Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File:                     43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier:          OuESwOXZEiKwdJGPJ4E7OqZ/aYL073TFA/WnNBQKSU0=
Subject key identifier:   F6:3B:BF:9C:00:D5:8E:27:7C:D8:55:7C:F9:AA:3D:A0:72:CB:9B:F2
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer:       /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial:       018F3BFAAAF3496C3E360588AB89C5B45BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number:          0DB3
Signing time:             Fri 03 May 2024 01:03:54 +0000
Manifest this update:     Fri 03 May 2024 01:03:54 +0000
Manifest next update:     Sat 04 May 2024 01:03:54 +0000
Files and hashes:         1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: Bq8hBX61Y7lWVhDvHDNDPh5owEr46CG4gtG8ei8U5hg=)
                          2: JzQVAYplWW6qFez98FFKsjOKt1s.roa (hash: BFYfOcHHQPZ2kc69Ap1QEVtami7oRAJLxTvXiYSxNr8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:aa:f3:49:6c:3e:36:05:88:ab:89:c5:b4:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
        Validity
            Not Before: May  3 01:03:54 2024 GMT
            Not After : May  4 01:03:54 2024 GMT
        Subject: CN=f63bbf9c00d58e277cd8557cf9aa3da072cb9bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:94:87:84:dc:1a:f8:a6:0d:a4:9a:9b:7e:
                    87:3f:4e:a1:00:e7:21:f9:dd:6a:0c:c8:90:70:d1:
                    89:52:42:9e:eb:99:dc:7b:b3:2a:fa:f8:25:e5:77:
                    a2:4f:52:44:1b:fb:ba:25:18:be:de:64:37:ea:6d:
                    5d:6f:fe:3d:08:51:76:b2:44:5e:23:35:6f:03:0c:
                    e5:48:57:6a:60:01:fa:eb:33:bd:f7:ff:eb:ef:c1:
                    5a:47:18:2d:e5:b9:8b:42:d0:c9:4a:5b:ab:1c:a9:
                    ec:eb:88:65:72:a2:b6:ae:63:58:bf:a6:0e:36:c3:
                    0c:95:28:8f:a4:95:1c:0c:72:96:d7:c6:e9:67:f3:
                    40:55:b3:0f:1f:96:6d:33:47:01:44:0b:de:2e:c3:
                    88:84:18:e0:b1:fc:8a:29:2b:b6:e6:e3:f0:14:fb:
                    64:f0:c7:22:bb:cc:5c:c1:93:fa:40:41:73:b4:9b:
                    10:5e:07:9e:23:12:e6:af:86:40:5b:6f:16:65:36:
                    8e:3b:12:29:38:01:f8:65:90:71:fc:70:01:10:2a:
                    13:dd:57:13:e4:a9:67:b4:1e:68:03:d6:16:be:9b:
                    17:36:b4:cc:f7:f5:2e:d6:57:e6:22:69:e6:a0:4e:
                    e5:3b:85:0c:70:dd:51:34:91:d6:93:c1:93:80:83:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3B:BF:9C:00:D5:8E:27:7C:D8:55:7C:F9:AA:3D:A0:72:CB:9B:F2
            X509v3 Authority Key Identifier:
                keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9a:7d:f1:ae:c1:59:15:dc:56:4d:df:0b:5c:ff:ca:2f:d2:
         f1:f1:d7:4d:6b:6b:3b:5c:ee:f5:7e:dc:31:21:bc:50:33:4c:
         9d:00:33:b2:89:1a:64:ef:c1:af:3c:dd:fd:b1:c7:c3:db:15:
         68:31:fb:76:1f:80:20:c7:1b:34:65:68:07:cb:df:23:a8:de:
         c4:29:31:e1:6f:25:e8:9d:9d:f5:38:b1:45:d3:cf:31:06:37:
         f6:d8:21:fe:9f:02:f4:29:ad:5f:9e:5c:3e:68:eb:23:e1:3e:
         b1:2f:64:76:f3:c1:7b:f9:03:ac:93:5c:0e:49:d9:58:2c:02:
         40:c7:d4:e1:ac:ad:29:9f:40:c7:ef:6c:35:d9:61:be:fe:3a:
         c5:ac:c1:90:ea:f9:6a:35:af:8f:9b:b8:e5:7a:aa:9c:54:b2:
         17:31:4b:6d:a5:4e:bb:df:80:c8:b9:c2:a9:44:16:69:ed:7c:
         dc:81:5b:bd:66:ed:1c:d3:a4:a3:d2:d7:d3:1a:35:9e:05:bf:
         3a:87:f8:7b:a5:5c:e5:9b:89:af:ed:ab:be:b1:27:2b:85:7a:
         4a:f6:6a:c6:7b:2d:3f:e4:3a:f9:85:f9:2f:64:b8:58:62:d9:
         4a:bb:d0:69:1f:94:85:28:2d:26:b9:cb:af:62:1d:e6:a5:a1:
         b3:fe:e1:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+qrzSWw+NgWIq4nFtFvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2EyMGE3ZjI4YTgyNGY2NzMxNWE1NjZlNTkyNDRhYWE4
YzdkNGEwHhcNMjQwNTAzMDEwMzU0WhcNMjQwNTA0MDEwMzU0WjAzMTEwLwYDVQQD
EyhmNjNiYmY5YzAwZDU4ZTI3N2NkODU1N2NmOWFhM2RhMDcyY2I5YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgeUh4TcGvimDaSam36HP06hAOch
+d1qDMiQcNGJUkKe65nce7Mq+vgl5XeiT1JEG/u6JRi+3mQ36m1db/49CFF2skRe
IzVvAwzlSFdqYAH66zO99//r78FaRxgt5bmLQtDJSlurHKns64hlcqK2rmNYv6YO
NsMMlSiPpJUcDHKW18bpZ/NAVbMPH5ZtM0cBRAveLsOIhBjgsfyKKSu25uPwFPtk
8Mciu8xcwZP6QEFztJsQXgeeIxLmr4ZAW28WZTaOOxIpOAH4ZZBx/HABECoT3VcT
5KlntB5oA9YWvpsXNrTM9/Uu1lfmImnmoE7lO4UMcN1RNJHWk8GTgIMqFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPY7v5wA1Y4nfNhVfPmqPaByy5vyMB8GA1UdIwQY
MBaAFON6IKfyioJPZzFaVm5ZJEqqjH1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMt
NTcwNjllMDgwM2I1LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMtNTcwNjllMDgwM2I1
LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJp98a7B
WRXcVk3fC1z/yi/S8fHXTWtrO1zu9X7cMSG8UDNMnQAzsokaZO/Brzzd/bHHw9sV
aDH7dh+AIMcbNGVoB8vfI6jexCkx4W8l6J2d9TixRdPPMQY39tgh/p8C9CmtX55c
PmjrI+E+sS9kdvPBe/kDrJNcDknZWCwCQMfU4aytKZ9Ax+9sNdlhvv46xazBkOr5
ajWvj5u45XqqnFSyFzFLbaVOu9+AyLnCqUQWae183IFbvWbtHNOko9LX0xo1ngW/
Oof4e6Vc5ZuJr+2rvrEnK4V6SvZqxnstP+Q6+YX5L2S4WGLZSrvQaR+UhSgtJrnL
r2Id5qWhs/7hJQ==
-----END CERTIFICATE-----
Generated at Fri May 3 07:22:28 2024 by rpki-client on console-ams.rpki-client.org