Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File:                     ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier:          kpTCICK3N/wMObIY89LOkgMJwR7HyULD660aYFzntIs=
Subject key identifier:   2E:20:C9:3D:F3:A2:46:4C:A8:10:81:4D:8A:1E:17:53:2F:61:35:D1
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       018FA32E6AAD22EBD1E1FF913491BD9BDA6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number:          11B9
Signing time:             Thu 23 May 2024 02:01:19 +0000
Manifest this update:     Thu 23 May 2024 02:01:19 +0000
Manifest next update:     Fri 24 May 2024 02:01:19 +0000
Files and hashes:         1: 3Wf3I_pU6HZyRjBsJBWgiNFRb9Q.roa (hash: du+qXsnDHO9OA6/z7xkneHTT9S/L03QyjAElnK59fUE=)
                          2: 5Hex3WFoY1DaveH_S6R6-JJSVp4.roa (hash: FNw4QlzN7458kmavS9+ZY9Cmyh3h+D+cptjrLjfhC2s=)
                          3: 9oo_4Gw7mdRmW5Xf9uhOgupAdA0.roa (hash: 9P7NF0IjRAqOJrLhSM0MTLBN4ypiRw7Ae6rvJF/SkxQ=)
                          4: W8ky-24q-NHAGLZiiS3pd1vXS3c.roa (hash: PsLeT0qSU/ec/2E4CUpJ5KlxuNlpwZyC+fMpkjU4NoM=)
                          5: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: Vne9AeDy3x0C4pqr4xcKC35J4HPoGBqPm1u57s5XTpI=)
                          6: tuRQnrpa5QoCOVe8aeFEO_84Cjo.roa (hash: 5TAk9t/pZ66IEIIfIZiM6SH/Qs8Vf++QlnPoXTpcH/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a3:2e:6a:ad:22:eb:d1:e1:ff:91:34:91:bd:9b:da:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: May 23 02:01:19 2024 GMT
            Not After : May 24 02:01:19 2024 GMT
        Subject: CN=2e20c93df3a2464ca810814d8a1e17532f6135d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:c0:d3:d8:0f:4a:e2:b5:f4:82:f6:ba:a2:
                    13:32:cc:e6:e6:6d:85:84:96:3a:56:f4:f8:66:0a:
                    f1:81:3e:8c:df:41:48:ea:e7:ba:8d:3d:70:74:18:
                    56:7d:6a:89:0f:50:97:4f:da:c0:0b:16:d3:e4:0d:
                    3f:a4:ea:fc:da:39:20:77:f7:bd:4b:18:80:5b:e7:
                    45:34:ae:1c:4c:3e:b0:77:6a:3b:56:87:9c:2d:02:
                    9a:95:ff:36:0a:34:ea:8f:29:3d:8a:fd:a7:08:e0:
                    88:13:3b:00:0b:d9:37:91:13:89:44:2d:55:b0:cc:
                    50:d0:a6:db:09:d7:1d:f9:7e:b9:1e:1e:38:f4:36:
                    7e:33:ea:f9:d3:96:7c:1e:dc:28:67:87:c4:6f:a0:
                    3e:94:b3:88:5b:1f:1f:4c:eb:95:25:25:4a:e5:fd:
                    f8:ae:89:2e:13:f0:22:58:a0:9f:d6:49:2a:de:2c:
                    60:88:00:64:69:1d:7b:6b:af:73:37:f6:01:8b:20:
                    c6:15:2f:67:68:80:b6:5c:43:06:75:38:98:bf:db:
                    85:92:77:af:85:c0:10:0c:2d:a5:2f:c4:63:0d:62:
                    04:f0:f6:d4:97:b6:64:fb:ef:98:09:c6:25:40:d3:
                    28:bb:20:ac:a6:92:00:b0:97:46:51:98:c9:fe:aa:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:20:C9:3D:F3:A2:46:4C:A8:10:81:4D:8A:1E:17:53:2F:61:35:D1
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e4:71:8d:75:02:7a:30:29:22:df:96:b7:a9:37:81:32:90:
         9f:60:2e:c9:b1:c1:1d:1c:f1:15:ab:8a:e3:72:f0:e5:71:8a:
         9f:cb:62:42:19:66:8a:7f:1a:4a:72:c6:7a:ac:95:d7:89:76:
         38:aa:a9:8f:67:cb:cd:a5:a7:ab:05:93:80:2f:d6:8c:3a:47:
         3f:54:55:8c:1b:06:ff:56:8a:09:5a:48:24:fe:e8:35:14:eb:
         2c:be:13:24:88:d7:7d:c5:be:a3:00:c4:17:09:ac:da:83:a1:
         ec:63:c6:31:39:97:be:c5:09:fe:10:41:44:7c:fa:3a:89:5d:
         3a:92:84:7f:15:88:99:26:ca:65:50:dc:45:a1:62:eb:ba:9c:
         e7:58:14:68:66:4a:d2:bb:04:16:b1:21:4a:1f:97:85:1e:40:
         cd:44:ef:86:e4:f1:8f:ec:25:30:32:81:75:ed:f8:06:b8:92:
         84:84:3f:55:7d:d3:fb:ac:17:ac:25:cc:c2:c0:ad:f7:2c:2b:
         9b:ab:38:ce:a3:1e:1d:fc:d3:32:cf:48:e2:62:10:8d:ab:0b:
         b9:65:9d:88:9e:f2:a2:e8:20:1c:9c:b6:d2:8b:7d:b1:1c:72:
         e2:7b:e2:7b:f4:44:c2:d1:f5:27:85:a5:90:ac:f6:3e:24:ca:
         52:a7:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:37:04 2024 by rpki-client on console-ams.rpki-client.org