Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File:                     OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier:          JIkFapINeeu/fiNKstzGuwXzAHm4cBbmRbB+8wvll5Q=
Subject key identifier:   85:ED:5C:AB:8B:A0:B2:15:52:7F:43:44:4C:49:B9:86:2C:9F:F1:48
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer:       /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial:       019040ADDBB41DB2A087AF126D73A9B31140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number:          0BF1
Signing time:             Sat 22 Jun 2024 16:00:54 +0000
Manifest this update:     Sat 22 Jun 2024 16:00:54 +0000
Manifest next update:     Sun 23 Jun 2024 16:00:54 +0000
Files and hashes:         1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: MmwI+Rfl94ugYQ3TrLd74hUmjscr91noT9SesHJ3GXc=)
                          2: qvj4UmYn-sq8ZfAFZd2ry7JCr70.roa (hash: rZZ6ea0ZBYOc2h972LAVJKispAqxfKHt4lXdobmKp4c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ad:db:b4:1d:b2:a0:87:af:12:6d:73:a9:b3:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
        Validity
            Not Before: Jun 22 16:00:54 2024 GMT
            Not After : Jun 23 16:00:54 2024 GMT
        Subject: CN=85ed5cab8ba0b215527f43444c49b9862c9ff148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:49:e2:ab:3d:1e:ec:89:62:81:48:f8:21:
                    e1:cb:b2:ac:21:77:86:bb:9b:3c:f3:0a:3b:08:02:
                    e4:f0:23:fc:bb:10:fb:5e:60:12:11:51:37:9f:d1:
                    47:5a:b8:e4:56:8d:17:af:e6:70:0c:b7:ac:e1:37:
                    8d:2a:01:f5:be:25:0d:e0:75:ae:a7:f3:72:6a:c3:
                    1f:c2:41:55:b7:a9:bf:4b:d9:57:23:43:50:2c:32:
                    d4:72:e9:ba:cb:0c:93:b6:bc:f6:3b:74:4f:5b:d5:
                    06:3b:28:3d:88:bb:b0:8e:7c:05:74:a2:27:6e:02:
                    db:b3:bd:8c:3f:69:d8:77:3c:61:6c:c3:54:96:de:
                    fc:dd:ab:56:2b:dc:65:13:4d:89:0b:5e:1d:25:62:
                    6c:9f:39:29:0e:6e:a9:17:0b:97:58:a4:aa:34:be:
                    f9:08:25:60:15:28:02:e1:c0:23:70:15:a9:be:f5:
                    4f:37:2f:d1:f0:89:b9:19:2c:87:a0:3f:7e:3f:5f:
                    09:3b:a2:8f:6b:96:90:c9:7d:c7:05:f0:b6:80:35:
                    87:12:36:f9:4a:e0:ea:a0:b7:9c:d5:ab:71:46:54:
                    a3:c5:a9:d2:1b:c6:8d:c8:ba:a1:72:46:65:4d:ca:
                    d2:35:f2:a1:fa:54:64:80:2b:f2:20:11:0a:d5:a2:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:ED:5C:AB:8B:A0:B2:15:52:7F:43:44:4C:49:B9:86:2C:9F:F1:48
            X509v3 Authority Key Identifier:
                keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8d:1a:35:76:c3:54:e9:de:0a:86:27:cd:ed:40:b9:07:75:
         a3:e1:fc:73:46:f7:3f:35:c1:7c:48:61:e9:0e:18:c8:4b:d5:
         ba:94:27:9b:66:ca:9e:38:0e:72:a1:2d:e1:5f:01:87:01:9f:
         dd:15:41:db:e6:37:2a:f2:1f:b2:99:9b:89:08:4e:10:2f:80:
         c7:8e:93:d1:06:f1:a3:8f:7c:33:aa:32:95:ff:db:e6:2d:b7:
         e7:a1:a5:d7:90:f5:cf:8f:ae:4b:1a:f2:e6:2c:72:89:1d:83:
         9f:ad:30:0f:5f:7c:77:fb:a2:0b:5e:00:f2:39:b1:c3:e1:d1:
         71:7d:ce:99:00:ad:25:44:5a:a0:e0:e7:5e:ae:77:93:57:98:
         b3:58:3a:c7:fd:4e:c7:35:22:61:eb:a3:1d:8c:86:3a:e5:c3:
         8a:aa:26:fa:3c:8c:81:65:db:60:54:83:02:9f:19:a4:55:5a:
         25:2a:74:06:42:2f:ee:90:8d:d6:61:bc:35:1f:04:2e:8a:82:
         b1:be:63:d2:ad:bf:80:7e:32:70:44:27:34:b0:ad:e6:e9:58:
         e4:e1:3b:c3:70:c2:4f:c1:65:01:5c:2c:78:65:27:76:8d:0b:
         89:05:32:60:42:65:41:ff:3f:84:e0:cb:47:fc:38:7b:b2:c8:
         96:37:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:29:46 2024 by rpki-client on console-ams.rpki-client.org