Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File:                     _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier:          zT3dktSJA3zOGE5GFpdwlco15l8XUsA7U0fGmFDO6Uk=
Subject key identifier:   12:EA:44:23:1B:E3:CE:A6:34:8B:40:8E:46:99:40:FB:BF:83:C2:85
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer:       /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial:       01901B57989CDFCC236488B8E1F4E473E923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 10:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 10:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 10:00:43 +0000
Files and hashes:         1: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: FZo36gKWBudaUiaPgbZ1s5Tbf/PGTiLjz1Nh1kPz8/c=)
                          2: mJ7HdLkkIFRzQlKkjwVqJxOFF0Q.roa (hash: OBTQsHeutAbhggxgCcwwaekU7XUnz7SmblYZIVYx7YQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:98:9c:df:cc:23:64:88:b8:e1:f4:e4:73:e9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
        Validity
            Not Before: Jun 15 10:00:43 2024 GMT
            Not After : Jun 16 10:00:43 2024 GMT
        Subject: CN=12ea44231be3cea6348b408e469940fbbf83c285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:09:b8:29:b5:a3:00:27:01:91:f0:5c:da:
                    15:81:53:e5:f7:3b:44:38:8f:90:29:0b:83:fe:df:
                    20:fa:c2:e3:ca:9d:e5:4d:e8:ae:5f:4b:d0:09:19:
                    24:ac:28:b1:cc:b8:47:fd:cd:ca:a1:28:1c:3b:93:
                    9e:62:93:61:4a:5f:09:a7:8a:40:a2:01:b8:41:d3:
                    c3:69:51:81:f3:a5:50:a0:1c:a3:33:7f:fb:6f:34:
                    b7:8c:05:9d:73:88:03:9f:3f:52:28:f3:dd:fe:1b:
                    a3:f8:54:34:8f:2e:e1:d4:21:43:be:2f:2d:f0:44:
                    ba:20:cf:d9:d0:61:dd:2c:27:00:75:00:8c:34:20:
                    eb:c6:33:5b:f5:0d:7b:74:06:d6:8b:5d:e6:c8:e9:
                    62:82:42:d2:67:44:0e:c5:87:f8:7c:ea:ac:7a:34:
                    82:71:74:b6:08:fa:63:03:7a:3b:fe:5d:84:c3:a2:
                    81:56:5e:fe:03:b9:f9:df:29:d9:0d:9a:cc:65:85:
                    98:70:cb:ca:31:fc:61:f2:63:78:0c:57:6c:43:2b:
                    4e:ae:6b:00:6b:95:4d:ee:48:0e:d0:10:70:8e:5c:
                    ae:60:1a:a8:51:c4:7f:83:cf:28:67:2a:db:9c:83:
                    ee:f0:60:b8:ad:16:69:cc:17:33:5a:1a:93:db:8b:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EA:44:23:1B:E3:CE:A6:34:8B:40:8E:46:99:40:FB:BF:83:C2:85
            X509v3 Authority Key Identifier:
                keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:78:b1:a6:60:e4:98:52:b6:f0:14:05:c2:9f:49:02:4c:01:
         b0:ef:e3:65:0c:1c:c4:cd:d3:c3:37:2c:d0:c3:14:7b:3e:4f:
         c4:aa:be:c0:c1:1a:9f:f2:a5:5b:0d:54:88:49:57:40:4c:4d:
         74:d4:eb:47:7c:1b:68:7e:fb:b6:99:f9:b1:e3:df:52:c0:3e:
         d6:88:3a:2b:67:2f:11:f3:ec:7d:02:87:5f:7a:1e:49:d8:24:
         06:ed:13:0e:35:65:f2:34:15:1a:5f:e9:24:d6:64:96:43:c0:
         17:12:4e:04:d2:e6:07:b5:5b:28:36:17:44:35:f5:e8:91:44:
         f1:89:ca:a1:1c:d2:65:e1:32:63:17:53:48:6d:be:a3:96:bf:
         03:8f:82:0b:d5:9d:17:de:7e:0b:4a:df:61:8d:b2:dc:38:08:
         4e:92:16:3d:e1:49:79:b3:2c:8f:66:50:54:93:b8:85:af:07:
         b6:31:5a:b1:17:10:88:08:a1:6e:ee:f2:a4:ab:13:20:da:4c:
         c5:51:c6:60:2d:a4:d9:d7:25:a9:77:7f:c8:bb:73:f6:16:ad:
         1d:5e:08:d7:15:9b:f5:09:e2:f5:49:6c:08:83:e4:8e:c1:66:
         75:38:0c:8e:1a:19:32:97:52:04:c7:65:98:8b:cb:27:12:85:
         bd:ff:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:10:53 2024 by rpki-client on console-ams.rpki-client.org