Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File:                     oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier:          l/00iZ7kyy69eJXamp6J2d7KGAYxIy9buy5mQOnCNNs=
Subject key identifier:   79:EC:F5:5F:1E:95:CC:1A:75:BB:DA:8F:92:2C:C7:52:40:83:AD:ED
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer:       /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial:       01901DEC2A803254190B28FBE0D7480645BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number:          031A
Signing time:             Sat 15 Jun 2024 22:02:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:14 +0000
Files and hashes:         1: QMoo5MhPB-IRN-grs7DsurCHxxo.roa (hash: 9JdMsXD8FXCTc5K7E+/x+BhpYN+0N5DUdmtU/oYIyOE=)
                          2: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: SbSumyzMMQgPJPthgi2V3IKoXOztzPsc5PFrBZ7+S+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2a:80:32:54:19:0b:28:fb:e0:d7:48:06:45:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
        Validity
            Not Before: Jun 15 22:02:14 2024 GMT
            Not After : Jun 16 22:02:14 2024 GMT
        Subject: CN=79ecf55f1e95cc1a75bbda8f922cc7524083aded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:ca:37:db:ca:5c:b1:de:08:52:76:d4:e6:
                    14:30:bb:07:eb:74:33:4e:b4:63:eb:2c:55:02:8f:
                    4d:76:cc:79:6d:b4:03:11:05:7e:0b:fa:c1:9a:58:
                    98:20:d6:12:8a:ec:b7:8f:95:95:6f:42:8f:2b:43:
                    5f:84:a6:ed:d1:70:cc:04:0d:fa:86:0f:8d:a0:f3:
                    ed:29:69:32:f5:34:31:08:2b:91:69:92:f9:25:bd:
                    e2:40:a3:1f:ed:99:00:d9:aa:69:64:d2:fb:c3:d1:
                    b9:21:41:b4:0f:76:3a:52:27:ff:2a:08:8a:a3:9d:
                    15:96:b0:eb:52:4c:43:a2:24:9a:e2:ba:3d:89:97:
                    d0:f6:0c:3f:a2:95:6d:f1:79:bc:32:2d:f9:f0:7a:
                    14:e4:5c:6f:41:de:14:03:87:d2:e1:68:c3:a5:9b:
                    b0:f8:31:96:68:56:b0:4d:b9:80:bb:12:82:5e:00:
                    11:5c:b2:2e:8d:c7:5a:3a:36:a4:ba:72:71:42:07:
                    3c:68:21:a1:2b:cf:d8:4f:95:b9:bd:8d:7e:bb:b0:
                    f2:7f:a6:8f:63:3f:17:df:ba:f1:3c:d7:c1:d1:4f:
                    63:93:6a:39:af:c4:7d:b3:32:96:21:ff:14:fb:7f:
                    a2:bf:ac:e3:ec:a5:ac:22:bd:bd:33:b9:14:48:23:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EC:F5:5F:1E:95:CC:1A:75:BB:DA:8F:92:2C:C7:52:40:83:AD:ED
            X509v3 Authority Key Identifier:
                keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:00:78:27:db:1e:21:6b:5e:2d:8d:ce:57:d5:a3:de:10:1e:
         ab:48:dd:c8:5f:9c:a5:59:53:ee:51:55:93:50:60:82:cb:2b:
         5e:9d:89:50:f9:1e:a4:bd:43:16:5c:42:d0:0a:07:39:54:f8:
         00:aa:5d:21:d7:6e:70:dc:93:dc:18:57:26:2f:78:7e:1d:79:
         01:17:38:6a:79:a4:26:93:d2:ac:ad:53:ea:08:a1:61:16:db:
         94:13:18:d3:31:37:9c:b1:52:a5:58:aa:20:3f:ee:0e:b5:56:
         b9:20:01:ed:02:9a:eb:74:a6:1d:55:e4:3f:fd:00:35:38:ef:
         5d:67:7a:ad:17:5f:42:63:de:fb:ee:61:0e:38:cc:a6:48:71:
         39:40:65:b4:95:ae:c4:75:dc:ee:03:d8:2d:77:89:45:2d:4d:
         0b:02:e0:08:6a:e8:fb:12:f3:b2:f7:40:de:2d:47:c3:90:82:
         be:0a:22:34:f3:09:4a:dd:bf:04:c2:f5:b7:f1:2e:34:4d:6b:
         39:a3:45:bc:8c:fd:f6:d3:9d:c0:a7:26:ed:ad:39:e3:bc:7f:
         fb:2a:2a:81:13:69:ab:5b:05:34:fb:34:0d:f8:2e:c1:d2:41:
         ed:f3:35:fb:e6:2c:f6:87:54:75:0d:41:33:60:bf:db:d8:74:
         fe:60:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:15:25 2024 by rpki-client on console-fra.rpki-client.org