Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File:                     oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier:          QPfkcNLPqO0KbQPanlylwWmbllRCLEfNg8iC36hmTVk=
Subject key identifier:   3B:4E:4D:66:0B:ED:69:7C:3F:59:B0:8A:EA:7A:8E:7F:23:F6:9B:8B
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer:       /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial:       01901BFD5A03C122FABBEFA5340B0645E384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number:          0FCA
Signing time:             Sat 15 Jun 2024 13:01:46 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:46 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:46 +0000
Files and hashes:         1: 2Ii0pqouQrFn8lOhNpWIXyDcXKo.roa (hash: t4I0yQn9Vh+luN2DRJtN3n5tOJhGSJrPpQ17a6chr40=)
                          2: HKGtF43rQ9pNZkcJDyxpPfRgN6o.roa (hash: sBhMqwBlMDrCb9jKaiflGzO23UnCb66CkZM60roAEMI=)
                          3: VP_7OyMfyoYw7zg71gutgn6A9Qc.roa (hash: qMpGcPyvLOJDVPIYj5BJ3eyOlsXEqLrzWfIBDXuAJrU=)
                          4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: zD3w06bZOB+VIzyr/PKR5esYvpQo9SrA2QPwk5T3MkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:5a:03:c1:22:fa:bb:ef:a5:34:0b:06:45:e3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
        Validity
            Not Before: Jun 15 13:01:46 2024 GMT
            Not After : Jun 16 13:01:46 2024 GMT
        Subject: CN=3b4e4d660bed697c3f59b08aea7a8e7f23f69b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:e6:12:c0:c1:33:39:aa:1f:6a:d8:cd:9f:
                    17:32:b8:0c:49:c0:11:86:ff:a9:7b:78:aa:26:d7:
                    b0:f8:7f:e1:9c:d0:23:61:3a:e0:a2:79:87:45:c7:
                    f6:3a:56:75:b3:1f:5a:07:19:87:9f:60:19:e4:29:
                    91:ee:90:a5:57:60:e5:14:8b:70:49:ab:f3:ca:c8:
                    65:2f:51:f7:73:e7:77:b6:75:8b:de:48:8b:6a:40:
                    62:e0:cd:de:63:9e:4f:e1:19:95:c5:c9:e4:56:02:
                    25:9a:e8:d4:f7:6e:3a:39:e9:75:ec:b7:4f:3a:2b:
                    f1:d6:0c:49:21:88:22:6d:59:ef:29:b0:03:d5:60:
                    7c:52:2b:d7:ae:b8:ab:be:eb:ea:18:23:10:ca:da:
                    1d:60:a4:87:ad:bc:6e:bc:43:c5:a8:67:68:26:c6:
                    d5:fc:18:83:72:00:eb:12:4f:4b:f3:6f:15:91:12:
                    58:6e:d2:0c:bc:e6:b3:db:6a:a1:c2:87:70:b5:ca:
                    d5:33:4c:53:f1:76:0c:6d:c9:4b:d6:32:c8:04:87:
                    82:ac:f2:07:78:e2:bc:30:8d:de:39:b4:7e:57:af:
                    fc:68:5f:2d:10:30:3b:5a:49:4d:b8:ec:84:f9:a5:
                    2b:ec:83:9a:e0:36:04:01:fd:3c:97:85:1c:57:d9:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4E:4D:66:0B:ED:69:7C:3F:59:B0:8A:EA:7A:8E:7F:23:F6:9B:8B
            X509v3 Authority Key Identifier:
                keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:66:67:37:88:9d:46:27:a6:30:2b:ee:49:1b:db:5f:6b:46:
         48:b6:8e:35:a0:08:1e:2f:47:db:48:50:d1:4b:95:e3:44:8e:
         77:c4:eb:2b:96:3d:95:4e:82:32:c5:49:c0:f2:3f:44:2b:51:
         a5:75:09:a7:97:f8:55:c7:dc:b6:f5:ac:ff:05:6a:52:5a:44:
         46:2b:36:92:07:8a:05:03:68:b2:a9:1d:92:86:d8:dd:56:77:
         5a:c2:a8:ab:fc:a3:ae:23:92:83:3b:b4:c3:91:df:1c:e2:97:
         7b:7f:e9:af:45:14:3c:42:79:ea:6e:3f:58:1c:f8:a8:5d:9b:
         62:09:17:43:00:5f:1a:e5:1e:23:e9:16:eb:31:0c:be:55:e7:
         cc:5c:e0:db:18:dc:33:40:05:40:98:3f:39:f1:0c:cf:a7:b8:
         99:a8:52:24:dc:aa:14:be:67:43:1a:a0:81:43:c2:e6:29:0c:
         0c:d5:7f:8d:4a:24:ca:76:8a:4f:49:65:57:5b:10:f6:81:76:
         af:00:b0:5e:b0:af:da:e2:f6:62:9a:98:cf:51:c9:69:b8:17:
         73:f8:96:5c:b9:65:b8:15:8f:1d:22:b6:4d:f3:69:e8:52:c2:
         a8:d6:6a:6c:58:56:86:09:8d:ec:93:28:3e:e0:46:00:46:cb:
         d2:43:67:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:42:16 2024 by rpki-client on console-fra.rpki-client.org