Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          UsszqjMEU9ERGK31outsiLuK86yOQ3EA965kukaF2IM=
Subject key identifier:   08:A2:89:9D:43:4C:CD:D4:53:89:FA:76:D9:26:7B:99:F5:0A:16:B4
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       018F874B6E5102C26123699633C71EB32B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          D6
Signing time:             Fri 17 May 2024 16:03:38 +0000
Manifest this update:     Fri 17 May 2024 16:03:38 +0000
Manifest next update:     Sat 18 May 2024 16:03:38 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: 9P0CTrlEDfJugJoDfo6Wus7C6E/l93CIRupQ2Re0bEs=)
                          2: g_uwwu4cwJv41RJzLzJsLG7iYGc.roa (hash: BzuXZNsREhhcgP77eRePbtViTChfb3j2Bae4v6n6c0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:6e:51:02:c2:61:23:69:96:33:c7:1e:b3:2b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: May 17 16:03:38 2024 GMT
            Not After : May 18 16:03:38 2024 GMT
        Subject: CN=08a2899d434ccdd45389fa76d9267b99f50a16b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:b1:17:78:f7:b3:83:26:14:23:5b:3e:28:
                    c7:1a:27:66:2c:c2:dc:fe:7d:e9:ca:a5:1f:70:7d:
                    5b:f2:88:ce:7d:ba:ae:f8:0f:ee:f7:53:a4:46:50:
                    e0:98:43:79:46:5a:45:6e:62:29:a6:16:c3:38:9e:
                    8f:39:12:16:63:03:e0:23:5b:92:42:d6:a1:47:6a:
                    ac:83:db:dc:d3:85:f0:6b:8b:11:fd:4b:61:58:a2:
                    4d:2d:81:3e:00:d2:74:37:9d:fd:66:ba:d2:83:02:
                    dc:9b:2e:62:98:72:95:79:9b:27:db:f8:ed:4b:cc:
                    fa:eb:f7:94:b5:7b:dc:e0:fb:26:4e:1c:e0:bb:9e:
                    0e:4b:6f:bc:03:17:90:4f:6a:c2:6f:38:16:84:fe:
                    ab:c9:49:36:60:93:8a:b8:f0:0a:6c:f9:ad:05:13:
                    9c:e4:bf:2b:d6:cb:37:8a:19:cd:fa:69:f5:3d:cf:
                    e8:aa:d1:0c:64:b0:04:d2:04:f2:a5:5d:d5:d6:d0:
                    e6:13:af:54:2e:48:62:21:4a:36:f3:02:be:bf:3c:
                    b6:cf:f0:06:93:76:6d:16:44:53:80:2d:e4:ea:39:
                    88:12:79:09:30:6d:6c:8b:e2:59:2e:8e:8a:94:47:
                    6a:1d:78:c8:82:a4:44:0e:3a:44:0f:d2:14:1f:d3:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:89:9D:43:4C:CD:D4:53:89:FA:76:D9:26:7B:99:F5:0A:16:B4
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:b8:33:56:c5:c5:11:93:29:26:da:e9:82:40:c4:a2:bf:
         51:65:76:c3:0a:34:e6:0b:55:bd:d2:42:57:88:2b:3b:17:8a:
         80:8e:e7:7e:78:ed:ad:6f:6d:54:48:4e:d2:4b:41:5a:3c:15:
         b3:6a:83:f9:19:6b:74:bc:68:d0:59:33:46:a0:69:33:1b:54:
         e1:10:07:2c:75:a7:0c:71:54:e2:cf:11:8b:a5:59:8d:34:ac:
         ee:6a:c8:ce:c4:c0:9e:bf:9b:f1:ee:42:61:25:de:16:7e:88:
         65:5e:c9:7c:ad:38:72:5f:5c:c9:9f:5a:0c:9d:d3:77:86:98:
         c3:54:78:92:54:d4:e9:9a:5d:19:b0:1b:f2:d5:72:69:29:b2:
         eb:2b:01:25:2d:ff:6f:29:b6:33:b3:f8:e0:f4:19:90:b3:37:
         5e:f2:a0:e8:aa:bd:00:d2:05:6d:76:76:88:43:1d:28:ce:5b:
         f3:fa:1e:09:d7:15:3e:a1:5d:14:f5:fe:59:08:2e:53:86:92:
         52:23:22:45:90:01:2d:ce:dd:a2:aa:52:ff:3f:f3:ea:25:49:
         a2:28:b9:89:d1:80:58:e6:e0:fa:e6:e5:37:a1:ce:c8:1f:8a:
         bd:6b:9a:04:f1:85:39:81:17:a9:3a:c9:a2:f7:d8:d4:1a:37:
         a5:19:2d:f3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY+HS25RAsJhI2mWM8cesys/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZWMxNDY4ZWUzMTAzZmU1M2IxY2Y1YTk4NzVhZWNkNGUy
OGFkNTEwHhcNMjQwNTE3MTYwMzM4WhcNMjQwNTE4MTYwMzM4WjAzMTEwLwYDVQQD
EygwOGEyODk5ZDQzNGNjZGQ0NTM4OWZhNzZkOTI2N2I5OWY1MGExNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJOxF3j3s4MmFCNbPijHGidmLMLc
/n3pyqUfcH1b8ojOfbqu+A/u91OkRlDgmEN5RlpFbmIpphbDOJ6PORIWYwPgI1uS
QtahR2qsg9vc04Xwa4sR/UthWKJNLYE+ANJ0N539ZrrSgwLcmy5imHKVeZsn2/jt
S8z66/eUtXvc4PsmThzgu54OS2+8AxeQT2rCbzgWhP6ryUk2YJOKuPAKbPmtBROc
5L8r1ss3ihnN+mn1Pc/oqtEMZLAE0gTypV3V1tDmE69ULkhiIUo28wK+vzy2z/AG
k3ZtFkRTgC3k6jmIEnkJMG1si+JZLo6KlEdqHXjIgqREDjpED9IUH9P5cQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAiiiZ1DTM3UU4n6dtkme5n1Cha0MB8GA1UdIwQY
MBaAFPjsFGjuMQP+U7HPWph1rs1OKK1RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Pd1VhTzR4QV81VHNjOWFtSFd1elU0b3JWRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjAyNGJkLTJkMGMtNDU3Mi1hNDlh
LTU4NzhhODE3M2M0NC8xLzEtT3dVYU80eEFfNVRzYzlhbUhXdXpVNG9yVkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RlL2IwMjRiZC0yZDBjLTQ1NzItYTQ5YS01ODc4YTgxNzNj
NDQvMS8xLU93VWFPNHhBXzVUc2M5YW1IV3V6VTRvclZFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAig64
M1bFxRGTKSba6YJAxKK/UWV2wwo05gtVvdJCV4grOxeKgI7nfnjtrW9tVEhO0ktB
WjwVs2qD+RlrdLxo0FkzRqBpMxtU4RAHLHWnDHFU4s8Ri6VZjTSs7mrIzsTAnr+b
8e5CYSXeFn6IZV7JfK04cl9cyZ9aDJ3Td4aYw1R4klTU6ZpdGbAb8tVyaSmy6ysB
JS3/bym2M7P44PQZkLM3XvKg6Kq9ANIFbXZ2iEMdKM5b8/oeCdcVPqFdFPX+WQgu
U4aSUiMiRZABLc7doqpS/z/z6iVJoii5idGAWObg+ublN6HOyB+KvWuaBPGFOYEX
qTrJovfY1Bo3pRkt8w==
-----END CERTIFICATE-----
Generated at Fri May 17 18:52:19 2024 by rpki-client on console-ams.rpki-client.org