Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
File:                     OkGxVaq20SKf00jqoD0PeQPxJno.mft (raw, json)
Hash identifier:          sramfDw3oMDlL2A13DZADjfORm/13vUd40H0LxdGZ1Q=
Subject key identifier:   01:84:80:93:E1:BF:3B:52:2C:66:42:79:C5:FA:52:49:04:A3:B9:11
Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Certificate issuer:       /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Certificate serial:       019044F8D7AB2150F395718B99B7D6B94FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
Manifest number:          0CE0
Signing time:             Sun 23 Jun 2024 12:01:17 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:17 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:17 +0000
Files and hashes:         1: 61-rGEbSQyHAtyvdUUVFeX8CZDc.roa (hash: W+gJHwCoJVv2zr1lMHxbjUeMGc2KFHB9jjEeCuM4tRQ=)
                          2: OkGxVaq20SKf00jqoD0PeQPxJno.crl (hash: MzyFs2xmmrCPG7sSqYDPgLC+5FzqzDkL9Bh4gYgeY1M=)
                          3: aIn5VocAfgcXju73DFiM7lGZ9f8.roa (hash: JoK+0MwNBoQNYWeXDayMK3fPHwUxNjei98s8pjAHkA0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:d7:ab:21:50:f3:95:71:8b:99:b7:d6:b9:4f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
        Validity
            Not Before: Jun 23 12:01:17 2024 GMT
            Not After : Jun 24 12:01:17 2024 GMT
        Subject: CN=01848093e1bf3b522c664279c5fa524904a3b911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:07:8f:16:53:7a:91:ac:82:58:67:c3:59:
                    62:99:e0:51:18:a9:99:a0:d2:95:f1:95:d3:2e:4b:
                    88:64:c2:bb:9b:6d:96:b8:d0:c6:e3:7e:92:51:ce:
                    61:93:48:70:c2:82:19:8b:f0:42:77:f8:8e:a4:a2:
                    11:9a:21:14:de:3e:fe:9c:2f:1c:22:db:15:a5:1d:
                    47:68:74:cb:77:1e:ad:bb:28:e9:57:cf:a9:21:01:
                    e8:a0:9a:89:6b:4b:d2:f4:37:49:80:6b:70:a0:11:
                    fe:08:fd:11:7c:b7:de:8d:ed:3a:9d:ea:70:b1:89:
                    96:3d:00:46:81:ed:8b:e9:54:cd:4b:99:6f:80:20:
                    a9:f3:3b:00:95:8d:9a:97:58:98:9d:90:9d:a0:a4:
                    f8:02:62:fd:16:3a:13:62:38:f2:56:90:b6:0c:24:
                    30:7d:ed:2f:a7:db:32:dc:08:0b:47:41:49:09:f5:
                    16:b5:71:a8:2d:33:92:fd:41:b4:b1:04:98:bb:03:
                    bf:a9:be:32:c6:8b:19:d6:9b:6c:f6:c2:dc:a1:81:
                    8b:02:8d:30:bf:e6:2e:1e:08:71:f2:f3:38:49:d2:
                    ed:b5:40:56:45:21:47:7b:9e:29:7d:a2:54:95:a9:
                    04:d9:43:1a:98:22:6a:7b:8a:73:12:79:e0:37:a3:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:84:80:93:E1:BF:3B:52:2C:66:42:79:C5:FA:52:49:04:A3:B9:11
            X509v3 Authority Key Identifier:
                keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:43:65:8f:5e:1a:36:90:e1:43:c9:9d:21:58:cd:1f:a8:bc:
         4c:54:21:22:45:45:ca:44:31:4b:10:37:ea:6a:b8:57:6b:4a:
         52:f6:8e:40:36:0e:18:13:c5:24:53:b1:56:65:15:4d:c0:8f:
         e2:6b:8c:7a:e5:d5:f4:74:41:e9:4b:4f:80:69:2b:d0:74:b7:
         65:d5:5c:f5:f0:f9:ef:23:da:42:1a:a9:fb:af:79:17:58:bd:
         00:28:83:aa:02:e7:08:89:94:0b:94:45:cd:33:7c:16:57:e3:
         f7:2a:b4:7e:1d:44:2e:dc:b9:2b:e6:30:a8:1f:dd:c8:3e:ff:
         ca:00:af:de:c0:bd:d6:0b:27:dd:13:f2:88:f9:f1:70:c0:19:
         22:76:7f:8c:e3:16:97:cc:db:36:bc:d3:87:8f:dc:82:41:ae:
         19:0a:8f:06:36:d4:9d:9a:cd:97:60:cc:28:21:d6:73:c9:31:
         0f:f7:2a:7a:a8:a7:3b:2c:65:06:b5:60:f9:a2:5e:10:a8:d5:
         63:a6:35:22:92:ca:75:98:00:ee:f6:28:83:b9:15:49:fc:ea:
         f2:9f:73:e5:b7:8b:97:0c:8a:6b:be:2c:33:f7:ca:e1:61:2e:
         53:d0:de:a7:4a:b9:7e:47:b5:0c:21:1f:55:22:ce:71:4f:50:
         10:e3:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:53:51 2024 by rpki-client on console-ams.rpki-client.org