Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File:                     OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier:          JEbrpVk3u7cNqxCkB7wQN5USd3upSlenW+/37xQ4vT8=
Subject key identifier:   07:67:3A:8B:52:C2:1D:9A:17:49:85:7C:ED:10:FF:07:64:33:04:E5
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer:       /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial:       018F8749F5B161E906BFFDE9B04E6DFAFF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number:          077B
Signing time:             Fri 17 May 2024 16:02:02 +0000
Manifest this update:     Fri 17 May 2024 16:02:02 +0000
Manifest next update:     Sat 18 May 2024 16:02:02 +0000
Files and hashes:         1: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: jh7ImhAhUOnMeRfiI/e6BX8UQ4YJIyLM1nlobOEnUD0=)
                          2: ZaU7bpahzsuyQql_dfM7JCHiYaA.roa (hash: qz2/HgB+HBD+S0FC2LX1e2/55KnSpUAW7ydkzgcdbYk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f5:b1:61:e9:06:bf:fd:e9:b0:4e:6d:fa:ff:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
        Validity
            Not Before: May 17 16:02:02 2024 GMT
            Not After : May 18 16:02:02 2024 GMT
        Subject: CN=07673a8b52c21d9a1749857ced10ff07643304e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:7b:01:1c:67:1b:b9:1c:2a:ee:63:c9:8b:
                    5e:82:ae:ee:6b:77:11:7c:24:cd:51:93:52:74:d3:
                    6c:a4:c8:b4:d3:50:86:4f:08:af:57:68:65:af:55:
                    28:49:b1:1d:7d:3c:d2:be:53:38:ea:8e:a9:59:0d:
                    d5:62:4e:71:d1:89:01:3e:f6:7e:88:ea:48:dc:c0:
                    a8:8f:f5:91:b5:67:26:38:06:c8:a4:37:b2:76:94:
                    45:e3:f1:3a:97:90:db:91:a8:38:6c:f6:72:f3:b0:
                    70:cd:12:73:ab:31:d6:87:f0:fe:a0:91:09:d7:1e:
                    56:2b:79:9b:ea:61:6e:38:9c:67:8c:d3:f5:37:8f:
                    57:9c:d4:e0:d0:d2:76:ac:d7:f7:33:d7:95:9f:03:
                    db:d6:06:b0:fa:ab:07:87:f6:be:e6:89:23:58:49:
                    d4:26:3a:72:7a:5b:5a:2f:c3:90:5f:5e:f5:0b:19:
                    12:17:86:95:05:35:8f:1c:0d:dc:4b:a5:a3:67:d9:
                    5b:d1:57:d4:0f:c7:a0:7e:81:dc:cf:1d:aa:6b:00:
                    3b:52:ab:26:bc:a3:43:66:04:28:ae:ab:dc:be:cc:
                    91:5a:2b:33:36:40:95:41:7b:5d:12:c1:d2:a9:b4:
                    c4:08:bb:5d:1f:de:2b:c2:74:e8:c7:81:ee:a8:2b:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:3A:8B:52:C2:1D:9A:17:49:85:7C:ED:10:FF:07:64:33:04:E5
            X509v3 Authority Key Identifier:
                keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:a1:61:38:ac:91:67:80:08:c9:59:f2:ce:30:21:c3:60:
         c7:a2:c9:4a:6d:3c:7f:07:10:60:4f:57:e5:bf:80:11:6e:56:
         21:15:33:e6:a4:8d:a6:e6:01:55:e5:36:36:74:70:ba:bf:cc:
         85:89:d0:a1:54:7b:95:a5:c4:9e:fa:da:fd:18:9b:69:29:10:
         91:ed:2c:f3:c5:b4:55:0d:bd:74:2a:6d:d3:3d:ef:8a:37:39:
         64:87:4a:45:de:e9:c3:3f:c6:da:47:10:6f:a6:63:6e:6b:5d:
         5f:c9:1a:8d:b6:0d:74:ab:2d:7a:e4:39:6f:7b:8c:9d:a0:8b:
         ee:40:e5:68:87:fb:b7:98:b7:12:66:18:17:30:36:3a:cb:3a:
         2a:1c:0c:92:da:97:c0:9c:a3:d0:6c:7e:e5:50:f1:8b:0d:4e:
         bc:6c:47:fb:40:d5:e9:20:37:98:23:f6:1a:20:e3:44:a4:70:
         79:15:c5:ed:b3:ac:d8:0a:81:fc:b4:22:b4:60:b1:de:12:4e:
         68:6e:26:7c:95:30:04:a8:e4:a5:94:99:80:96:f0:84:a0:67:
         1a:ad:1e:7b:ba:f1:8b:26:68:e5:e1:7e:34:11:94:aa:23:b0:
         77:a4:39:9b:4d:ec:b3:8c:c0:2f:f1:54:22:c3:48:09:2b:bd:
         94:7d:d7:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSfWxYekGv/3psE5t+v9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Zjc0NmI4MWFlYzAwZTM2YjliY2I3YTA4NjQyYTY0ZTkx
M2RhNWIwHhcNMjQwNTE3MTYwMjAyWhcNMjQwNTE4MTYwMjAyWjAzMTEwLwYDVQQD
EygwNzY3M2E4YjUyYzIxZDlhMTc0OTg1N2NlZDEwZmYwNzY0MzMwNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7t7ARxnG7kcKu5jyYtegq7ua3cR
fCTNUZNSdNNspMi001CGTwivV2hlr1UoSbEdfTzSvlM46o6pWQ3VYk5x0YkBPvZ+
iOpI3MCoj/WRtWcmOAbIpDeydpRF4/E6l5Dbkag4bPZy87BwzRJzqzHWh/D+oJEJ
1x5WK3mb6mFuOJxnjNP1N49XnNTg0NJ2rNf3M9eVnwPb1gaw+qsHh/a+5okjWEnU
JjpyeltaL8OQX171CxkSF4aVBTWPHA3cS6WjZ9lb0VfUD8egfoHczx2qawA7Uqsm
vKNDZgQorqvcvsyRWiszNkCVQXtdEsHSqbTECLtdH94rwnTox4HuqCuzNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdnOotSwh2aF0mFfO0Q/wdkMwTlMB8GA1UdIwQY
MBaAFDj3Rrga7ADja5vLeghkKmTpE9pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgt
YzIyMzk1Y2UxYmU0LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgtYzIyMzk1Y2UxYmU0
LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQqhYTis
kWeACMlZ8s4wIcNgx6LJSm08fwcQYE9X5b+AEW5WIRUz5qSNpuYBVeU2NnRwur/M
hYnQoVR7laXEnvra/RibaSkQke0s88W0VQ29dCpt0z3vijc5ZIdKRd7pwz/G2kcQ
b6ZjbmtdX8kajbYNdKsteuQ5b3uMnaCL7kDlaIf7t5i3EmYYFzA2Oss6KhwMktqX
wJyj0Gx+5VDxiw1OvGxH+0DV6SA3mCP2GiDjRKRweRXF7bOs2AqB/LQitGCx3hJO
aG4mfJUwBKjkpZSZgJbwhKBnGq0ee7rxiyZo5eF+NBGUqiOwd6Q5m03ss4zAL/FU
IsNICSu9lH3XeA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:57:56 2024 by rpki-client on console-ams.rpki-client.org