Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
File:                     oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft (raw, json)
Hash identifier:          fbzdo6+dkBN3ckP8P5mu6dGkH7ZuVUQIRnIshHFjqrk=
Subject key identifier:   FF:FD:49:50:24:FF:5F:BB:61:E2:12:E7:06:1E:2E:00:0A:41:D6:62
Authority key identifier: A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F
Certificate issuer:       /CN=a09fda047b3a0b1c820435e699388660da32c63f
Certificate serial:       01901C33578A9B83FE50BA49C23766CF0764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
Manifest number:          011F
Signing time:             Sat 15 Jun 2024 14:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:45 +0000
Files and hashes:         1: 07Xr_BOlJOk9Jd9oI04ohkKa2-k.roa (hash: A1FwipOeVahs60pF4b/Ffn+5YuvjPZ07+DRvGvQqSqM=)
                          2: oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl (hash: QU/APhRdXo/NrQagQmB0Jj85Gi2hkqA6PqJkvbBYB38=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:57:8a:9b:83:fe:50:ba:49:c2:37:66:cf:07:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09fda047b3a0b1c820435e699388660da32c63f
        Validity
            Not Before: Jun 15 14:00:45 2024 GMT
            Not After : Jun 16 14:00:45 2024 GMT
        Subject: CN=fffd495024ff5fbb61e212e7061e2e000a41d662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:f9:1d:cf:26:15:5f:00:02:6b:97:21:9d:
                    23:6f:7b:0a:ef:70:ca:4a:e0:c2:8b:4e:fc:18:18:
                    f9:4e:2c:14:ff:54:aa:8b:8b:42:d5:b7:aa:64:b5:
                    4f:4d:23:20:61:a7:1c:55:a0:42:d7:fd:ae:2a:c9:
                    85:5d:f1:51:95:47:49:aa:37:93:8e:f5:0f:14:41:
                    1c:c3:23:92:59:92:6c:46:bf:4a:41:09:11:d2:40:
                    b8:87:88:9c:5d:e8:24:09:8b:d4:15:e6:e3:03:fa:
                    e2:0c:42:9f:ff:cd:e6:9d:3a:4c:ff:bf:37:6f:da:
                    53:13:1f:fc:91:90:52:af:db:0f:d2:ff:c9:e9:f1:
                    54:a1:72:e6:da:89:9c:d9:25:94:26:c4:2b:f7:54:
                    06:b8:b6:07:7a:6a:a9:09:a8:f5:e8:c3:d6:f6:69:
                    ec:b5:4d:76:ee:01:3d:c8:75:61:a0:46:17:3d:7d:
                    fb:c7:11:07:90:e8:6e:ad:ac:dc:dd:ce:4e:34:d5:
                    cf:31:da:19:e8:75:8e:15:cc:fd:49:20:6e:2b:6b:
                    c8:9b:e3:f5:41:0d:c0:72:f2:38:c0:cb:b9:eb:c6:
                    30:88:e4:b4:9e:ba:21:5a:f2:97:f4:59:fa:90:2d:
                    97:86:51:49:71:4e:95:ce:dc:f1:4c:63:55:38:f8:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:49:50:24:FF:5F:BB:61:E2:12:E7:06:1E:2E:00:0A:41:D6:62
            X509v3 Authority Key Identifier:
                keyid:A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:36:68:fc:24:c2:71:8d:a8:73:c3:7c:63:a2:25:11:9d:a8:
         f4:c6:49:3d:54:c4:4b:3e:73:47:3e:f6:02:df:0d:cb:e5:ea:
         92:2f:10:1a:cb:76:89:37:81:58:01:2f:3c:f2:35:97:34:88:
         c4:d0:01:2a:f5:16:0d:e6:15:3a:f6:09:5b:3a:3f:c6:2f:54:
         2d:5b:74:34:00:66:75:5a:ec:85:22:11:5d:a6:6c:42:7f:b3:
         f8:5d:11:2d:a7:32:e2:a7:8b:8d:30:8d:61:84:83:39:21:ca:
         d0:c3:1d:43:aa:3c:4f:1b:b1:3e:d0:41:32:3a:4b:41:17:63:
         e3:4d:f9:fd:62:05:95:df:2e:e8:2d:24:6e:a8:e8:03:a0:c0:
         c1:d8:b9:9e:87:d4:75:9d:19:ea:fd:9d:4c:b9:90:85:dd:26:
         06:bc:fa:64:8e:f0:98:c4:0e:7c:39:a8:83:85:04:41:2f:44:
         28:ab:63:b5:69:96:47:23:55:5c:73:82:d0:5e:38:56:19:3c:
         ed:08:26:17:ea:83:fc:12:e7:57:6d:3f:49:69:e1:80:59:3c:
         3e:ad:28:50:ad:c2:c0:07:51:51:5f:3c:d8:66:7c:af:24:5e:
         c6:7b:cf:8a:c8:ab:7c:2a:a0:82:2e:8b:a5:06:e7:81:07:de:
         cf:6c:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:34:44 2024 by rpki-client on console-fra.rpki-client.org