Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft
File:                     oybRlH-kQ2NloBOsZ_TzKx_bqck.mft (raw, json)
Hash identifier:          CfeN7YLgoIO5QivS+1nwduXRT/aOWMexOx/Ihh9PxUs=
Subject key identifier:   39:0F:0D:BF:CD:24:BF:A7:85:9F:80:2D:D5:D7:B9:A3:56:B5:E7:85
Authority key identifier: A3:26:D1:94:7F:A4:43:63:65:A0:13:AC:67:F4:F3:2B:1F:DB:A9:C9
Certificate issuer:       /CN=a326d1947fa4436365a013ac67f4f32b1fdba9c9
Certificate serial:       01901DEB86061BDBB97E99157E3ABC5338A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oybRlH-kQ2NloBOsZ_TzKx_bqck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft
Manifest number:          0EBF
Signing time:             Sat 15 Jun 2024 22:01:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:32 +0000
Files and hashes:         1: oybRlH-kQ2NloBOsZ_TzKx_bqck.crl (hash: o43s6n4vNbaaGZ1tBc6lyFqupJSeyhOzp2fi/ypxuNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oybRlH-kQ2NloBOsZ_TzKx_bqck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:86:06:1b:db:b9:7e:99:15:7e:3a:bc:53:38:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a326d1947fa4436365a013ac67f4f32b1fdba9c9
        Validity
            Not Before: Jun 15 22:01:32 2024 GMT
            Not After : Jun 16 22:01:32 2024 GMT
        Subject: CN=390f0dbfcd24bfa7859f802dd5d7b9a356b5e785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:d4:70:30:57:fc:63:9e:8d:50:32:b4:c8:
                    18:bb:eb:12:99:6c:a8:02:e6:0b:83:3e:b6:97:30:
                    7f:3b:68:e6:21:17:e0:41:79:0d:9a:8d:ce:a9:cc:
                    38:d2:3b:9f:a5:3f:a6:5e:76:0a:51:15:32:13:ae:
                    98:73:3f:c8:e7:02:34:43:47:be:e9:0e:66:1d:a7:
                    ed:6d:ee:d4:67:ca:49:c6:3f:e0:0c:ad:c1:0f:5d:
                    89:d2:27:99:ee:d2:b3:38:17:37:47:59:7f:41:e2:
                    5a:0e:65:2a:ba:19:2a:88:aa:55:b4:c9:4a:aa:4e:
                    ac:a3:df:b1:90:09:cb:a0:19:0e:e2:a9:b2:57:b9:
                    7b:7f:f1:df:98:5c:39:af:56:bc:81:bf:ac:ac:a7:
                    4d:a6:34:1b:4e:0e:88:5e:cf:fc:29:47:ba:cc:e9:
                    d1:09:d7:2f:3a:2a:4b:12:9a:88:79:2a:3a:26:cb:
                    cf:ac:cf:f7:60:ec:69:e8:bb:d1:bc:ac:76:6f:6a:
                    0d:7f:b0:f7:bd:ca:a1:35:52:ad:46:f5:1f:53:48:
                    24:89:13:84:86:72:26:09:a7:ea:43:a5:cd:65:da:
                    f9:8f:f8:36:bb:a9:da:dc:0e:be:e2:4b:f7:8c:e7:
                    95:66:2e:c3:5b:60:cf:1c:8c:a7:c5:4a:9a:78:bf:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0F:0D:BF:CD:24:BF:A7:85:9F:80:2D:D5:D7:B9:A3:56:B5:E7:85
            X509v3 Authority Key Identifier:
                keyid:A3:26:D1:94:7F:A4:43:63:65:A0:13:AC:67:F4:F3:2B:1F:DB:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oybRlH-kQ2NloBOsZ_TzKx_bqck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:84:91:69:7a:ab:16:aa:77:1d:73:8a:88:d8:34:fe:33:
         da:1c:e3:58:04:29:a4:dc:be:97:4f:2b:a3:72:54:c2:14:11:
         28:55:e2:98:7d:de:f0:5a:d3:be:d3:9f:9a:d3:79:86:78:d8:
         05:19:ae:22:2e:89:46:ce:23:ca:6b:99:b5:06:b7:94:8e:a8:
         11:cd:ce:49:15:39:39:c8:4d:53:09:b8:6c:39:4b:f0:e2:39:
         60:25:68:12:f4:20:0b:11:37:b9:70:3c:09:e5:63:b6:78:c5:
         73:10:87:0c:5d:ea:80:0f:d0:96:bb:a6:2c:51:3f:3f:6b:1a:
         99:7e:e2:1a:90:9b:ce:80:07:c1:47:80:50:4c:c8:a4:f5:cf:
         13:a1:37:c8:1b:d1:fd:dc:b0:81:2b:54:c0:bb:3e:a5:5e:a5:
         e0:ee:eb:71:c0:1f:f3:78:81:3a:34:30:58:bb:be:a9:61:80:
         0e:55:50:74:9d:8d:a8:04:ee:33:86:dd:f7:3d:ed:96:4c:16:
         48:33:f6:d3:5a:1c:94:e3:35:29:f0:ce:07:ef:a6:3d:ad:0d:
         ca:f4:52:d7:f7:f8:3c:12:7f:53:c3:6a:3b:32:22:23:f8:70:
         c7:90:10:97:b1:bd:a3:c5:65:d5:d2:3a:9b:bd:18:50:2e:5a:
         af:d5:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:24 2024 by rpki-client on console-ams.rpki-client.org