Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File:                     O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier:          UgUqlTVTNZTcJD3RFM2dJeYHbQEMHzD+xIEGahc1Cgc=
Subject key identifier:   03:9D:75:D3:87:33:7D:D0:A6:C1:8B:D4:E4:BC:9B:3A:4A:B4:9D:EA
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer:       /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial:       01901D0F0B6F8B1B8C2A03321D0C200C198E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 18:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:43 +0000
Files and hashes:         1: DEuGm-2mEwrD9Au_R_6tvbDjB9s.roa (hash: FkW+rGfq03jGufvzyIVBbZHhgXfxlKWyedQUbmDOfUk=)
                          2: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: eS8+QIUfUMPNmsYkE5Z8Uy2YjLhFu4cgT5Pf54FG/6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:0b:6f:8b:1b:8c:2a:03:32:1d:0c:20:0c:19:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
        Validity
            Not Before: Jun 15 18:00:43 2024 GMT
            Not After : Jun 16 18:00:43 2024 GMT
        Subject: CN=039d75d387337dd0a6c18bd4e4bc9b3a4ab49dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:20:ab:0f:c9:82:78:fc:05:93:7d:e4:8b:
                    2c:11:40:63:f0:2c:f3:ce:ad:fc:ee:14:c4:03:22:
                    e7:33:d7:f0:7b:aa:9c:ea:77:d5:ee:b9:fe:d7:89:
                    f4:fa:c1:2b:d7:f8:36:dc:ac:28:61:6b:06:49:82:
                    bb:db:f1:28:5d:f5:ba:4e:99:8a:50:a8:e8:81:66:
                    fd:6b:62:cc:79:1d:97:c7:02:cb:c9:68:a2:98:7b:
                    21:18:ec:b8:b2:7b:ec:6a:a1:ff:04:1a:23:0d:61:
                    1d:b8:58:3d:9e:eb:49:9f:2a:87:df:08:df:7e:e1:
                    34:42:94:a9:68:d4:f9:52:84:d0:c3:2f:f7:ae:9a:
                    dc:1f:ba:a4:5d:b5:be:38:09:46:ee:f5:e1:0f:73:
                    22:d8:b8:a0:76:46:9b:50:f6:22:03:92:4d:b4:48:
                    90:1e:f8:d3:f9:13:5a:67:78:82:3b:93:57:fc:32:
                    db:3c:bb:86:35:04:b7:e8:11:f6:a6:17:ce:18:c8:
                    e7:a2:8a:fd:fc:b7:87:e7:5a:51:b9:81:70:0f:1b:
                    d7:5d:ab:d0:10:9b:c3:a1:ea:0a:55:70:15:f2:bf:
                    b7:6a:58:53:bf:f0:f6:01:4c:49:f9:68:e1:c3:5a:
                    34:50:5e:0d:e5:f4:d3:7c:ce:0a:c9:0d:34:da:92:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9D:75:D3:87:33:7D:D0:A6:C1:8B:D4:E4:BC:9B:3A:4A:B4:9D:EA
            X509v3 Authority Key Identifier:
                keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:90:40:fc:05:bc:47:ae:14:af:a3:10:68:a5:40:8e:e8:
         05:90:ee:7d:ba:37:4b:c8:61:7b:59:82:0a:b3:fb:e4:25:02:
         3c:46:22:64:86:73:2e:ae:90:0a:68:0c:ac:5e:73:63:c0:4c:
         51:4b:28:07:ab:72:b3:92:5f:57:8a:68:a0:4b:a7:f3:cd:32:
         18:9e:fa:03:97:2c:10:b2:7b:b5:cc:a9:40:4d:05:a4:41:be:
         64:47:34:00:26:ec:4d:de:7a:33:d6:80:39:bf:c3:f4:35:c6:
         cd:1c:b9:23:79:49:2c:5e:6e:b2:d9:81:87:e3:69:0c:67:73:
         cf:92:2c:dc:a5:ce:70:69:a5:55:16:64:36:c4:1d:f3:3a:46:
         e8:9f:b6:27:e4:d5:ff:8e:2b:d7:4a:0a:c7:d8:c2:2c:79:d1:
         94:fb:2d:7a:bf:de:ac:c1:a7:90:58:34:9d:45:72:9a:4d:af:
         02:1e:f4:a0:a6:af:2e:e0:20:0b:de:8a:f0:67:0d:ec:55:48:
         44:e9:11:d5:bc:60:fe:94:0d:0d:f9:3b:e2:db:d7:5a:98:bf:
         8b:03:79:8a:bd:e9:4c:c5:c2:f2:ec:c3:4a:69:42:2a:68:1f:
         de:a5:65:fd:2e:13:43:6f:ac:98:f4:d8:53:42:50:0c:30:92:
         bc:14:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:41 2024 by rpki-client on console-fra.rpki-client.org