Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File:                     OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier:          eXsy63NrwKFUewMmJtPDBXKrqIwAlf6iF8Qah5Zii3g=
Subject key identifier:   60:7E:36:3E:06:44:EC:97:1E:F3:8A:E2:5B:8A:AD:A7:D4:E8:AB:8D
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer:       /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial:       01901E592E06968C2F87C01CBDD0095A8950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number:          0E66
Signing time:             Sun 16 Jun 2024 00:01:19 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:19 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:19 +0000
Files and hashes:         1: NV6tUjau0TjgB8zkpVBPqIZyOAg.roa (hash: akxQUT+30KUuzA6/WFFeyMii2LHauOI9UWmiyiYtM+g=)
                          2: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: k+n0PTHwjqcq4Z3qSqd810bViC1F6qRI+7EmUXuxrWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:2e:06:96:8c:2f:87:c0:1c:bd:d0:09:5a:89:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
        Validity
            Not Before: Jun 16 00:01:19 2024 GMT
            Not After : Jun 17 00:01:19 2024 GMT
        Subject: CN=607e363e0644ec971ef38ae25b8aada7d4e8ab8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:d0:11:15:45:9a:88:00:ac:f5:84:e5:b9:
                    0a:7c:fc:7f:b8:e5:4f:63:88:af:20:a3:de:58:96:
                    94:6b:d6:81:5e:54:65:e5:1e:00:72:c9:73:89:60:
                    e0:06:aa:38:42:56:ae:92:67:9d:b9:0a:77:f6:c4:
                    46:93:9f:c6:6b:5a:54:40:f1:32:e4:6a:f1:65:3a:
                    ee:03:87:a5:b1:2c:48:fd:f9:86:17:cb:46:72:e6:
                    fb:65:93:c9:ba:98:1f:b2:be:cf:e0:f5:71:49:44:
                    02:f9:85:07:80:1e:2d:80:84:48:19:a5:0a:46:b3:
                    e2:ca:56:c4:8a:f0:63:19:28:f7:f0:8d:97:7f:8e:
                    c7:3b:d8:66:27:de:68:06:4b:6b:7b:7d:cd:ac:ca:
                    86:98:49:8c:6c:6e:30:6b:14:e3:5f:b2:7f:05:f7:
                    5b:02:33:07:7f:13:d0:50:30:ee:17:2c:ae:82:6f:
                    c1:91:9c:0b:3e:af:be:f2:04:f4:27:45:3a:e7:8d:
                    de:28:44:59:30:fe:98:5f:49:2b:92:7e:0b:4b:e1:
                    6a:d7:6d:cf:2b:75:6c:cf:b8:9d:66:ff:64:f4:30:
                    14:0b:09:aa:2e:c2:b3:46:9d:8e:7f:5e:16:b5:a7:
                    a8:a5:ba:af:bf:20:eb:ff:43:23:43:9f:2f:4f:0e:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7E:36:3E:06:44:EC:97:1E:F3:8A:E2:5B:8A:AD:A7:D4:E8:AB:8D
            X509v3 Authority Key Identifier:
                keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:76:e5:a3:57:6b:51:68:63:e5:7c:fb:34:cf:d7:00:13:
         21:13:cf:b3:50:29:30:b2:59:32:83:a6:f4:d9:c1:4c:de:b8:
         43:0f:ff:d9:71:74:3c:65:b2:73:a5:60:fd:35:d9:72:5e:69:
         54:92:42:fc:0e:74:c8:0b:4f:53:d0:23:1c:07:7b:fa:49:ea:
         f1:76:00:bd:66:7e:c4:99:dd:35:e3:3b:77:d5:93:40:4b:c0:
         fb:b0:21:d7:67:89:b3:a9:25:44:ae:e1:4a:90:08:93:bd:d5:
         ee:1f:fa:a0:6b:25:b4:d9:8c:bb:e1:6e:e7:60:f0:b2:35:51:
         b3:52:58:61:84:c3:4b:5f:10:d9:87:1c:a9:ba:d7:6f:f3:49:
         13:9b:71:bc:d5:7a:51:fc:f5:cf:09:58:ab:09:54:de:e8:6f:
         4a:70:20:03:4c:a6:4f:e7:5b:74:7f:d5:ea:f0:61:64:6c:38:
         ee:db:4b:03:27:86:bc:d3:dc:c1:31:d4:08:51:92:40:54:95:
         32:25:7d:f3:5e:7b:9a:66:da:bd:50:2f:de:96:6d:ab:41:8a:
         9a:a5:3d:3a:67:17:38:b4:bb:83:88:83:3c:18:2c:09:8e:e8:
         a2:3d:8e:18:5a:0c:13:e4:db:ff:84:cd:d5:97:a3:30:57:5f:
         7b:c9:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:04:52 2024 by rpki-client on console-ams.rpki-client.org