Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File:                     oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier:          nWgoDn0Msp7YqJ4vWK5bZwLsSLIwUEBb/rLT2D8SJOk=
Subject key identifier:   C9:E3:17:1A:86:04:0D:65:07:2E:9B:85:30:6F:AE:1E:62:51:07:36
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer:       /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial:       01901DEB34288DC36C04E50AC23886B304B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number:          02BF
Signing time:             Sat 15 Jun 2024 22:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:11 +0000
Files and hashes:         1: 3LczxYwc420sQ1suI4LHuX3UoaY.roa (hash: kqdLFTiVsJ61yy9AtA0cn4hngdyUSup5Ggnkus/WELM=)
                          2: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: 0j6ZISLacwL5wCQONJwYhXkrLf55dWeYE+4g5IifhYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:34:28:8d:c3:6c:04:e5:0a:c2:38:86:b3:04:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
        Validity
            Not Before: Jun 15 22:01:11 2024 GMT
            Not After : Jun 16 22:01:11 2024 GMT
        Subject: CN=c9e3171a86040d65072e9b85306fae1e62510736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:54:8c:af:cb:40:18:0c:10:c2:47:fc:90:
                    09:59:e2:aa:90:36:8c:40:56:f1:ce:79:12:9d:13:
                    98:c4:ba:6e:64:5c:e7:56:a1:65:1f:ab:6a:d8:be:
                    88:27:71:bf:ee:a4:40:73:22:75:09:4a:9e:00:56:
                    4d:15:27:f8:21:a6:22:27:c0:ce:91:ba:54:91:e0:
                    3d:ec:b7:8d:1c:18:4b:18:43:80:b1:3f:7e:77:ea:
                    a7:fb:e6:c3:47:dc:b3:fc:32:68:44:3b:c9:43:e1:
                    9c:d7:6f:15:78:1d:b1:11:55:70:85:34:44:2c:1d:
                    98:5b:c7:ff:f7:6f:11:3a:12:35:74:9c:d1:f7:22:
                    6e:98:f5:ac:0c:0b:e8:20:1f:38:4d:b4:e7:c5:3c:
                    0b:49:f6:90:c8:90:09:a9:fc:74:cf:6d:99:e3:8f:
                    e4:e5:9d:51:ed:16:63:f6:3d:56:22:cc:cb:c9:c2:
                    47:62:f3:63:15:ce:35:12:e1:bd:90:22:ef:05:46:
                    c5:6b:d6:b5:06:e9:32:64:4b:69:f2:55:8a:37:ed:
                    e7:98:b5:62:19:53:b1:dd:77:74:52:47:91:a3:13:
                    ec:ea:a2:7b:e1:5b:33:7c:41:d9:94:e8:31:b6:c5:
                    c4:61:2d:e7:af:ae:09:ca:93:de:ec:83:91:4e:ef:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E3:17:1A:86:04:0D:65:07:2E:9B:85:30:6F:AE:1E:62:51:07:36
            X509v3 Authority Key Identifier:
                keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:b4:93:71:a6:47:84:5c:e9:18:e8:e1:f3:73:a9:7a:3a:
         81:c1:63:83:08:f1:15:58:52:17:21:8a:52:1a:34:b0:3e:0e:
         f3:0a:2b:ce:70:5d:36:aa:ed:65:61:03:a9:42:9a:c1:26:25:
         b6:7c:3d:cb:18:d3:b6:ee:57:b9:00:c0:71:80:9f:75:be:c0:
         a2:ec:6d:c1:c4:a2:57:89:a4:5b:3b:7d:99:49:a6:90:f0:88:
         47:fd:b4:41:a2:61:6c:b4:83:33:b0:5a:82:89:38:cb:73:06:
         82:83:65:08:03:8f:fa:5d:07:77:ec:96:bd:b4:a8:c2:04:c7:
         be:77:8f:92:9a:a4:e3:d7:8a:2c:5c:1f:a9:7f:4f:3e:23:a3:
         d8:c9:14:a8:fe:df:e7:ea:f8:5a:ee:be:bb:c7:ab:61:5c:0a:
         18:87:77:f1:91:57:9b:16:6b:63:84:7e:a8:a9:9f:92:d1:a9:
         ad:7a:70:1b:e6:ff:46:4e:cb:7a:37:3b:dd:e7:d6:f2:1a:14:
         b6:1f:26:e5:49:94:10:04:b8:ef:c1:44:35:22:87:87:20:aa:
         18:bd:6d:69:90:b7:35:92:08:93:38:de:70:19:3b:a6:26:d4:
         2d:c0:51:3c:49:62:33:77:8b:6c:85:97:fb:ae:15:99:ba:0f:
         91:dc:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:11 2024 by rpki-client on console-fra.rpki-client.org