCMZ3HiqhUKad/jlEBuh2M=)
                          5: _ryi1tUiEu8etsRLCwSzrcDzsdc.roa (hash: oE4o0Ugrmd2aQD0ZfRLTSphY2W7es4st+PNVsslBplA=)
                          6: cpkdxBhmnQKtAbi8HnMnMOSwwcE.roa (hash: AgBHoXPgivWjJ99L3hwKhUvvJZQ+yMQK3KeT/tYcapQ=)
                          7: lYWNtslVY4-FgISKZVSpm-0Bunk.roa (hash: vBVMm+B11RK4B0slA8V0QrGgHHMA0gQCtQKkrRguOKA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:65:e4:c7:ff:3d:b3:64:06:48:94:94:37:35:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
        Validity
            Not Before: May 17 16:01:25 2024 GMT
            Not After : May 18 16:01:25 2024 GMT
        Subject: CN=df4873e7d714025e8413a81062bdda89d7402ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:21:1d:61:88:f8:03:df:bc:28:02:27:33:
                    be:a0:d0:29:47:3e:18:4f:e8:e2:3e:ad:41:6d:ea:
                    68:35:8a:67:8c:85:4c:66:c7:7a:d0:13:7c:f8:a5:
                    e5:d0:42:10:5a:e3:db:2d:21:1f:17:ce:b7:0d:ab:
                    35:8b:1e:52:cc:ba:3c:7d:c2:61:02:13:33:f3:e1:
                    ec:76:68:52:15:03:3c:79:46:e5:60:d5:da:2b:00:
                    40:17:77:41:ad:30:db:d3:79:0f:77:2e:f0:99:b6:
                    1b:76:f6:6d:94:3f:1a:fb:31:7d:ee:b2:33:c6:d8:
                    32:7e:86:52:9a:78:4c:ff:7f:f5:3f:01:cf:aa:5e:
                    2a:b2:b6:bd:06:cb:dd:21:02:e1:14:d8:cb:a5:8a:
                    7f:37:04:55:8c:87:72:34:cc:5f:36:a1:2c:7c:4a:
                    3b:ab:4e:45:a1:66:48:d1:97:20:f6:d6:14:8f:bd:
                    bc:d2:61:c8:71:f9:20:88:02:ca:c2:6d:af:e9:43:
                    8e:d8:23:bf:38:d0:92:ee:6b:ed:71:36:4b:d6:6a:
                    65:21:9a:9a:7c:fd:4e:bc:0d:57:50:db:fd:b5:2e:
                    e5:9f:15:57:28:b7:82:84:6c:2b:64:10:10:c1:25:
                    3f:05:b9:9f:eb:05:85:09:0a:f9:37:1a:00:5e:47:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:48:73:E7:D7:14:02:5E:84:13:A8:10:62:BD:DA:89:D7:40:2C:E3
            X509v3 Authority Key Identifier:
                keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:87:a0:95:f0:28:b5:da:96:36:03:2b:e5:26:94:c0:1b:bb:
         e9:82:61:6a:85:0b:28:6a:a5:c8:88:87:f9:77:9b:2a:c8:8e:
         d8:0b:eb:d2:c1:2a:b7:12:3b:4b:1e:16:49:61:1f:48:a8:4c:
         c4:12:6c:f2:b2:0d:a7:e0:40:c6:f1:48:76:11:0b:4e:d2:81:
         86:81:ba:86:d0:79:28:1d:10:a8:c3:dd:ff:4f:ec:4a:e8:3c:
         be:66:e6:ff:20:d5:a6:27:00:73:e9:ff:de:be:a6:63:84:6f:
         e4:1c:30:98:f2:2f:3b:b7:71:90:5d:1c:a6:0f:68:41:e3:d3:
         5c:6b:2a:40:08:ed:18:2b:95:9a:8d:88:b1:b9:73:d2:96:b0:
         c4:47:1d:2b:19:9a:40:ac:88:df:6e:46:49:01:2c:0c:4c:df:
         a2:52:e4:bd:52:fd:16:8e:46:09:85:2c:e0:1e:0f:00:d3:3d:
         e1:7c:0f:2d:d8:da:36:1f:28:73:7d:72:2d:ca:40:71:aa:34:
         7f:4d:e8:0e:e8:4f:a2:65:15:75:f1:b5:59:42:4d:d5:3f:8d:
         1c:39:35:80:02:71:3d:45:e9:76:10:09:f4:75:ca:09:2c:49:
         56:08:ce:e6:58:20:c2:97:98:d1:32:27:fa:9d:b4:d2:5b:1e:
         83:d8:75:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSWXkx/89s2QGSJSUNzUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz
OGE2MjQwHhcNMjQwNTE3MTYwMTI1WhcNMjQwNTE4MTYwMTI1WjAzMTEwLwYDVQQD
EyhkZjQ4NzNlN2Q3MTQwMjVlODQxM2E4MTA2MmJkZGE4OWQ3NDAyY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBohHWGI+APfvCgCJzO+oNApRz4Y
T+jiPq1BbepoNYpnjIVMZsd60BN8+KXl0EIQWuPbLSEfF863Das1ix5SzLo8fcJh
AhMz8+HsdmhSFQM8eUblYNXaKwBAF3dBrTDb03kPdy7wmbYbdvZtlD8a+zF97rIz
xtgyfoZSmnhM/3/1PwHPql4qsra9BsvdIQLhFNjLpYp/NwRVjIdyNMxfNqEsfEo7
q05FoWZI0Zcg9tYUj7280mHIcfkgiALKwm2v6UOO2CO/ONCS7mvtcTZL1mplIZqa
fP1OvA1XUNv9tS7lnxVXKLeChGwrZBAQwSU/Bbmf6wWFCQr5NxoAXkenHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9Ic+fXFAJehBOoEGK92onXQCzjMB8GA1UdIwQY
MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt
MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0
LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoeglfAo
tdqWNgMr5SaUwBu76YJhaoULKGqlyIiH+XebKsiO2Avr0sEqtxI7Sx4WSWEfSKhM
xBJs8rINp+BAxvFIdhELTtKBhoG6htB5KB0QqMPd/0/sSug8vmbm/yDVpicAc+n/
3r6mY4Rv5BwwmPIvO7dxkF0cpg9oQePTXGsqQAjtGCuVmo2Isblz0pawxEcdKxma
QKyI325GSQEsDEzfolLkvVL9Fo5GCYUs4B4PANM94XwPLdjaNh8oc31yLcpAcao0
f03oDuhPomUVdfG1WUJN1T+NHDk1gAJxPUXpdhAJ9HXKCSxJVgjO5lggwpeY0TIn
+p200lseg9h1LQ==
-----END CERTIFICATE-----
Generated at Fri May 17 19:08:40 2024 by rpki-client on console-fra.rpki-client.org