Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File:                     O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier:          h7mTI0lGQHlydqZlmb5jOUAS7kbpe6MoIhTjYqH2R7w=
Subject key identifier:   DD:14:5D:2D:93:8B:FE:03:4D:9D:76:AB:E2:C3:27:59:F2:44:98:04
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer:       /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial:       01901D0F13D5DF7C665F8DA0BA8E5C059EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 18:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:45 +0000
Files and hashes:         1: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: 76rTWaR3ScwzyHVuBOCMtJOLYPMFllj2ZNzzkl+SkvA=)
                          2: k3fagCc3bOhahQQMVkgzwRJr2zY.roa (hash: UFQMgK8euAAfI6kCRrQEjBwnu0wTn7Cx7tq2vVUa2e0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:13:d5:df:7c:66:5f:8d:a0:ba:8e:5c:05:9e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
        Validity
            Not Before: Jun 15 18:00:45 2024 GMT
            Not After : Jun 16 18:00:45 2024 GMT
        Subject: CN=dd145d2d938bfe034d9d76abe2c32759f2449804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:f4:fc:61:c4:02:93:7d:2f:a2:3f:87:8f:
                    92:f5:f9:43:df:3d:20:fc:73:4f:1a:06:24:e9:d0:
                    0a:aa:3d:a6:e4:19:ea:42:8b:ca:b5:1d:e8:f9:db:
                    22:a4:71:25:f9:72:c4:77:1d:3c:35:8e:26:9a:78:
                    b7:6a:61:b8:29:3a:fc:4d:98:31:29:63:d0:e2:a5:
                    aa:43:c0:6b:56:51:4c:df:0e:57:8a:91:53:8a:0f:
                    f3:56:a7:ef:22:da:4b:cd:9d:b3:fa:67:17:ff:27:
                    87:57:60:c9:a3:d2:eb:12:f7:dd:21:6a:22:89:8f:
                    b6:ea:1d:e3:31:19:52:a0:c6:7b:4f:6e:a0:16:1a:
                    6e:47:f0:70:8e:02:fe:4c:a4:74:69:80:b1:19:32:
                    5a:fe:70:70:b4:a4:fa:87:dc:38:b6:8f:27:59:2e:
                    22:54:8a:31:da:62:3a:1c:75:a4:8f:29:cc:85:7c:
                    90:0a:1b:77:0c:7b:3b:21:a5:3c:20:61:2b:a8:1e:
                    55:a4:c2:f2:de:e4:62:f9:0b:10:6f:20:a4:58:4e:
                    7a:02:ac:82:7a:83:f5:84:f3:d3:ae:5f:22:df:e3:
                    13:f6:2a:1f:e8:21:97:c8:ea:ac:6b:b4:43:a1:8c:
                    d5:56:d1:e4:02:62:c9:92:4e:b5:13:98:c3:17:c9:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:14:5D:2D:93:8B:FE:03:4D:9D:76:AB:E2:C3:27:59:F2:44:98:04
            X509v3 Authority Key Identifier:
                keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:9b:5f:a9:c8:18:54:82:35:76:b7:91:6b:b1:e1:72:6d:
         e3:1e:b3:2d:56:ce:d8:7f:6e:2d:ad:c6:d4:23:f3:58:82:80:
         5a:cc:cf:40:ca:3a:25:ca:e5:1c:d1:61:a7:0e:d5:99:d8:d8:
         79:18:19:78:f2:a8:aa:a4:5c:e6:fa:23:57:54:93:46:b0:a3:
         41:28:d6:94:40:a3:f9:f5:10:fa:8a:e5:48:f0:96:f8:50:f7:
         95:36:c0:25:a1:cf:45:c1:33:b5:e4:7c:62:2b:48:06:27:13:
         0b:f4:ea:02:d2:61:34:fb:39:6f:60:d0:e7:09:c5:dc:44:43:
         44:de:5c:86:e7:85:1e:4d:54:d1:51:6c:ef:07:42:dd:36:80:
         d7:46:27:93:4b:56:02:28:34:44:eb:3d:a3:a8:bb:24:0e:0f:
         02:9b:5f:4c:ad:8d:b5:2f:c2:34:27:3c:77:bc:1e:71:46:e7:
         d3:a8:98:46:1f:69:15:7b:ac:fd:ba:28:97:f0:54:ba:1d:09:
         cf:cc:eb:ac:d2:19:96:72:61:5f:66:ca:0c:77:4b:40:75:1a:
         46:16:c4:47:6b:c8:a1:6c:31:03:66:eb:48:21:99:09:b2:6e:
         b0:4d:70:8b:49:6c:e6:a8:eb:76:7b:2b:46:db:0c:ec:a1:a9:
         b3:42:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:10:11 2024 by rpki-client on console-ams.rpki-client.org