Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File:                     OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier:          Vho6/r7E468SMu4oVkBvxfmVOdyrTsF+omcVW+xz60Y=
Subject key identifier:   78:60:59:6F:48:68:C2:0B:BD:87:9E:D2:C7:EB:F2:C1:9D:A3:D6:0E
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer:       /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial:       019040AE6F4D19E47CA0AECCA4164F8AFF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number:          0814
Signing time:             Sat 22 Jun 2024 16:01:31 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:31 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:31 +0000
Files and hashes:         1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: QiB3PnCeb+ccnA7fCNNT86JUGKjPlpdJdI/5mETa84Q=)
                          2: a8IWvVYt-IEw8XM3uGUPqLc6lOw.roa (hash: oTLQXrG8NguD/30n4W0d83yIxDPyoVV6uQkolLmE9as=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:6f:4d:19:e4:7c:a0:ae:cc:a4:16:4f:8a:ff:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
        Validity
            Not Before: Jun 22 16:01:31 2024 GMT
            Not After : Jun 23 16:01:31 2024 GMT
        Subject: CN=7860596f4868c20bbd879ed2c7ebf2c19da3d60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:74:9f:fb:4f:71:e6:f2:99:84:49:10:be:
                    dd:88:2a:b1:38:61:82:93:ec:e5:b5:5b:f3:29:d8:
                    f2:45:1f:e9:4b:93:87:e5:7c:c3:a2:bc:ab:25:9c:
                    6a:13:f5:b2:e4:2f:3a:71:c2:be:23:f3:15:da:4f:
                    04:92:ee:25:c2:5f:cc:1d:df:4e:44:9c:cb:e3:88:
                    e6:2a:9a:22:49:80:b0:bc:9a:ce:53:f9:e7:72:cc:
                    3a:ef:f7:51:d3:b1:ee:7a:3e:86:d5:a9:ac:7e:8b:
                    86:32:0f:d9:9a:3d:b7:af:c9:c7:54:4e:dc:44:eb:
                    5c:55:d6:44:44:12:ba:23:00:08:8b:54:76:b9:60:
                    37:27:1f:a7:3f:d1:61:b5:25:47:03:3b:26:6e:ea:
                    5c:53:32:82:1a:d2:22:d6:49:6a:88:83:78:6a:b6:
                    b8:88:7a:95:a9:a5:bf:8f:89:c0:94:4b:67:d7:e6:
                    41:07:82:9b:ad:b9:8a:79:4b:66:bf:85:ca:82:e6:
                    b5:c6:96:b8:84:59:71:95:5b:3c:06:9d:a2:b5:e5:
                    ec:ee:70:d2:05:67:c1:3e:25:a2:98:b1:4d:85:6c:
                    fa:db:7d:6a:d8:c5:a8:e4:44:ae:af:c4:8e:2b:69:
                    df:8c:04:f1:c5:fa:cc:8a:c0:11:a7:73:3e:b5:8b:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:59:6F:48:68:C2:0B:BD:87:9E:D2:C7:EB:F2:C1:9D:A3:D6:0E
            X509v3 Authority Key Identifier:
                keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:35:82:ea:23:da:36:d4:8c:a7:40:65:3d:18:7a:f1:00:88:
         23:66:db:3f:9f:5b:4b:da:e3:39:e2:db:41:65:7c:d1:e8:b6:
         53:b3:90:e5:ff:ba:7d:00:58:72:1c:52:b4:ca:df:a7:d8:f3:
         90:20:2f:ae:41:e6:5b:9e:c2:50:21:d4:b8:1b:7c:46:2f:a5:
         d6:0a:20:5f:aa:ea:b5:3d:c1:b9:67:a7:06:04:69:1e:45:78:
         14:6b:e3:5d:f0:c6:63:3c:9b:8b:ec:3f:c6:2f:29:30:8d:b1:
         31:c9:1f:72:e6:2d:bc:b3:a3:d7:bc:c4:07:7e:0d:3f:92:7d:
         1a:e2:34:68:03:ac:8d:de:ad:a6:3a:74:05:ec:cc:27:88:9d:
         c8:bd:16:d8:40:e9:92:36:b9:80:b9:5a:74:17:4e:fb:02:a8:
         70:13:40:08:95:3a:99:b7:78:6b:06:b9:98:33:5b:08:39:cc:
         39:90:d4:b1:87:ff:01:f9:da:15:c4:38:ab:a2:5a:34:8c:86:
         c2:77:c1:28:14:e6:88:fc:c6:44:b0:5f:73:f5:5f:f6:39:5b:
         2e:46:88:6a:29:a5:95:e4:84:be:f3:85:79:16:da:eb:64:c0:
         d1:42:4c:53:a4:c5:80:03:1e:5d:6b:9a:00:78:a4:fe:4a:36:
         bc:b3:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:05:11 2024 by rpki-client on console-ams.rpki-client.org