Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File:                     oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier:          OkAkEkfm22VDdyJHTkeuJl1CKcqXOAwsPOWpNOaARps=
Subject key identifier:   F4:11:D8:1F:70:9B:7E:91:A3:22:0E:1F:A2:38:07:B5:F7:32:D4:16
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer:       /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial:       018FB4FDE822AB125C70F07E8D694249EDDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number:          0C36
Signing time:             Sun 26 May 2024 13:01:29 +0000
Manifest this update:     Sun 26 May 2024 13:01:29 +0000
Manifest next update:     Mon 27 May 2024 13:01:29 +0000
Files and hashes:         1: d-swVZ6s8_CIyC__i_sA_O1swd8.roa (hash: qCypOvLibuKP2E68GRothmm8lo6B/mICB0EA5T+oEpI=)
                          2: gdXpdvEUcuDJqJKHVPoJ7ZcSKg4.roa (hash: 7/sv4/tvbjwOgaSFBGDjtMlWShEwPtxWendJmB37GNo=)
                          3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: 93xIH4acsop71M0ob59VWorcKsQX7cJOsJitGNNUQMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:fd:e8:22:ab:12:5c:70:f0:7e:8d:69:42:49:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
        Validity
            Not Before: May 26 13:01:29 2024 GMT
            Not After : May 27 13:01:29 2024 GMT
        Subject: CN=f411d81f709b7e91a3220e1fa23807b5f732d416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:1a:dd:a4:8d:ce:84:2b:a7:6d:c7:f7:27:
                    e7:0c:e2:bf:09:b8:ae:d7:b6:ed:eb:aa:0a:f5:5a:
                    ef:bc:16:b9:cc:d8:06:95:0b:d7:f5:9d:62:66:57:
                    40:1e:01:d2:8b:06:d5:62:39:48:f0:d9:3b:76:13:
                    cb:84:ff:e7:5b:8b:8d:b0:83:b0:ca:d9:d6:f6:cf:
                    24:f9:86:12:f7:17:3a:3a:3c:56:f7:57:cc:e0:f4:
                    ec:b9:98:35:84:ac:13:69:b5:da:ac:48:d2:2e:11:
                    ec:02:69:69:75:8a:84:69:55:6e:90:37:85:de:d4:
                    49:20:2b:bf:ca:f4:09:34:4a:09:94:b7:2f:51:0b:
                    d2:93:14:2e:f1:d1:cd:79:46:45:cd:23:9e:be:af:
                    80:d7:50:ee:a8:b8:7c:0e:cc:23:35:a3:00:9e:16:
                    cc:db:fc:57:03:4d:c3:d0:f1:e1:3b:8e:cf:83:bf:
                    1c:f0:6a:27:fa:3a:76:2e:95:12:6e:ef:69:27:b4:
                    52:f4:f0:a4:58:d7:4d:0e:39:32:5c:60:7d:da:db:
                    96:df:d5:c6:d4:36:f7:9b:1d:34:c9:10:d4:7c:a5:
                    1a:6a:20:db:a9:14:fc:0f:10:26:6c:a4:07:f9:fd:
                    21:43:9a:69:9c:73:83:be:99:98:c2:ce:49:e1:79:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:11:D8:1F:70:9B:7E:91:A3:22:0E:1F:A2:38:07:B5:F7:32:D4:16
            X509v3 Authority Key Identifier:
                keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:44:27:80:11:ad:5f:9f:00:42:4a:92:3b:25:03:0b:89:d3:
         7d:35:f9:a0:3b:90:38:bd:2d:62:cc:0b:34:15:7d:59:1d:28:
         00:35:01:3e:73:bf:ee:74:06:a4:ae:65:e8:dc:63:0c:a8:3d:
         74:ff:31:61:9a:f7:c9:74:98:00:20:1a:dd:46:90:97:84:d8:
         54:93:60:b2:75:ea:79:c1:d8:65:ed:e7:e1:27:26:ce:4a:d0:
         f7:4e:ae:be:2e:39:6f:ea:9e:df:26:74:5d:80:a2:a8:1f:79:
         b6:2c:43:87:5c:8e:8b:b9:18:05:26:ae:b4:a4:d0:31:e6:68:
         25:b2:41:33:f6:41:01:4f:6c:46:1d:1a:54:68:43:04:23:31:
         a4:6a:69:55:b8:79:0e:3a:07:af:71:18:8c:92:f8:f9:b1:9c:
         08:60:c6:ca:8d:84:9a:ee:f9:ee:82:b0:71:97:42:47:56:cb:
         07:83:85:00:de:e7:8d:f4:b6:f2:82:f4:26:8a:5c:25:e5:df:
         74:90:d8:ce:96:22:ec:da:1b:d8:68:7e:20:1e:57:22:0e:f9:
         8e:a4:bb:82:14:39:77:57:90:9b:6a:00:f3:68:f9:91:04:9c:
         e4:88:ad:88:2c:fb:dc:4e:75:53:b0:34:1a:0c:e3:62:56:12:
         10:ba:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:09:08 2024 by rpki-client on console-ams.rpki-client.org