Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File:                     OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier:          GQKo122eeQpFuMi7rq36RFx+0EkD/lvGNEgZtX5JOhU=
Subject key identifier:   77:07:95:F3:E6:74:3E:0F:F4:7C:19:27:6D:8A:30:E9:89:F6:E5:F9
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer:       /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial:       018F8891E4D4EE56DEC65564FD24D92DE36C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 22:00:13 +0000
Manifest this update:     Fri 17 May 2024 22:00:13 +0000
Manifest next update:     Sat 18 May 2024 22:00:13 +0000
Files and hashes:         1: 1Iq7ArAbqFXmT5LCupw2cLc9HkQ.roa (hash: UBqqDjL0br0FETY2JUZxP4ik15xaPluvx8MDgPjqPko=)
                          2: 2BzP0Hk0faRtUkNou8yNsGsijl4.roa (hash: RHlBBE8sYyiSvLuwrv2BJXyJwvm8cetgz79PRBnhmx8=)
                          3: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: dADWRHHM1B8e497QnEi+BDnKpLf4qORDufBZm7Vf+l4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:e4:d4:ee:56:de:c6:55:64:fd:24:d9:2d:e3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
        Validity
            Not Before: May 17 22:00:13 2024 GMT
            Not After : May 18 22:00:13 2024 GMT
        Subject: CN=770795f3e6743e0ff47c19276d8a30e989f6e5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:0d:6e:a2:fc:51:42:da:33:fb:62:b3:ad:
                    1d:0a:c4:09:9f:fa:0c:3a:29:ce:a5:43:ea:58:a6:
                    d5:dd:68:b3:3c:bd:ba:41:f2:7f:d1:d0:96:15:7b:
                    74:38:74:3a:50:01:27:6f:44:9c:7a:ea:52:64:96:
                    fe:1b:54:8f:e6:29:5b:ef:29:a7:95:81:7e:24:b9:
                    f9:12:04:e2:de:7e:6c:3f:b1:5a:12:d8:fc:f5:67:
                    28:a8:c7:57:68:7b:2c:80:3d:13:38:e8:44:e3:66:
                    3e:ba:6a:3b:4c:27:8f:98:8d:ab:14:f4:e2:a1:b2:
                    b7:69:8b:19:f1:69:cb:1e:5f:1c:16:97:44:7c:ad:
                    48:d3:ff:a3:3f:d2:3c:fd:ec:d7:64:9e:cb:5d:a8:
                    94:e8:bd:09:9e:28:19:80:4e:7f:a6:66:19:ce:66:
                    66:95:e5:2c:6a:5d:4c:90:56:e1:bb:22:9a:34:45:
                    7c:b4:68:dc:66:54:27:43:f0:ef:35:47:23:95:0f:
                    77:fd:45:ee:b0:74:8a:5d:d0:95:5e:f2:e7:4b:b3:
                    da:70:65:8b:3c:25:51:16:c3:5e:ea:a9:f7:c2:ba:
                    18:00:5e:f4:14:c4:fe:c5:49:1e:10:f6:ff:e2:c0:
                    54:06:6d:0c:7e:83:a2:ed:c5:41:39:09:69:a5:be:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:07:95:F3:E6:74:3E:0F:F4:7C:19:27:6D:8A:30:E9:89:F6:E5:F9
            X509v3 Authority Key Identifier:
                keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8d:ef:2a:50:6d:e3:ea:26:1d:55:fb:88:af:b5:97:31:c5:
         78:c0:fc:3d:d7:81:46:40:c8:41:47:da:f4:cf:a1:1c:0a:2a:
         00:7c:65:d5:9b:09:97:95:67:0f:85:e4:f4:de:1b:e8:37:26:
         b2:90:a1:24:a9:d8:55:75:71:cf:91:ef:56:8e:9d:b4:4d:c6:
         d6:fb:e3:34:76:4f:91:b8:fc:98:f2:ad:ef:15:4c:0e:43:75:
         dc:0b:bf:36:ee:8c:a6:05:c7:fb:9c:75:c2:0d:ab:fc:09:b7:
         3b:7d:d8:50:cc:d7:83:b9:bf:40:59:37:bd:01:0c:e7:81:54:
         15:b7:3e:d3:bc:29:64:12:0d:d0:2b:2a:76:2b:f1:9b:d6:91:
         ce:25:ba:c9:74:c3:68:c6:04:2c:47:09:24:44:a1:e3:49:87:
         b6:ca:47:4a:78:99:30:68:6a:c7:ec:f8:ea:e9:6c:4c:93:57:
         c7:54:f9:50:0a:85:7b:0d:14:c3:7e:f7:e5:1e:08:10:52:c4:
         cb:5e:4d:a2:4d:86:23:ee:13:39:68:8f:31:74:c2:72:d0:a3:
         90:ba:24:32:1f:54:7c:a5:f4:54:97:25:b5:35:9f:3a:c4:32:
         74:62:97:f1:ef:ed:cf:33:7a:e1:ba:fe:51:56:0a:23:b8:7d:
         3a:c6:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:49 2024 by rpki-client on console-fra.rpki-client.org