Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File:                     OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier:          2nQ0AEMC5R/uwMir4jYtiQR7TRf8FHQyLLLToN3ZRRM=
Subject key identifier:   16:C1:86:39:42:22:FB:74:C7:6C:5D:8C:C1:F6:17:E9:A2:4E:E5:D2
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer:       /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial:       018F8937A8E3980AE284C168140C9E6E9105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number:          01C9
Signing time:             Sat 18 May 2024 01:01:17 +0000
Manifest this update:     Sat 18 May 2024 01:01:17 +0000
Manifest next update:     Sun 19 May 2024 01:01:17 +0000
Files and hashes:         1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: nwdZ8fWq7ECEa/DPauXE298e9ox3CACsv0ZL7WmI9tE=)
                          2: g7pFgNn9P392Qi9TseTU5vbLA6c.roa (hash: 2QLkkN16UAuwCY5qQVrWBPaEDLxBaQBXosyTwnErWlM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:a8:e3:98:0a:e2:84:c1:68:14:0c:9e:6e:91:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
        Validity
            Not Before: May 18 01:01:17 2024 GMT
            Not After : May 19 01:01:17 2024 GMT
        Subject: CN=16c186394222fb74c76c5d8cc1f617e9a24ee5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:aa:fe:2b:64:23:1c:ae:52:6b:a9:f3:67:
                    6b:06:a0:e9:1f:f0:fa:1a:a4:25:6b:a4:85:cc:ad:
                    4d:35:29:1e:b3:d6:95:07:b6:0f:b5:93:6b:9f:bf:
                    62:ea:bf:f3:f1:d7:8c:81:c2:a5:a3:a0:67:85:2a:
                    1f:59:6b:a1:59:b7:04:25:d1:4e:36:bc:ca:fe:dd:
                    b7:9f:47:10:d5:b4:90:b1:2c:8d:51:65:79:47:ea:
                    42:47:b8:54:3c:a7:5a:03:bf:2d:75:07:1d:18:cf:
                    59:39:c2:95:41:39:99:34:41:e0:92:b8:0e:41:f8:
                    67:53:00:17:81:0f:37:c2:86:d4:ff:b0:1d:22:90:
                    3d:1e:f1:59:02:e3:03:15:e2:41:c4:e9:f6:7e:ea:
                    9f:ac:b5:f5:68:68:11:6f:f4:d5:2e:d6:c8:93:98:
                    f4:5e:a9:72:58:49:25:af:bd:f8:70:c3:52:46:71:
                    83:16:41:1f:9c:b7:91:ba:da:ef:30:8c:70:05:99:
                    2d:94:8c:21:32:34:79:33:27:82:c2:e7:e2:a1:2e:
                    5a:08:28:a8:41:ad:a4:16:8f:a9:f7:9e:fb:3c:85:
                    8d:b9:7f:9a:cd:c3:c2:84:9d:4b:7f:c2:d0:37:01:
                    df:7b:8f:3d:a5:e0:89:24:04:16:77:81:cc:e9:46:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:86:39:42:22:FB:74:C7:6C:5D:8C:C1:F6:17:E9:A2:4E:E5:D2
            X509v3 Authority Key Identifier:
                keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:e8:1c:51:04:d6:fe:3a:53:19:be:06:b1:9b:fb:7b:80:
         09:03:87:4c:f9:62:bd:38:06:48:6a:f0:77:2f:03:a0:38:9a:
         90:20:63:fb:47:db:5e:29:81:75:71:30:e9:35:99:ce:91:b3:
         c6:66:33:60:35:a5:5a:56:79:b7:9e:e2:21:e0:27:27:49:85:
         0e:ca:7b:33:3d:ca:21:c1:b9:7c:fb:61:f6:de:85:07:e6:75:
         6a:21:6e:9c:28:8b:ce:c4:86:a2:91:4a:71:60:5a:47:e0:05:
         5d:45:e4:c8:2d:6a:45:d7:67:50:b4:be:15:cf:89:34:a3:e9:
         ee:62:d6:9c:29:66:3c:8c:92:76:e1:6a:ce:e9:a6:80:2a:a6:
         25:26:d9:04:03:67:54:8a:85:ff:9f:1b:5e:6e:32:72:6a:ae:
         ec:59:c1:bd:15:a3:e7:e3:2c:89:30:4b:47:d3:bd:95:a6:91:
         e2:83:04:12:f8:f9:d3:05:f5:5c:77:93:d9:b0:46:ac:1f:a2:
         09:69:88:f2:a0:74:0c:9f:4a:ff:e6:99:b3:74:6f:b4:32:83:
         12:b3:ba:da:57:08:3e:ce:44:a5:1c:32:cb:fc:4f:14:2c:7d:
         83:ba:a3:fc:1a:b8:11:14:02:ec:0d:56:99:2c:fd:26:cd:97:
         ea:85:c2:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN6jjmArihMFoFAyebpEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1
OTEyN2IwHhcNMjQwNTE4MDEwMTE3WhcNMjQwNTE5MDEwMTE3WjAzMTEwLwYDVQQD
EygxNmMxODYzOTQyMjJmYjc0Yzc2YzVkOGNjMWY2MTdlOWEyNGVlNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdWq/itkIxyuUmup82drBqDpH/D6
GqQla6SFzK1NNSkes9aVB7YPtZNrn79i6r/z8deMgcKlo6BnhSofWWuhWbcEJdFO
NrzK/t23n0cQ1bSQsSyNUWV5R+pCR7hUPKdaA78tdQcdGM9ZOcKVQTmZNEHgkrgO
QfhnUwAXgQ83wobU/7AdIpA9HvFZAuMDFeJBxOn2fuqfrLX1aGgRb/TVLtbIk5j0
XqlyWEklr734cMNSRnGDFkEfnLeRutrvMIxwBZktlIwhMjR5MyeCwufioS5aCCio
Qa2kFo+p9577PIWNuX+azcPChJ1Lf8LQNwHfe489peCJJAQWd4HM6UY8dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbBhjlCIvt0x2xdjMH2F+miTuXSMB8GA1UdIwQY
MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt
YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz
LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASazoHFEE
1v46Uxm+BrGb+3uACQOHTPlivTgGSGrwdy8DoDiakCBj+0fbXimBdXEw6TWZzpGz
xmYzYDWlWlZ5t57iIeAnJ0mFDsp7Mz3KIcG5fPth9t6FB+Z1aiFunCiLzsSGopFK
cWBaR+AFXUXkyC1qRddnULS+Fc+JNKPp7mLWnClmPIySduFqzummgCqmJSbZBANn
VIqF/58bXm4ycmqu7FnBvRWj5+MsiTBLR9O9laaR4oMEEvj50wX1XHeT2bBGrB+i
CWmI8qB0DJ9K/+aZs3RvtDKDErO62lcIPs5EpRwyy/xPFCx9g7qj/Bq4ERQC7A1W
mSz9Js2X6oXCpQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:52:41 2024 by rpki-client on console-fra.rpki-client.org