Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File:                     Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier:          sJCr6duyoiufmkxwmEIkH5CBam0vPzpW68G3yX/iRCc=
Subject key identifier:   16:EC:A9:C9:09:B9:20:5F:47:67:44:92:E6:C1:6E:67:45:02:CB:1C
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer:       /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial:       019074D1D58B1E5EC1FB66AEB26AF52703C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number:          066B
Signing time:             Tue 02 Jul 2024 19:00:27 +0000
Manifest this update:     Tue 02 Jul 2024 19:00:27 +0000
Manifest next update:     Wed 03 Jul 2024 19:00:27 +0000
Files and hashes:         1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: 2Z+tvV+8kkEcIvXn26ME3WLbmOZCpj5Ea4CS47bhx+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:d1:d5:8b:1e:5e:c1:fb:66:ae:b2:6a:f5:27:03:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
        Validity
            Not Before: Jul  2 19:00:27 2024 GMT
            Not After : Jul  3 19:00:27 2024 GMT
        Subject: CN=16eca9c909b9205f47674492e6c16e674502cb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:f4:84:c5:50:e5:65:8c:2c:d4:e3:d5:3b:
                    70:a7:da:5e:4e:d1:c7:67:dc:5b:db:26:5b:b5:15:
                    89:f1:f1:60:8a:06:78:d2:0c:5b:cb:c3:b8:e6:a8:
                    3a:29:6a:20:1c:d4:d8:e9:30:18:1d:f0:12:a0:09:
                    19:09:cd:b7:8c:8a:e9:89:f7:06:59:19:a6:1a:e8:
                    1f:75:26:29:7e:86:9b:65:33:7f:97:b0:a9:7e:d4:
                    d2:36:4c:2a:ae:aa:98:ee:74:d6:16:bb:4b:a0:41:
                    77:25:34:37:bf:53:2f:0c:50:a5:b6:04:7c:11:96:
                    81:10:4d:c9:71:d8:5b:d5:54:f7:00:1a:92:5c:b1:
                    64:aa:3f:88:c7:48:d2:de:31:fd:c2:01:0f:92:eb:
                    96:c0:33:33:88:c0:9b:99:35:1a:7d:b9:f2:90:9f:
                    77:63:c4:14:98:90:97:e6:c0:37:67:91:9c:64:32:
                    cb:86:08:45:20:f3:57:5e:b7:cf:3c:57:2c:85:3a:
                    7f:75:41:31:f2:c3:07:8b:08:e8:71:2a:ef:c2:6e:
                    f8:d3:9a:7b:26:85:8e:eb:52:d7:a6:a3:2c:da:e3:
                    82:ce:c2:fd:29:b2:93:c9:90:58:cd:32:b0:34:0e:
                    66:ba:90:a5:4c:85:cb:8f:bd:ee:cf:d4:a8:45:84:
                    35:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EC:A9:C9:09:B9:20:5F:47:67:44:92:E6:C1:6E:67:45:02:CB:1C
            X509v3 Authority Key Identifier:
                keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:50:9d:7a:8c:ab:c7:df:ae:2e:8a:f0:ed:48:98:ba:a6:88:
         ad:c3:45:99:a8:e7:9b:90:d7:5a:1c:af:60:a9:21:39:5f:88:
         b8:84:fe:73:fc:03:18:19:3c:ae:06:e9:8e:33:ab:4e:83:3a:
         8e:fe:2c:fa:e8:99:35:a6:16:fa:bb:d2:5c:e8:e0:e2:be:a3:
         68:81:d0:e6:45:71:57:b0:b4:9d:39:b7:7a:43:8e:c3:b9:c9:
         3b:b8:1d:bc:85:a4:9c:21:83:64:3d:51:7b:d3:2f:68:b8:eb:
         3d:79:57:89:df:b8:2d:19:ff:db:a4:31:17:81:f6:ce:5f:7c:
         94:e6:20:82:5e:76:67:d6:48:ff:9d:81:33:23:e3:ed:34:62:
         b0:f0:13:1c:18:fa:a7:fa:78:07:24:0e:2a:4a:4a:67:f9:cc:
         05:1f:56:0d:ca:24:15:ab:f0:2c:78:95:0b:27:66:c6:42:9e:
         a7:4e:0b:31:9d:ef:80:30:f5:59:5d:bd:42:a6:90:70:79:c4:
         c9:c1:c4:9f:53:e7:00:0e:7d:55:70:75:0a:0a:57:3b:f7:ca:
         b8:30:39:0f:5b:82:38:66:6b:75:65:75:f0:c6:b2:e2:c1:c6:
         ba:65:bc:cb:ee:ca:29:88:d3:9c:8e:a4:72:2b:da:c0:06:67:
         ef:2e:e8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZB00dWLHl7B+2ausmr1JwPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZmY4ZmMxNmU5MmZiY2MwNzlkODBkNmJlM2Q3ZGVkZjFk
MDY2OGYwHhcNMjQwNzAyMTkwMDI3WhcNMjQwNzAzMTkwMDI3WjAzMTEwLwYDVQQD
EygxNmVjYTljOTA5YjkyMDVmNDc2NzQ0OTJlNmMxNmU2NzQ1MDJjYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXz0hMVQ5WWMLNTj1Ttwp9peTtHH
Z9xb2yZbtRWJ8fFgigZ40gxby8O45qg6KWogHNTY6TAYHfASoAkZCc23jIrpifcG
WRmmGugfdSYpfoabZTN/l7CpftTSNkwqrqqY7nTWFrtLoEF3JTQ3v1MvDFCltgR8
EZaBEE3Jcdhb1VT3ABqSXLFkqj+Ix0jS3jH9wgEPkuuWwDMziMCbmTUafbnykJ93
Y8QUmJCX5sA3Z5GcZDLLhghFIPNXXrfPPFcshTp/dUEx8sMHiwjocSrvwm7405p7
JoWO61LXpqMs2uOCzsL9KbKTyZBYzTKwNA5mupClTIXLj73uz9SoRYQ1FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbsqckJuSBfR2dEkubBbmdFAsscMB8GA1UdIwQY
MBaAFDn/j8FukvvMB52A1r49fe3x0GaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NzkxMzktNTc1MS00N2ZjLTk2YWQt
ZjAxNzA3NTQ4NTRhLzEvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NzkxMzktNTc1MS00N2ZjLTk2YWQtZjAxNzA3NTQ4NTRh
LzEvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFCdeoyr
x9+uLorw7UiYuqaIrcNFmajnm5DXWhyvYKkhOV+IuIT+c/wDGBk8rgbpjjOrToM6
jv4s+uiZNaYW+rvSXOjg4r6jaIHQ5kVxV7C0nTm3ekOOw7nJO7gdvIWknCGDZD1R
e9MvaLjrPXlXid+4LRn/26QxF4H2zl98lOYggl52Z9ZI/52BMyPj7TRisPATHBj6
p/p4ByQOKkpKZ/nMBR9WDcokFavwLHiVCydmxkKep04LMZ3vgDD1WV29QqaQcHnE
ycHEn1PnAA59VXB1CgpXO/fKuDA5D1uCOGZrdWV18May4sHGumW8y+7KKYjTnI6k
civawAZn7y7oTg==
-----END CERTIFICATE-----
Generated at Tue Jul 2 22:17:30 2024 by rpki-client on console-fra.rpki-client.org