Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File:                     oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier:          vi+JpCg4nBdNcqPbSMAg4yD5VxoukgW1ZHQZpuG3zmA=
Subject key identifier:   F7:E6:D2:1F:8B:15:6E:E8:C6:B6:D1:C7:6B:8D:B6:A5:63:35:B2:B5
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer:       /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial:       01901D0EE8C1A85F97E0223926E9EB13A2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 18:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:34 +0000
Files and hashes:         1: SZTXUoyd1SjaEwUQFCtPsAiW11c.roa (hash: bgZ+d545U7Jj8A7BOeoIsTmI30I6z5oSN3fAy0/a9AU=)
                          2: dKg7SW3Ovw50kL-CCmThbu1NREI.roa (hash: 9/eAsu7WEp3UZuljfchCI2iyg09WTWzMx9tgD6AzgOA=)
                          3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: eIb9A1s27gT8CptIbp9AtcCzvdC0Soua22VqPRA1h74=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:e8:c1:a8:5f:97:e0:22:39:26:e9:eb:13:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
        Validity
            Not Before: Jun 15 18:00:34 2024 GMT
            Not After : Jun 16 18:00:34 2024 GMT
        Subject: CN=f7e6d21f8b156ee8c6b6d1c76b8db6a56335b2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:14:cb:ea:35:63:68:bf:f5:84:08:0a:33:
                    2b:55:37:c5:ba:63:b5:b4:de:e4:83:0b:be:ae:ec:
                    cc:f6:55:9b:d9:55:1a:2c:90:46:14:99:6c:68:c2:
                    51:f4:2a:54:ec:8b:94:7a:84:f9:bc:be:1d:6e:87:
                    82:24:bd:ee:3b:7b:4f:a9:6c:cc:9c:ed:47:28:e6:
                    bb:13:06:e8:d6:6f:13:8a:ec:b1:16:6d:bc:59:4f:
                    c9:a0:67:66:a5:eb:21:f5:13:c2:7c:4c:6d:79:25:
                    db:09:41:ec:91:8b:fa:d7:56:07:97:cc:19:eb:84:
                    29:d6:64:56:b9:92:6d:a3:76:59:e5:62:8e:e6:97:
                    1d:94:1c:9f:8a:76:e0:75:58:49:2c:40:0c:39:74:
                    e2:4f:84:79:f8:ca:63:46:7b:a9:b9:cc:42:da:b4:
                    9a:26:6f:30:ff:87:f6:97:f0:32:e7:ba:9e:50:0f:
                    4c:41:70:dd:74:b0:8a:02:ee:b2:db:69:03:af:11:
                    1e:08:0a:26:6c:c1:86:1b:c8:15:e9:90:1d:e6:33:
                    8c:99:63:3b:7c:2a:06:ba:65:be:78:96:87:74:9c:
                    20:68:32:e4:f8:29:9f:a1:61:33:33:bc:4d:60:21:
                    50:76:60:cc:66:24:c2:ba:57:2d:b1:52:08:5e:fb:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E6:D2:1F:8B:15:6E:E8:C6:B6:D1:C7:6B:8D:B6:A5:63:35:B2:B5
            X509v3 Authority Key Identifier:
                keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:07:f8:6c:b4:75:7a:19:3e:d4:54:a4:68:32:5b:74:8f:
         d1:8b:25:ef:7e:44:0b:f1:61:48:16:3c:26:18:0f:2b:7f:7b:
         b1:d9:b8:3f:96:f0:d6:28:b6:e8:89:e3:82:66:05:cc:1e:76:
         47:87:26:b3:ca:62:1a:25:10:69:a8:13:c9:07:77:cf:18:44:
         e9:28:31:f2:4b:e0:fe:f9:d1:2d:97:06:5c:ac:ed:13:47:11:
         5d:06:fb:b5:92:4b:81:5d:16:de:b9:71:8a:a5:a7:d8:d7:39:
         de:66:aa:e2:bb:06:30:ab:35:d4:72:f2:cc:6d:58:bb:7e:a5:
         ac:b8:a2:fc:b0:47:c6:14:17:c9:39:2d:ca:e1:c2:8a:e3:96:
         1f:3b:8e:4d:56:3a:c2:79:bc:08:21:ea:23:53:d0:25:c1:2f:
         fa:91:3c:d4:7c:79:05:f4:58:21:8c:71:28:4e:07:e5:24:3e:
         20:d0:d5:62:21:93:f2:99:6f:2b:f8:a8:1b:cd:b4:76:df:39:
         dd:e8:33:44:2e:60:c4:db:67:04:eb:af:57:c2:8b:47:4a:4c:
         0b:8b:1f:29:92:45:df:56:31:76:b0:ee:3a:01:a0:7e:d0:9b:
         c2:8b:76:60:85:40:ab:63:d5:cf:49:b0:a6:3c:1e:4c:19:23:
         2c:0f:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:22:34 2024 by rpki-client on console-ams.rpki-client.org