Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File:                     OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier:          W4HHyFg3ffCfIHPPAkkPfjIx+yh2YXWhk+HcAACLphU=
Subject key identifier:   B7:DA:44:2D:21:F0:37:AC:AA:D8:AF:33:7A:23:39:4D:E2:DC:60:3A
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer:       /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial:       019070F5157AC9B9C190BA0F2AF11E12EBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number:          08E4
Signing time:             Tue 02 Jul 2024 01:00:28 +0000
Manifest this update:     Tue 02 Jul 2024 01:00:28 +0000
Manifest next update:     Wed 03 Jul 2024 01:00:28 +0000
Files and hashes:         1: 7HY99KteH4PfsTqRBO5b4Tfv1kI.roa (hash: JoZ7RhkQaIIZtfLsVIMcq22Cc37XizQ7wSXpCUfyUAM=)
                          2: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: IAdy1rrDQbvObBx7CP+BQlEs6yAG3gK98cdoABhTw6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 21:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:70:f5:15:7a:c9:b9:c1:90:ba:0f:2a:f1:1e:12:eb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
        Validity
            Not Before: Jul  2 01:00:28 2024 GMT
            Not After : Jul  3 01:00:28 2024 GMT
        Subject: CN=b7da442d21f037acaad8af337a23394de2dc603a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:70:90:49:13:31:8b:b0:bc:2b:4f:d7:15:
                    49:86:dc:34:ab:7c:0f:d0:33:7c:0d:54:9d:61:d7:
                    cb:cb:fa:e7:a8:96:d2:00:8f:71:ca:c0:3c:82:11:
                    84:18:ba:85:f1:c4:c8:3a:27:99:d3:99:98:b2:ab:
                    89:16:2d:c8:f1:d0:4f:c7:b8:10:a8:9c:6c:1a:11:
                    30:01:6c:4f:51:ee:f7:90:2f:4f:7d:4c:a3:6c:b3:
                    9b:ae:88:6d:05:5a:17:08:f0:c4:c6:82:ad:c7:ec:
                    d0:04:a3:cb:71:8f:fb:12:c7:82:37:1f:c8:b5:0a:
                    e2:d4:2e:ca:d0:b9:23:a2:02:22:ea:ad:ef:34:ac:
                    57:8c:ca:22:b3:e4:56:53:af:ca:6e:44:f0:20:c5:
                    01:41:a9:ff:ac:ae:2f:68:9e:6f:e7:84:5b:9d:93:
                    0a:b6:e5:67:35:cf:8c:31:97:0b:85:9f:b0:dd:c4:
                    a0:1a:1b:88:23:c1:b1:70:54:91:5d:b9:0c:49:07:
                    da:98:d7:78:b3:fe:8a:ee:ae:3a:43:ef:b5:7d:28:
                    00:23:7f:6e:cf:fc:3d:a8:5a:69:26:ba:a8:93:5a:
                    15:c2:69:ec:35:41:56:e4:5c:25:a8:2c:60:d5:54:
                    8f:ec:30:73:e9:a8:f6:3d:5d:0e:1d:ef:06:59:c6:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DA:44:2D:21:F0:37:AC:AA:D8:AF:33:7A:23:39:4D:E2:DC:60:3A
            X509v3 Authority Key Identifier:
                keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:19:3a:e9:ea:72:99:ad:e2:35:23:6f:05:ae:ad:f0:30:5a:
         82:45:60:39:41:9f:8d:36:0b:2a:f7:9b:1e:36:f9:6a:e5:dc:
         56:ba:b4:e2:9c:d0:9d:07:df:ec:f1:ca:f9:60:a3:96:4b:3b:
         11:58:71:33:d0:f8:69:57:2f:0d:fc:84:a5:84:12:5b:39:db:
         44:0e:b1:43:ca:28:0d:e9:6b:9c:d5:2e:53:bc:5c:8b:e4:2c:
         d7:cd:8f:11:33:c6:6a:a9:90:c3:d8:0e:db:71:7d:67:bf:06:
         c5:64:b8:31:e7:89:ba:0e:c5:df:89:3e:92:df:cc:ce:f2:b9:
         89:8e:36:e4:1d:e2:fc:1b:46:e6:b2:d5:10:fa:c9:18:8b:6b:
         5c:d8:56:c7:d1:48:b9:00:50:20:83:12:4b:85:d0:15:32:10:
         57:f6:a3:61:69:ea:aa:cc:93:5d:31:3c:45:13:33:fb:82:ae:
         b5:28:04:8a:8a:b5:bb:70:fd:ce:9e:30:66:90:95:35:15:84:
         a2:85:d4:8e:6b:09:b3:55:9f:64:b7:4d:a2:66:0b:09:e4:c2:
         a7:2b:af:cb:08:33:60:42:1e:98:bf:4f:5d:69:4d:62:e5:ba:
         a9:90:10:66:34:7e:3a:27:87:04:12:46:20:6a:8c:72:75:c4:
         c2:1e:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 02:35:17 2024 by rpki-client on console-ams.rpki-client.org