Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File:                     OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier:          mMJYbRLAeAgBbJ+PdmZAUyWhZZmpx1T7UZZsywZXVj4=
Subject key identifier:   C2:E0:79:9B:E2:71:FE:2D:0F:F3:6D:7E:6C:FB:1D:F2:51:57:E7:42
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer:       /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial:       01901E8F7C4AADDDBC11A4B4AD3AE288E357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number:          0D43
Signing time:             Sun 16 Jun 2024 01:00:37 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:37 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:37 +0000
Files and hashes:         1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: 884rs0Z3hHkuPc5VWqNvAiB0fAk7XtbG4aPrq59Oh5E=)
                          2: yuLOVDiTHMRGfWiry2L0Zvy2QGg.roa (hash: skgXqwQJNVvc3+iCn+ooBtQNX1sN/WoDd3vKmGAvabI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:7c:4a:ad:dd:bc:11:a4:b4:ad:3a:e2:88:e3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
        Validity
            Not Before: Jun 16 01:00:37 2024 GMT
            Not After : Jun 17 01:00:37 2024 GMT
        Subject: CN=c2e0799be271fe2d0ff36d7e6cfb1df25157e742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:d6:76:1a:99:b4:a7:44:4a:7b:7a:74:bd:
                    7f:3b:a0:ce:1e:88:09:ea:4c:2f:3b:30:a2:fe:be:
                    0d:29:f2:42:99:5b:5b:26:00:1b:b3:78:00:87:c9:
                    ce:55:15:cf:c5:b5:cc:e7:1c:80:b0:7e:a1:fb:3c:
                    f2:23:6f:88:06:de:3b:0f:d4:ef:ba:9f:5d:c9:c8:
                    12:8e:c7:94:78:27:2f:d3:f4:a0:40:16:d4:db:f9:
                    34:6c:c4:77:16:43:a8:8c:3a:86:ad:6f:1b:ba:b4:
                    65:56:d9:0d:31:87:ab:75:15:0c:3b:85:b2:21:b4:
                    5b:5b:8f:f4:71:e0:f2:a8:39:57:b7:6b:46:83:89:
                    e7:a0:63:aa:32:c0:2a:de:2a:d5:00:98:51:df:86:
                    d2:ff:f6:5f:dc:88:67:8d:34:eb:bc:42:55:a5:99:
                    e1:7c:56:f2:18:8a:49:19:83:16:d8:f6:2f:7d:06:
                    ac:8c:98:72:fa:1f:09:7e:d2:95:24:79:40:89:7d:
                    b8:5f:01:a0:0d:12:28:c3:8d:37:75:c5:c3:a6:79:
                    c1:04:0d:ce:66:6d:64:46:bd:fb:61:4b:0c:59:0f:
                    e2:f2:39:a3:c8:a8:05:70:7f:e6:70:9f:be:ec:63:
                    74:4e:1e:cc:0a:ef:51:90:39:dc:05:48:0c:c2:2f:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E0:79:9B:E2:71:FE:2D:0F:F3:6D:7E:6C:FB:1D:F2:51:57:E7:42
            X509v3 Authority Key Identifier:
                keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:91:2b:06:06:08:27:70:af:75:d9:4e:7f:8d:6c:e7:ed:60:
         e8:a6:9f:d1:b9:67:47:72:57:57:8b:81:fd:7f:9d:02:2f:9a:
         87:25:b1:e1:55:f0:4c:e2:af:01:f0:6a:7f:0f:05:12:e3:7b:
         a5:b5:7b:ad:5b:22:2d:49:71:ba:70:8f:06:d2:f6:17:23:53:
         53:53:02:4d:9f:97:df:81:e6:bc:c7:79:d5:8a:00:7f:95:84:
         f1:71:d0:d2:c5:78:58:54:4f:d0:47:43:70:a9:b4:3b:61:be:
         f1:07:9e:4a:c1:00:f7:ca:0b:09:12:14:1d:c8:63:11:02:5f:
         0d:bf:11:0b:b5:7e:77:e9:29:f1:b2:b8:5c:82:62:c7:5f:29:
         a5:6e:a5:70:d0:66:c9:2f:ff:22:e8:77:ec:99:93:c1:fd:10:
         2a:f7:1e:e6:18:a3:f1:c3:7f:a5:12:45:8d:35:65:97:d4:20:
         f2:46:bf:d0:2d:ca:2b:91:8f:79:d2:4a:ef:e1:9a:9d:12:67:
         01:39:19:1b:8d:27:4d:20:76:59:54:5b:8b:f7:5f:67:2b:b1:
         6e:4b:e2:d6:04:b8:67:8b:5d:ce:1a:34:99:b5:1e:71:1f:b1:
         6f:29:b9:0d:9f:e0:57:31:51:60:17:c5:eb:48:1f:63:06:d1:
         82:b4:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:00 2024 by rpki-client on console-fra.rpki-client.org