Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File:                     oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier:          YhhwL08v5dQqFwEDrWaj0lTFcyWMQBgK7ET2QaLC3gE=
Subject key identifier:   8C:2A:F5:FD:15:6B:E6:BE:BB:FB:DC:43:A5:8C:3E:96:FF:0E:72:FD
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer:       /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial:       01901E5918643E9EA0B9B859FDFA0AC8379B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 00:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:13 +0000
Files and hashes:         1: kR-nv9JDLfXpgQ5mR4sFy0bQ3Ik.roa (hash: yl8T+TGg9W30YHXyl6tqgwCXgAxJvo8y5gym3G7SO8o=)
                          2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: tbVQlflNNOap2wR6xsywwN9YzxNQX9I5zj9LONgKRxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:18:64:3e:9e:a0:b9:b8:59:fd:fa:0a:c8:37:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
        Validity
            Not Before: Jun 16 00:01:13 2024 GMT
            Not After : Jun 17 00:01:13 2024 GMT
        Subject: CN=8c2af5fd156be6bebbfbdc43a58c3e96ff0e72fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:fa:91:01:c6:b9:22:ce:90:63:b5:0b:fb:
                    3b:b9:5b:93:95:dc:d3:f7:67:a6:53:37:a5:c0:c1:
                    d5:46:60:18:da:0c:c3:ff:12:3f:0e:0c:07:b2:41:
                    e3:3b:c4:e9:01:43:5a:bc:53:99:51:63:f0:7d:e5:
                    5f:37:7e:7d:3f:be:e8:35:ef:13:4f:21:fa:ba:61:
                    b7:b2:4b:da:ff:5e:cb:90:2b:53:16:7d:8a:44:09:
                    d3:4c:74:5c:be:81:da:94:cf:76:87:d1:84:14:8f:
                    84:8d:ef:45:61:e9:5c:9b:37:b9:d6:34:a5:84:9e:
                    47:19:0d:9f:e1:15:71:15:b2:e9:31:10:73:a6:11:
                    ae:b5:f4:b6:54:6c:ef:15:6b:66:3a:ff:ad:c3:c9:
                    17:d4:78:96:bb:12:23:25:9d:61:f8:2b:f2:03:fc:
                    ff:3f:12:54:b9:1a:9e:55:16:e6:7a:d1:97:53:d8:
                    6b:67:7f:22:24:fa:a9:1d:91:93:38:62:74:f0:ba:
                    5e:70:ff:3d:b1:93:a8:45:58:72:9b:6a:8b:60:4e:
                    ff:9a:25:9f:bb:8d:a1:7c:e1:d1:16:bf:0b:27:a1:
                    2a:1c:7f:d8:e2:4c:eb:6e:d9:ea:8d:1a:7b:a7:91:
                    32:65:87:4d:5a:8e:4a:14:b0:6b:64:7c:62:cc:71:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:F5:FD:15:6B:E6:BE:BB:FB:DC:43:A5:8C:3E:96:FF:0E:72:FD
            X509v3 Authority Key Identifier:
                keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fa:88:37:db:58:95:88:b8:e6:be:23:5c:b8:31:89:c4:e8:
         e0:c9:38:bb:57:be:a8:0d:be:5a:5a:03:76:6f:73:00:8a:cd:
         70:00:56:d7:0a:65:78:d8:20:fc:04:f4:3e:be:aa:9a:92:a2:
         dd:d4:62:a3:89:36:43:6b:f5:d5:c7:03:ee:61:b7:a6:f1:0f:
         34:bf:3e:bd:0b:88:f6:84:e6:33:97:c9:0a:ad:b2:26:20:85:
         b0:6e:de:86:0c:47:b5:00:90:e4:72:9f:64:2c:46:cc:ae:ba:
         b2:9b:38:2f:9a:fc:bc:4e:b7:eb:3f:53:56:cf:c2:f5:4d:20:
         c0:21:e5:d8:21:b2:4f:5b:42:62:1f:45:19:5c:d5:e8:bc:eb:
         ac:52:5a:f5:d7:cb:58:f7:8c:43:c9:40:32:51:13:fd:fe:07:
         ba:f9:f8:fd:b7:cb:9d:64:b8:c7:b1:56:83:e0:2f:45:17:1d:
         f1:65:9a:a4:68:59:46:74:e7:5e:16:c0:d8:88:5d:3c:86:e9:
         f4:14:3c:53:d1:56:ce:34:12:45:62:9d:3d:8e:93:de:2a:61:
         3e:c4:a0:cd:7a:17:ab:86:86:d0:dc:6d:c6:d9:38:53:11:b8:
         e3:14:9f:ad:5c:da:5e:29:a4:f4:6d:fd:11:7a:81:b3:ea:2f:
         6b:a4:bb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:48 2024 by rpki-client on console-ams.rpki-client.org