Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File:                     o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier:          xAOHo8t4okihKVfbK1+2lnfRi96GZXnkz86FuyaRd5s=
Subject key identifier:   01:12:B9:1B:BE:D5:3F:61:D1:3F:E6:01:7B:A0:BF:F7:0D:29:EB:BA
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer:       /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial:       01901DEC26DEE86BE0B830231CB88230D87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number:          07E5
Signing time:             Sat 15 Jun 2024 22:02:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:13 +0000
Files and hashes:         1: 3U8VXDdEd137KQANTBo1_xG99c0.roa (hash: HaUMsyvvTOIpT/pC78Y0BvEzNosgpHm4AwEVghsL8do=)
                          2: 6lpemoQeCgWCN5S1uLn9IdT8BtM.roa (hash: jTVTd4h+TpKoxxRvNxcV2pUMHDbKVQgyHPop3LKCOPk=)
                          3: LA2Kmva-LY3D6ibWlhaPya3flHI.roa (hash: SSazPXd2IzieJT/SCiym+GCiAhWwovYmDmVQBm1kq14=)
                          4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: Ey4mqT3zsZyaqzO6w/q29Qvcnt5IQtqGNiFzQ88ad28=)
                          5: oxq5JE_JlwXkk33QRqycKv0gDGg.roa (hash: 8gp2rSbveUHysQuRqkPFVKkldEkwNTt+48EpRjbH/6w=)
                          6: zOiUb6C0vIjlye0tzdb9SD5C5GA.roa (hash: P0/8K4gax3yz8F+2pW5WFEEmKS3G0Hok+z7e9n1LRJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:26:de:e8:6b:e0:b8:30:23:1c:b8:82:30:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
        Validity
            Not Before: Jun 15 22:02:13 2024 GMT
            Not After : Jun 16 22:02:13 2024 GMT
        Subject: CN=0112b91bbed53f61d13fe6017ba0bff70d29ebba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:7e:fd:52:bb:df:88:1f:35:81:5c:7f:66:
                    b3:d2:0c:f0:92:3b:a2:49:fe:b2:58:f5:cb:c6:b5:
                    5c:03:a9:8b:8e:66:5a:df:5c:d1:5e:57:9c:f0:ff:
                    67:9a:42:38:e2:13:3f:32:80:f6:0f:11:64:53:4b:
                    69:83:85:28:ed:95:e8:95:ad:56:fc:47:4d:b8:fa:
                    de:0b:6e:3c:84:72:28:ee:c4:11:5f:d0:03:95:15:
                    26:69:96:14:7a:4e:18:26:d4:3c:ce:dd:e4:bb:a1:
                    bd:ff:e4:3a:de:31:ae:e4:3d:f5:fd:46:cc:38:f2:
                    6c:3d:0e:e9:2d:5d:cc:f3:11:23:1a:26:4a:18:c0:
                    ee:72:bd:17:57:af:59:ab:8d:33:df:63:d7:2e:d0:
                    c4:26:2e:6d:4d:53:27:c3:76:29:d2:bd:b3:b8:b8:
                    50:8c:bb:34:97:aa:7d:be:38:bb:8b:67:20:95:5b:
                    12:95:88:8b:dc:0e:3c:60:7e:67:93:5f:d6:f0:97:
                    e0:f8:46:f2:e9:0a:cd:07:08:23:e4:75:16:f7:3c:
                    64:95:6c:5b:e8:23:5f:ed:e4:37:bc:e9:18:49:72:
                    26:82:c6:3d:f9:0f:1b:fe:90:1e:37:2e:f4:ba:5e:
                    15:fe:f3:d0:74:d2:dc:7b:8a:19:d7:a4:44:3e:85:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:12:B9:1B:BE:D5:3F:61:D1:3F:E6:01:7B:A0:BF:F7:0D:29:EB:BA
            X509v3 Authority Key Identifier:
                keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:f4:79:c9:94:c5:da:b4:3e:2a:30:3a:e7:a1:2e:7f:f0:
         23:92:f8:f7:d1:f5:59:b8:3e:78:f4:44:3d:80:2d:ba:cb:2f:
         e0:64:bf:f4:c7:41:36:2e:9a:c0:5e:e6:d7:68:95:19:f6:ea:
         5b:92:61:4d:2b:c0:fd:0c:18:61:8d:95:d3:e5:b1:4c:fe:13:
         cc:9a:c0:56:25:35:6c:5e:7a:7b:a0:ef:e6:81:42:25:85:17:
         c4:bc:a1:92:40:fd:22:67:e6:d9:a3:83:88:91:02:42:0a:69:
         63:7b:22:1e:1f:43:db:3d:7f:c8:dd:48:ae:78:9d:de:48:ae:
         22:a7:2f:75:d6:32:98:80:14:b5:ef:27:80:c3:d6:00:fe:ec:
         93:95:19:75:1b:e3:d3:34:d1:21:e0:ae:5c:0a:e6:eb:97:82:
         ce:f8:bb:89:bd:70:e2:f9:2e:69:d0:eb:a6:3f:33:92:22:49:
         40:46:23:7a:c5:06:d6:31:bf:7f:7d:25:fa:13:af:99:d0:e0:
         3e:95:14:e3:53:58:45:45:ec:dd:99:be:23:2e:2d:a0:1c:40:
         71:b8:07:03:9a:d6:b0:3f:1a:f4:99:0c:56:90:7e:22:21:4b:
         a0:15:56:85:a5:b6:65:c3:fd:cf:84:de:4c:48:9e:6c:ff:0b:
         1b:fb:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:44 2024 by rpki-client on console-fra.rpki-client.org