Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File:                     o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier:          xbMUyXClkjYjDiiQI3mrsy103yH3Mm9o1NXma/9O494=
Subject key identifier:   10:E5:6E:3B:A9:80:50:7C:E7:08:77:0D:87:B5:B1:93:07:D9:D1:29
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer:       /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial:       01901E8FB944585AED8D387FA3C50D1CB41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:53 +0000
Files and hashes:         1: 7cgIn8OXqWKBWzjmZpHG7RqY9uU.roa (hash: /PjGQYL3vQwjgAyl2Ojtk29i+eXnESpE43sdsFd8Z5E=)
                          2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: 22Hf/eMMaaW4/p95I/gvu1v78vK6hxqXHy+RW+/V2/A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:b9:44:58:5a:ed:8d:38:7f:a3:c5:0d:1c:b4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
        Validity
            Not Before: Jun 16 01:00:53 2024 GMT
            Not After : Jun 17 01:00:53 2024 GMT
        Subject: CN=10e56e3ba980507ce708770d87b5b19307d9d129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:b6:73:13:a9:e2:35:09:b5:de:e2:57:00:
                    69:0d:fb:35:d8:7a:71:7b:59:b2:da:23:ec:ae:5d:
                    c7:1a:95:86:bf:5c:c1:2f:f7:41:e7:8a:9b:df:2e:
                    bd:48:b4:db:16:f1:44:52:c9:d4:39:77:8c:31:6b:
                    8f:88:26:91:2c:20:16:e8:1b:86:c2:06:25:69:0b:
                    47:ce:75:c8:0e:8c:42:14:9a:37:a3:03:6a:7a:32:
                    ac:b9:86:52:b9:d7:90:a1:dc:9c:8d:a4:f7:b0:30:
                    fd:1d:d1:c9:81:c6:0d:7f:23:6b:73:5b:82:af:c7:
                    0f:d4:c8:2b:db:70:c2:93:6e:9e:6b:37:e9:46:c4:
                    75:31:ef:ac:1d:47:46:70:c2:ff:49:1a:93:49:b9:
                    a6:d7:e6:fe:a6:ec:ba:80:72:e5:33:d7:d4:94:09:
                    5e:b1:c7:a5:2f:34:54:96:24:65:18:65:b8:b3:f8:
                    5a:4d:db:67:ca:74:f6:9c:b0:1c:d7:68:bf:03:1d:
                    f1:a7:f3:5d:8e:97:10:44:eb:a4:ff:a2:8b:8d:90:
                    c7:f0:5b:1e:8c:f7:66:c9:fb:56:f8:3e:39:d5:dc:
                    c9:64:69:a4:63:be:60:b9:de:03:9c:b9:8b:44:be:
                    11:e7:20:3b:b7:c6:15:af:c6:f0:e8:ef:61:2c:2a:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:6E:3B:A9:80:50:7C:E7:08:77:0D:87:B5:B1:93:07:D9:D1:29
            X509v3 Authority Key Identifier:
                keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:68:c0:08:53:ef:22:c3:8f:01:19:c1:a1:8d:ea:7f:08:
         6b:91:ca:9b:b0:31:9d:b0:3d:c2:52:d2:d1:9d:a3:34:b5:8e:
         3f:52:05:49:31:a2:c0:4b:58:51:4c:fb:28:3c:ef:17:f9:47:
         51:d1:bd:67:41:fc:b6:20:56:ac:94:45:d7:c4:d2:0f:41:a5:
         46:8e:0c:ed:38:38:59:64:b1:4c:23:a2:81:65:a9:20:cd:14:
         cd:f3:13:67:92:64:dc:d5:5e:20:b3:e6:b2:b7:03:40:26:a2:
         99:07:af:54:72:ff:a7:94:1f:ed:96:c1:ed:a6:98:aa:96:29:
         49:4b:5f:32:b3:81:e7:2f:d3:37:7a:87:f3:a2:12:3e:38:ac:
         57:04:20:20:49:78:48:0d:ff:39:71:21:93:c5:4b:23:ec:10:
         ab:5c:22:03:05:8a:b5:a6:87:12:61:e1:6f:8b:69:f0:ad:8a:
         f3:24:5a:1b:af:fa:a5:42:b6:cf:93:3c:cc:a6:e8:41:8c:ec:
         12:73:73:4f:35:9e:55:45:9d:75:77:c7:ed:e2:f5:a8:af:f0:
         dd:23:60:1c:82:b5:9c:b0:09:24:61:48:4a:ea:b7:f1:05:86:
         43:8d:73:75:2c:47:8f:50:ff:3c:63:5b:fa:31:3f:44:4f:66:
         b0:09:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:02:44 2024 by rpki-client on console-fra.rpki-client.org