Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File:                     O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier:          u4en4PdkMcmmecHjvs1Er7HzKK5X2dG/Wlj365ThzTg=
Subject key identifier:   C7:C7:9E:4A:53:1B:C0:B0:B0:F7:E4:C5:FE:62:40:BA:2C:CA:44:17
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer:       /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial:       01901DEAB8B2E1170418803671BB37A667A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number:          04D9
Signing time:             Sat 15 Jun 2024 22:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:40 +0000
Files and hashes:         1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: hskkGNSY+duz9W9e7SOiun6Rdwo9bqfXm+Pfl9xdWJg=)
                          2: hi_IrmTQFxOV1zM1MOB99U_EijA.roa (hash: PR9qToW+vsddrF4iEx2riOs5GTs75XwFFFuBz9w0aUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:b8:b2:e1:17:04:18:80:36:71:bb:37:a6:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
        Validity
            Not Before: Jun 15 22:00:40 2024 GMT
            Not After : Jun 16 22:00:40 2024 GMT
        Subject: CN=c7c79e4a531bc0b0b0f7e4c5fe6240ba2cca4417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:57:d2:c0:5c:a3:72:71:0c:3a:f8:99:90:
                    41:8f:a7:85:36:19:fa:67:70:91:7f:c4:87:da:17:
                    fb:15:04:b8:fe:ab:db:32:60:76:d9:90:c7:2b:52:
                    3a:c0:b1:62:e4:94:1d:ef:0f:7a:8f:3c:5c:74:45:
                    d0:40:d6:78:eb:e5:1d:93:9c:84:5a:06:29:3e:ad:
                    f0:61:25:6b:3c:ef:39:44:23:b1:bf:b8:92:d6:05:
                    4b:65:77:a3:ce:52:c8:e5:38:46:13:e4:78:a1:b9:
                    4c:ae:fe:3d:e6:9e:21:27:6c:53:37:7e:16:97:a7:
                    cf:6a:ba:39:26:b5:f2:0c:0f:e1:00:e9:62:68:93:
                    9d:07:bd:5d:50:12:fc:75:e8:5e:7d:c6:6b:8f:da:
                    dc:67:e7:fd:ac:59:15:bb:0f:42:39:01:9b:be:47:
                    94:67:c1:56:08:5c:9e:8a:d3:40:4d:76:cc:a9:b3:
                    68:2d:4a:0d:a0:c3:23:f6:8d:23:f1:39:fa:68:16:
                    39:2e:56:f1:eb:b7:c4:81:c9:de:b7:b7:70:52:8c:
                    e7:f5:95:70:c4:1f:e6:c5:e7:60:4b:a9:20:84:5f:
                    5a:a9:e2:81:c2:cf:54:ff:f9:01:04:4a:04:f4:c4:
                    46:3a:6a:5f:f6:2f:cd:9e:cd:55:28:74:63:44:ef:
                    8b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C7:9E:4A:53:1B:C0:B0:B0:F7:E4:C5:FE:62:40:BA:2C:CA:44:17
            X509v3 Authority Key Identifier:
                keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:5f:64:63:d6:a1:f6:cb:23:fd:08:3a:98:ec:e8:be:7a:
         91:e2:c9:1b:80:fd:49:d9:eb:a8:09:75:6a:ac:9a:e6:4b:d3:
         f4:69:af:68:66:04:23:45:ae:e3:c7:8a:b3:38:c8:61:d6:8c:
         de:d5:a7:6f:cb:13:fb:bc:c3:82:f2:d3:78:51:5c:08:0d:3f:
         56:66:fe:ef:2d:ca:ad:5b:70:c5:22:12:7d:ff:a8:6a:19:7c:
         ba:7a:ce:e1:42:fd:72:7c:36:79:55:cf:5e:22:c3:34:73:63:
         94:4d:22:b1:62:b9:de:93:98:d5:8a:e7:4b:0e:e0:d1:8e:7e:
         17:6a:8a:80:d6:f2:93:70:b7:5f:ae:92:81:25:6f:11:fa:96:
         41:5e:6f:54:28:14:22:62:2f:d8:ae:56:9a:20:cd:6e:e6:cf:
         a9:62:fc:3c:d5:d6:6a:fa:13:4b:d2:9b:f4:6e:ce:71:90:f1:
         a7:d6:90:86:24:8c:0d:d4:68:3d:b7:12:52:b4:8b:45:f7:40:
         0a:20:d3:81:f3:7d:c0:b4:28:2d:d4:14:63:43:05:ce:ac:47:
         1f:12:da:92:fd:09:ba:91:4d:ce:9b:68:3f:d6:af:a6:42:09:
         00:6a:9d:70:12:b0:34:ff:a5:46:d8:71:d6:20:c1:3f:87:a5:
         64:80:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:37:39 2024 by rpki-client on console-ams.rpki-client.org