Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File:                     oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier:          YnZ7bFoObeQJXbxl1bPqXQAWdu4av1FjT9/3KiEjVcQ=
Subject key identifier:   06:3D:F0:AF:20:B4:CA:B6:CE:C3:6A:BC:43:FF:C5:7F:2C:73:6F:46
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer:       /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial:       018F96BD0E718ED8A79E0C47B95E97CCC35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number:          0F85
Signing time:             Mon 20 May 2024 16:02:03 +0000
Manifest this update:     Mon 20 May 2024 16:02:03 +0000
Manifest next update:     Tue 21 May 2024 16:02:03 +0000
Files and hashes:         1: 2Ii0pqouQrFn8lOhNpWIXyDcXKo.roa (hash: t4I0yQn9Vh+luN2DRJtN3n5tOJhGSJrPpQ17a6chr40=)
                          2: HKGtF43rQ9pNZkcJDyxpPfRgN6o.roa (hash: sBhMqwBlMDrCb9jKaiflGzO23UnCb66CkZM60roAEMI=)
                          3: VP_7OyMfyoYw7zg71gutgn6A9Qc.roa (hash: qMpGcPyvLOJDVPIYj5BJ3eyOlsXEqLrzWfIBDXuAJrU=)
                          4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: VZ0z4ZfCWe0GL+dVudoM20yLIvfKJ6MAWXlWUOtSORM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:0e:71:8e:d8:a7:9e:0c:47:b9:5e:97:cc:c3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
        Validity
            Not Before: May 20 16:02:03 2024 GMT
            Not After : May 21 16:02:03 2024 GMT
        Subject: CN=063df0af20b4cab6cec36abc43ffc57f2c736f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:7d:5e:5d:c6:8c:7f:e6:26:4b:3f:6a:39:
                    28:11:3e:96:72:20:d2:1b:ab:f1:61:36:04:3e:d5:
                    64:19:dc:f8:25:36:38:e4:66:cc:14:10:0d:e7:bd:
                    b8:0c:e4:5e:50:75:36:20:ef:48:95:40:58:c3:ad:
                    b3:0d:11:b6:08:b2:e9:bd:04:fd:da:de:42:b5:ad:
                    be:63:dc:90:3c:37:fb:6a:8f:72:2e:bb:0f:21:fa:
                    62:77:89:05:7e:f1:85:a9:64:0f:87:6c:7b:7b:c4:
                    4e:d0:3c:62:cc:28:9d:63:89:2d:7b:6d:73:d4:ef:
                    bf:e2:ab:8b:be:ae:a3:a7:ca:45:7c:1a:78:b1:a2:
                    3d:f9:63:28:66:23:d3:74:70:1b:89:22:99:b3:2b:
                    f3:7e:dc:ee:8d:50:5d:2c:57:8b:48:19:9a:db:ba:
                    30:dc:4e:3f:1d:9e:db:2b:e1:d3:b9:0d:b2:25:9f:
                    c3:22:e1:80:67:78:bb:bb:09:bc:7c:95:9f:b6:f0:
                    ab:c1:f2:79:7b:f6:41:ae:3e:4d:0a:67:10:bf:0d:
                    0b:cc:4c:c5:9d:a5:e0:76:84:ff:38:84:68:26:8b:
                    b2:42:10:82:13:d8:bd:e1:d9:30:d2:f1:f2:f6:0c:
                    98:88:aa:e9:a3:95:67:d7:76:c1:9c:22:01:40:14:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:F0:AF:20:B4:CA:B6:CE:C3:6A:BC:43:FF:C5:7F:2C:73:6F:46
            X509v3 Authority Key Identifier:
                keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:02:7f:b0:08:55:ca:3c:42:20:f7:2e:c8:e6:9d:e9:d7:ce:
         27:61:1e:5a:b7:98:30:b4:91:20:76:03:e4:dc:2f:06:f8:5c:
         da:a0:9f:b3:30:5c:8b:b6:c0:ea:5a:68:ba:77:0e:8f:1d:83:
         56:4a:7e:36:5b:31:5a:1b:4b:43:46:cf:4c:e6:72:37:7e:d6:
         80:10:14:c1:ca:f6:af:5a:78:b6:73:27:d9:62:4f:46:90:fb:
         36:80:39:9f:fa:56:c4:0a:fa:20:9d:f6:a8:e4:b5:36:f6:e1:
         70:5a:7b:87:3b:0a:ea:2b:e6:f3:3b:ef:95:8a:69:21:1a:a2:
         8d:a5:bb:c0:3d:3e:b8:c8:b5:41:bf:54:47:64:2d:90:6c:65:
         d0:ff:e5:a7:56:fa:0e:58:4c:c2:e7:34:5d:0d:7d:4d:08:13:
         c9:3a:12:7a:08:9d:22:bf:d3:5b:9f:d3:33:aa:c5:5e:88:15:
         5d:30:7c:c2:b2:ef:af:e8:37:52:33:7f:a8:82:78:cd:8d:22:
         59:82:c8:e1:cd:97:ea:1d:e8:5c:03:68:e2:43:f5:56:f3:79:
         00:bf:11:f0:e8:eb:eb:b3:1f:f0:f2:53:16:ce:5d:74:6a:e1:
         33:5d:eb:fd:02:58:9a:08:81:d4:1b:ac:8d:77:55:8e:5b:72:
         58:c5:47:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+WvQ5xjtinngxHuV6XzMNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjA2YjhhYWQ1NTNmMDk0OGM3YTg5NGQ2ODY3MTg3MGVi
ODJjYjAwHhcNMjQwNTIwMTYwMjAzWhcNMjQwNTIxMTYwMjAzWjAzMTEwLwYDVQQD
EygwNjNkZjBhZjIwYjRjYWI2Y2VjMzZhYmM0M2ZmYzU3ZjJjNzM2ZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7x9Xl3GjH/mJks/ajkoET6WciDS
G6vxYTYEPtVkGdz4JTY45GbMFBAN5724DOReUHU2IO9IlUBYw62zDRG2CLLpvQT9
2t5Cta2+Y9yQPDf7ao9yLrsPIfpid4kFfvGFqWQPh2x7e8RO0DxizCidY4kte21z
1O+/4quLvq6jp8pFfBp4saI9+WMoZiPTdHAbiSKZsyvzftzujVBdLFeLSBma27ow
3E4/HZ7bK+HTuQ2yJZ/DIuGAZ3i7uwm8fJWftvCrwfJ5e/ZBrj5NCmcQvw0LzEzF
naXgdoT/OIRoJouyQhCCE9i94dkw0vHy9gyYiKrpo5Vn13bBnCIBQBRkSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY98K8gtMq2zsNqvEP/xX8sc29GMB8GA1UdIwQY
MBaAFKBga4qtVT8JSMeolNaGcYcOuCywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYt
YmIzNDMxZmUwMjg1LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYtYmIzNDMxZmUwMjg1
LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAJ/sAhV
yjxCIPcuyOad6dfOJ2EeWreYMLSRIHYD5NwvBvhc2qCfszBci7bA6lpouncOjx2D
Vkp+NlsxWhtLQ0bPTOZyN37WgBAUwcr2r1p4tnMn2WJPRpD7NoA5n/pWxAr6IJ32
qOS1NvbhcFp7hzsK6ivm8zvvlYppIRqijaW7wD0+uMi1Qb9UR2QtkGxl0P/lp1b6
DlhMwuc0XQ19TQgTyToSegidIr/TW5/TM6rFXogVXTB8wrLvr+g3UjN/qIJ4zY0i
WYLI4c2X6h3oXANo4kP1VvN5AL8R8Ojr67Mf8PJTFs5ddGrhM13r/QJYmgiB1Bus
jXdVjltyWMVHCA==
-----END CERTIFICATE-----
Generated at Tue May 21 00:47:57 2024 by rpki-client on console-ams.rpki-client.org