Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File:                     ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier:          ZUhd1vKxxThcAfeoIi/3GO/eHReIj94cer6tS8paOyw=
Subject key identifier:   B0:40:19:A5:80:DC:84:15:03:7F:6D:1C:4F:B6:73:F0:50:0E:0F:C8
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       01901DED9EF335A01CFC15C12FEDD06FA049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number:          071E
Signing time:             Sat 15 Jun 2024 22:03:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:50 +0000
Files and hashes:         1: 4zL6JlYoo4rCfVs4JBKrEaSGJEc.roa (hash: Mm1IJ8d++5wuUGPKSfOBHH47Dsspj+C3pRWGNjUrrD8=)
                          2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: 3bC3hEbRVo4IY1GtIKU1UC4oN4jdENCmgrwahVDkhbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9e:f3:35:a0:1c:fc:15:c1:2f:ed:d0:6f:a0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Jun 15 22:03:50 2024 GMT
            Not After : Jun 16 22:03:50 2024 GMT
        Subject: CN=b04019a580dc8415037f6d1c4fb673f0500e0fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:9a:c5:00:ba:e5:a0:36:97:ba:e1:36:1f:
                    ed:b7:b0:d5:09:81:49:8f:c0:03:07:a3:ad:be:f5:
                    14:04:b4:7f:44:ab:a4:68:ab:f2:78:04:04:96:d4:
                    ce:95:84:10:00:27:8b:86:2f:09:84:85:f2:8b:56:
                    e8:05:20:c4:ff:38:78:16:69:b7:5e:df:65:41:ce:
                    d3:36:1f:43:a9:72:bb:bf:06:e2:aa:8b:33:ab:8c:
                    d1:35:c7:a9:af:cf:19:cf:de:22:2a:42:81:1f:86:
                    f9:bf:58:ad:ae:e6:59:7d:d6:ca:33:e5:4a:a3:20:
                    c9:a2:5f:a4:ac:d1:31:cf:7d:5c:e0:c8:c9:25:ae:
                    d3:cc:b6:7f:86:cf:ca:95:57:08:db:f4:5f:0b:fb:
                    bd:24:98:19:27:fa:27:77:fd:e9:c6:52:f6:8b:fe:
                    f7:f9:27:ac:19:b6:1b:1d:7a:51:0d:23:b1:cd:ef:
                    fc:75:c5:34:e5:45:28:25:2a:d2:79:ad:ac:39:47:
                    f4:67:c4:c3:03:4a:12:9b:a6:e3:d0:fb:0b:1d:d0:
                    c0:a1:98:35:08:f6:50:ba:3b:53:c9:95:ba:62:56:
                    e7:9c:04:a3:f3:15:e1:f0:81:9a:f3:53:9b:d7:a7:
                    65:9c:a0:6b:b5:0a:bb:bf:8a:d1:25:6e:8f:c7:2f:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:40:19:A5:80:DC:84:15:03:7F:6D:1C:4F:B6:73:F0:50:0E:0F:C8
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fa:7e:37:91:2d:26:ab:b3:70:8e:b3:41:49:2c:86:ed:a3:
         77:c7:94:18:1d:e3:2f:90:ee:b1:38:7e:5a:df:1f:1b:fe:00:
         16:b7:5b:fd:e0:5a:1f:cf:73:01:1f:3d:ad:22:2f:a1:35:4f:
         ac:14:e0:0e:e8:b8:2d:0a:e9:28:03:43:c8:cd:4a:d1:f5:54:
         41:32:f9:af:6d:b9:da:1e:47:e7:46:3a:19:c2:1c:5b:bc:d5:
         ed:2d:fe:a3:89:ba:23:ce:38:5f:22:87:04:38:da:71:ce:13:
         c1:d2:a0:aa:d9:86:b1:a2:c2:8e:4b:88:56:4a:cb:5f:de:4b:
         71:23:8d:8f:6b:89:b6:c0:41:73:43:98:69:28:9b:ed:a3:ea:
         f7:b6:2a:39:f3:29:3c:e3:e1:69:c4:00:6a:50:83:aa:2a:2c:
         b4:cb:a0:2f:28:0e:6c:30:78:1d:c0:6e:08:a1:8f:9e:11:d3:
         71:31:20:9e:bc:70:e2:31:ef:2f:bf:2e:29:a1:0f:e0:44:b7:
         10:7c:f6:b2:09:2c:bb:5f:23:3d:08:d9:32:d6:22:d5:ea:ca:
         61:84:ff:91:32:55:34:0e:57:3e:a1:dc:db:65:05:e0:b1:7f:
         ee:9a:25:8f:f1:cb:3b:ba:05:ca:05:8c:e6:db:5c:df:7a:b7:
         63:a2:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:01 2024 by rpki-client on console-fra.rpki-client.org