Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File:                     OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier:          Tz/76vO52LxcAQaVzjONmoeNfev7Eosln94wDVvL2Pc=
Subject key identifier:   54:07:68:AB:88:40:E1:E0:BB:60:03:C9:D2:BF:E1:C6:8B:1F:65:E2
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer:       /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial:       0190448D05B3CFA2E51385D2A8231DC24B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number:          02F5
Signing time:             Sun 23 Jun 2024 10:03:30 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:30 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:30 +0000
Files and hashes:         1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: kS3+phlPKbxZogmSl4TtGh4i2PutFPdaudMQRir0iI8=)
                          2: RFcH-GTmJRB4gBjJmqhvR8UMXD8.roa (hash: H/jvYGwwwVGN3J3kDd3gVWlb3TqKBhFo+Fc9l03Lp0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8d:05:b3:cf:a2:e5:13:85:d2:a8:23:1d:c2:4b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
        Validity
            Not Before: Jun 23 10:03:30 2024 GMT
            Not After : Jun 24 10:03:30 2024 GMT
        Subject: CN=540768ab8840e1e0bb6003c9d2bfe1c68b1f65e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:09:5a:6c:ba:9f:8e:b6:64:66:c7:16:5c:
                    a6:b7:09:d3:2e:5b:27:6e:eb:43:cf:6f:43:29:47:
                    28:3a:18:66:c3:b6:1f:c2:09:05:46:98:d2:df:8d:
                    2f:27:a3:73:c5:a3:94:29:64:9c:bb:69:f9:1d:36:
                    53:a8:ce:a0:56:ac:ce:7f:8a:9a:7f:b2:5d:c0:84:
                    50:b4:cc:c4:2d:7d:76:a6:ee:67:d5:1b:7d:91:91:
                    e2:2e:23:db:17:61:ac:36:86:4e:58:a7:f4:93:e5:
                    6e:1f:e1:71:85:ce:e4:be:37:ee:5c:b8:ea:9c:c3:
                    34:30:98:4b:e5:b4:c6:d6:7e:c5:b8:3e:91:68:29:
                    85:75:99:f4:de:c6:55:c5:4f:86:55:b6:be:9b:01:
                    de:61:0d:5e:fa:ee:01:bd:ae:10:68:74:b5:0f:89:
                    9f:a2:69:01:66:dc:4d:89:d7:a5:71:84:31:00:77:
                    29:fa:b0:09:fb:9f:24:24:74:25:21:83:a3:e7:11:
                    64:10:83:29:fd:7c:ff:f0:bd:e0:06:2b:f6:1a:eb:
                    53:4a:7b:a1:2c:b2:7c:5f:cb:1a:d2:1d:95:54:db:
                    d9:12:50:53:4e:f4:a7:8b:58:68:be:a6:0c:15:01:
                    bc:5b:bc:bc:f5:fa:fe:33:13:9a:0d:52:dd:f6:19:
                    72:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:07:68:AB:88:40:E1:E0:BB:60:03:C9:D2:BF:E1:C6:8B:1F:65:E2
            X509v3 Authority Key Identifier:
                keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:22:05:7e:ae:5d:95:d4:d4:c1:de:c1:c1:e3:8c:8e:99:9e:
         ec:6c:c5:59:44:63:59:79:20:08:2b:b5:17:5e:f2:e3:51:9c:
         2e:4c:b2:e7:d8:63:2e:9e:bc:fa:dc:ac:45:fc:45:45:ae:46:
         24:7e:04:55:30:48:0b:6a:51:d8:c1:ad:5a:01:bc:b6:43:94:
         d1:5e:40:55:2e:eb:a1:91:59:07:93:1f:1b:5a:d6:66:e4:57:
         8a:45:ba:ee:dd:03:03:c3:53:56:4e:dd:6b:73:88:b4:88:e5:
         a6:05:ba:36:d4:c2:39:5b:d3:d4:7e:7d:f0:db:91:3a:b8:60:
         c0:57:2e:bb:34:ad:00:6c:1e:68:91:9d:1a:61:53:d7:56:14:
         f3:62:35:67:18:7b:22:7b:76:1d:63:75:e9:60:b5:ed:48:5c:
         fb:75:39:fd:69:46:9b:96:a7:ca:c8:0d:42:87:86:35:fe:85:
         75:28:e2:24:98:68:f2:1c:63:f5:79:fc:6e:c9:11:ff:53:0f:
         5d:31:ad:26:14:51:16:d4:70:26:be:02:da:58:2d:48:b7:8e:
         e3:41:7b:cd:5a:d1:14:e4:f5:29:2a:3a:f0:f7:02:a5:c4:d6:
         0f:b6:4f:a5:e3:06:59:a7:f7:85:02:fc:5f:a2:36:ad:55:79:
         8c:21:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:38:26 2024 by rpki-client on console-ams.rpki-client.org