Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File:                     of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier:          22R33jAa7oAbcRALGGtyk0k2XXFJYtwSyzg45ow72P0=
Subject key identifier:   8A:E7:8F:C4:21:F8:5E:B2:BB:FB:2B:49:43:36:BF:AA:32:0C:EE:F7
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer:       /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial:       01901EC706B2F09F42202D7639142B785F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:18 +0000
Files and hashes:         1: Dvj2m8pJW0FdLm2QTA4nYmu3FeE.roa (hash: TrrltUGypnjCsCQf0dR2BGvuHrHT0qIG9U2qMrgiSHo=)
                          2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: zaQ7H4CSPx1zThwCFbpjuQ8Y7THsJAmrgJxHhqBo8Bk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:06:b2:f0:9f:42:20:2d:76:39:14:2b:78:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
        Validity
            Not Before: Jun 16 02:01:18 2024 GMT
            Not After : Jun 17 02:01:18 2024 GMT
        Subject: CN=8ae78fc421f85eb2bbfb2b494336bfaa320ceef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:3d:a6:3d:5c:b7:67:55:a1:d8:e5:c0:cb:
                    53:b9:5f:22:26:13:d7:80:c3:ba:34:46:e3:da:ab:
                    12:32:73:f2:1f:40:a7:f0:a5:d5:0b:ed:5b:0c:cf:
                    82:fd:5f:b9:e7:6f:e9:69:fd:7e:8d:2b:9f:c9:2b:
                    78:40:96:83:09:ca:36:57:a1:dc:3e:75:fc:81:02:
                    d6:89:09:f0:aa:96:d4:da:0b:e7:0a:76:e6:14:65:
                    60:75:b9:41:68:dc:7c:f3:c2:d8:e7:45:03:59:8d:
                    e3:de:57:bf:bc:3f:51:1d:da:a5:dd:2f:69:0a:42:
                    4d:49:15:41:b7:c5:d4:06:5c:60:67:18:45:08:b7:
                    eb:fa:39:98:8a:5a:a5:ba:6d:8d:2d:5f:fc:fc:99:
                    8d:9e:17:20:22:a6:21:d7:24:29:86:36:bf:40:71:
                    df:6b:34:b9:04:a6:0b:6b:b8:90:78:af:12:e7:10:
                    cb:8e:62:db:fe:74:d5:9d:68:21:5f:a3:21:5d:28:
                    ad:54:29:82:f7:f0:e3:f6:95:1e:4c:c5:0c:71:ea:
                    c5:84:33:2e:53:5e:87:c6:37:2d:f9:fb:74:68:c9:
                    bd:a5:85:03:dc:21:b1:06:57:dd:46:14:d7:b3:f2:
                    fe:5c:74:8d:22:67:da:6c:40:7e:fd:10:e8:b0:28:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E7:8F:C4:21:F8:5E:B2:BB:FB:2B:49:43:36:BF:AA:32:0C:EE:F7
            X509v3 Authority Key Identifier:
                keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:96:c9:d5:2f:1d:20:d2:f6:f9:8e:54:bc:a1:88:8a:15:02:
         75:33:89:0a:d7:38:d1:d0:9b:e8:42:5f:aa:e8:ce:c4:0a:52:
         7d:22:ed:9e:fa:42:6d:ba:10:1c:98:c3:14:e1:e1:0f:5e:20:
         0a:a5:a0:a5:0e:45:7e:9b:32:ca:8f:c1:22:9f:f4:04:53:66:
         7f:9e:df:3f:96:60:a9:de:90:99:b5:65:c5:ef:77:cf:27:a8:
         4f:9e:5f:c4:cc:12:91:ef:4c:10:d9:bb:28:44:35:c9:e3:00:
         fc:fb:e9:b8:23:c1:29:7a:ea:b1:3b:f0:9a:99:d9:8e:19:e6:
         56:d9:61:23:92:51:61:00:87:8f:a8:6b:5f:17:28:30:3c:d2:
         90:8e:73:8e:6b:99:7b:78:d3:db:50:8b:49:f5:b7:e8:9c:04:
         04:27:49:6b:c1:2e:31:92:e8:23:43:35:22:c3:9a:fc:58:d3:
         d7:cb:04:51:d5:df:08:70:3e:49:51:37:50:ba:e8:38:ad:14:
         40:51:99:58:32:f1:3e:cd:b0:1b:53:79:6e:ca:4c:8c:ee:35:
         09:70:6c:ef:34:48:38:a1:9e:95:58:a0:88:4a:fb:c6:14:a7:
         85:d7:a9:10:95:be:4c:5f:22:8f:7c:4c:bf:fe:c8:c7:bc:2c:
         f9:05:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:56 2024 by rpki-client on console-fra.rpki-client.org