Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File:                     o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier:          ncn3HgJ/Z4P2XVlCoQRkKF0+nhs0I7vFj/TAvyMAosQ=
Subject key identifier:   F5:0C:56:36:73:78:9E:EB:78:93:8B:6D:25:6B:51:91:09:02:13:B1
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer:       /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial:       01901E8FC891C5204D8715218B4C6539B8A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number:          0D31
Signing time:             Sun 16 Jun 2024 01:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:57 +0000
Files and hashes:         1: MwZjzrtsAG-MRtw9Awj96SS43O4.roa (hash: 8vkFAO+/G+9ekN/DUotGILVPGRXajsc/sv2URl9GxAA=)
                          2: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: UGKbmmIl32ZTGiOQ5WobprghoXh6nS+wT8CQQyV2Fo8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c8:91:c5:20:4d:87:15:21:8b:4c:65:39:b8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
        Validity
            Not Before: Jun 16 01:00:57 2024 GMT
            Not After : Jun 17 01:00:57 2024 GMT
        Subject: CN=f50c563673789eeb78938b6d256b5191090213b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:2d:75:27:fb:18:ff:b7:3d:dd:8b:ee:8f:
                    12:af:ed:d6:8e:0b:21:bd:8a:24:59:3e:d4:13:64:
                    4d:0a:6c:12:30:79:09:62:44:a8:ef:eb:fa:da:ae:
                    de:56:d8:64:a3:45:d3:11:54:39:97:26:a2:a7:a5:
                    32:f3:0b:d9:ee:16:0f:76:78:58:10:ec:c5:3e:03:
                    16:98:96:ef:0e:b2:35:bc:d3:93:02:7f:b1:57:03:
                    ff:cd:2d:36:09:be:8d:15:71:4c:9f:d3:55:d6:c5:
                    4c:54:2f:23:d7:55:b4:44:b6:77:6d:b4:87:06:e5:
                    39:34:61:13:e2:0c:e0:3d:7d:31:24:1f:be:9c:28:
                    8d:cd:a4:b6:1e:ae:dc:f3:c6:21:39:b7:a0:be:fa:
                    ec:6c:c8:35:d9:2b:91:08:b9:fd:39:94:cf:f0:b8:
                    27:cc:ee:15:fa:1b:63:3e:cf:df:bc:6e:42:b7:df:
                    20:b4:51:00:7d:e4:25:82:64:08:56:5f:66:16:d6:
                    5b:4d:64:01:1c:d5:3d:6c:27:67:02:b0:08:ee:66:
                    0c:94:db:61:a4:69:43:88:21:7d:78:a9:78:78:47:
                    ad:82:c8:2e:2d:ef:45:12:28:ae:d7:bc:52:39:2e:
                    0e:e2:21:1a:44:c1:d4:10:97:c8:23:ea:ee:49:b9:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0C:56:36:73:78:9E:EB:78:93:8B:6D:25:6B:51:91:09:02:13:B1
            X509v3 Authority Key Identifier:
                keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1f:27:86:58:59:e3:d9:74:79:f5:b3:43:09:b6:5d:ba:59:
         d9:28:d2:0a:f9:a8:50:0f:f7:78:4b:3d:ef:f5:8d:ef:c3:ab:
         3e:22:fa:55:df:86:6c:08:59:95:1f:09:4e:d7:a3:82:9f:18:
         69:fc:c7:54:1f:bb:5f:4f:fe:f9:d6:66:76:5d:a0:74:21:e9:
         05:f5:89:5f:24:6b:cc:13:a2:c9:b5:13:87:88:5b:30:23:1e:
         fb:90:43:9c:fb:48:21:47:74:95:e8:fe:7f:8a:28:69:5b:8f:
         40:f2:8d:a5:22:fd:ac:66:22:23:b9:30:fa:4a:8b:0d:b2:6f:
         37:c3:0a:a6:f8:22:ad:ef:22:2e:1a:f8:6e:d0:6c:bc:58:35:
         86:a7:44:ca:11:1a:8b:8e:08:60:50:ba:41:b0:03:b6:85:ef:
         06:8b:55:e9:34:96:7e:0a:a5:50:83:38:40:80:e7:7a:cb:d5:
         84:33:10:1a:e1:26:97:91:d3:48:aa:0c:83:66:6e:b1:95:e8:
         5d:a1:46:03:41:7c:59:25:59:6d:08:68:e3:56:5f:85:d0:9f:
         83:2f:64:04:6a:4d:bd:c2:ad:29:cb:10:35:49:8c:e4:5d:ba:
         5a:99:31:48:7f:18:41:15:6e:db:5b:9c:4a:13:c5:4b:be:15:
         ba:5a:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:31 2024 by rpki-client on console-fra.rpki-client.org