Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File:                     OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier:          utLLDv+DkOQ75+EquOEaKjNhMaD4MnBXVBD7uI9g7do=
Subject key identifier:   C1:2A:88:1C:D1:43:A7:01:FA:9B:66:4F:C4:3B:81:08:0C:38:48:94
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       018F6598D9F8DC9874EA0F39938736D7619A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number:          1173
Signing time:             Sat 11 May 2024 03:01:07 +0000
Manifest this update:     Sat 11 May 2024 03:01:07 +0000
Manifest next update:     Sun 12 May 2024 03:01:07 +0000
Files and hashes:         1: 2DCNhxfoavfo11LT4hYvKEAYMfo.roa (hash: Yj5oNbp5Ysf02sjS+XSA4JvHyIMVOZOl7GhAOHpp7/s=)
                          2: 2OiTSIuhSeTnwlzsjfChQLLe5q0.roa (hash: MnSEeFPBSvxsUkllu1Ik4O3r2urmqc/A3LgZaEKJCnM=)
                          3: 3IQqyO9fJBa1I6ky_oO8SIUsDUo.roa (hash: kyqQ8Kuk6WcYOo2ed7rf7uxKgp2DICcg1zXbMlp9UvA=)
                          4: 6zy-yGteu_QOVFVheLJN_EIBs-s.roa (hash: ZAlLfdGsy3DtB3HP6kSfOQPV49frEoIuZGrOEiK2PSU=)
                          5: AM3vkxlcuWo38gRTThiDzwkXbuQ.roa (hash: uLcqK4GHbNxgZJd7xr3WOkiDVO7/K8kBVuiKqpflamE=)
                          6: Bkc9iWc5ZnaYbOuwLo34Hv4x7FE.roa (hash: 0p5uSvaK0z/WGxzSzBdFiT0s0O82Vy1XlgRvXW/XzSE=)
                          7: CNnnlNkzGN9E-RJPLlBZNlvnGSM.roa (hash: ix9zEGDdUjxM/R2MWsr6ejb5+aPhNefVqqenK5xnRAE=)
                          8: FU6z30DCjQEgb-72ZagDp3c65sQ.roa (hash: su4J6iep0+gHzratHsQW6jYI1AiMjD+jU173/8ycl/w=)
                          9: FwnaWIz2mF3qmyQF3TgYaddFip0.roa (hash: zDVL4fF1+4JmkeNJFodWO/2zK1Nys25GwDGc6Q/jpXY=)
                          10: Jz5y5G95sSvH5ArYkJm9xIKyXyw.roa (hash: jkaLRXBT0MqjZV0cjVtdUP73N0w+WYp/xnyTle/OOHk=)
                          11: LOKXzhyRbwzG_hrS1YAPYSCG45A.roa (hash: PU0bWjY54ItE6c99rFrvQCEZcmOkLKNdUqfP5HFfRRM=)
                          12: ObFNvYTM4Vv4BtKCvMozzqY-SJ8.roa (hash: oU4GTOD4WtYCL1yiDaa9fSuoWuwNEUuecc+QLnmDFZg=)
                          13: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: ALxHR5lZ+eHT4/TvRWJwOi9eX9NlkWu044IlRg2mjtc=)
                          14: P3d0hMDzpnWmmvvZffbbWYQIi9U.roa (hash: CMzo0yfhmf8AiXZGglyDkJDYjHqOZQJBtJb1oGFsGgw=)
                          15: Xt6-8lfZuqjbmZrxqMVMn-sdalY.roa (hash: tpGJBi/5tV9ewTbLARxH0rGH6g0b4vcB+Z4Xlt/OaC4=)
                          16: fN8NDnxCUfZEKFZ_eoNGOjxvkyY.roa (hash: Evj1tbQ3gAo87o+97aSEvUMzpqxEMM2P9tx1vR6Izqk=)
                          17: mjwnBLyzBImQhPNxHzvICuw6hM0.roa (hash: 1qpfM/xpHgDJ8BFfcOR8gLapWBnub+ga3s8rJjHQHWA=)
                          18: nTsUj7kifBjaOhZ7KP00q6rDg7k.roa (hash: lz+vPetPmK6koFSS3ezJ61iozctQZOXK9IbQY4Nq8Qw=)
                          19: pHKhVq1doHITn9_tDjgdnE_tA1Q.roa (hash: +w7JelZGqskJyzeZ4sgG1hLCY1609DEYT6jj36dD9wE=)
                          20: tdMsMQN57N51aIOR_QbAsSj_3nA.roa (hash: 7eRnY4ouoJPajHdojLFwelxt5ieoutooDogyoWKiB1A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 22:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:65:98:d9:f8:dc:98:74:ea:0f:39:93:87:36:d7:61:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: May 11 03:01:07 2024 GMT
            Not After : May 12 03:01:07 2024 GMT
        Subject: CN=c12a881cd143a701fa9b664fc43b81080c384894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:14:49:7d:f4:16:70:b6:6c:77:a6:a2:6d:
                    c0:a5:30:20:88:fc:4c:12:c8:ee:ee:60:6f:f6:44:
                    9c:7e:ae:ec:d5:21:18:e2:4d:1b:9b:99:6a:82:de:
                    ce:95:72:1a:8d:03:57:01:3d:15:6c:15:21:ab:b4:
                    ef:50:34:62:5a:9b:d4:3f:71:5a:f5:5e:a1:fa:5a:
                    97:41:09:ec:e8:c8:94:0e:08:cd:b6:97:a3:d7:fa:
                    47:c5:cc:d8:ff:40:c0:b0:79:13:5c:32:82:f8:6d:
                    93:5a:7e:68:b7:12:08:bc:8f:43:24:00:01:fc:c9:
                    4b:08:1e:e3:e0:25:06:fe:8b:85:4e:18:c0:dc:31:
                    62:69:e7:af:fc:f7:10:19:a0:b0:99:78:ba:24:62:
                    5f:5d:3d:04:7e:d1:84:19:db:c2:05:4b:6f:35:ab:
                    fc:2e:d8:a5:af:69:cb:e3:95:8a:df:c9:b3:88:b8:
                    a7:53:ca:71:9b:79:6b:9c:49:d7:79:bd:8a:0d:70:
                    30:06:fe:f2:9f:97:d2:1e:f7:ad:fa:d0:85:03:1e:
                    d5:3f:c3:12:31:a2:e4:dd:42:48:c7:c8:16:52:76:
                    51:ea:61:16:34:8a:f7:8a:11:46:37:2e:3a:f6:a2:
                    f2:15:a9:2d:2a:1c:7e:3e:c6:fd:ff:68:23:91:fb:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2A:88:1C:D1:43:A7:01:FA:9B:66:4F:C4:3B:81:08:0C:38:48:94
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:4b:27:23:3b:26:3b:00:02:4a:0d:ed:df:05:f6:c4:22:
         60:76:73:2e:84:3f:88:bb:ba:77:64:f1:ec:42:37:17:fa:40:
         81:91:94:45:89:35:7b:6d:6e:c7:8a:24:5b:bd:fa:7f:9f:eb:
         8f:c0:02:76:4a:00:e3:be:7e:2c:eb:f4:02:23:ce:c4:55:88:
         86:4f:50:bc:f8:3f:1a:ca:1a:49:b1:d5:f7:27:6d:5a:1f:23:
         df:92:0e:06:83:09:66:f2:2a:6e:49:bb:46:e3:75:a1:ee:e1:
         b7:b9:0b:93:25:b7:1b:84:90:4e:50:8d:10:7d:e0:bd:f0:0c:
         93:5e:01:49:f8:fb:24:26:6b:94:a2:c4:ee:e0:a5:9f:6b:35:
         3d:4d:96:dc:24:08:8d:8e:72:2d:b0:a3:57:6f:4d:ca:68:3b:
         2a:ae:80:70:9b:f6:5d:76:c3:95:9e:cb:94:f8:c5:99:ed:7e:
         d7:e7:34:32:4b:e5:0f:d0:60:30:49:19:59:83:4f:52:26:9f:
         a2:5c:81:7f:f9:fc:5a:fb:2f:73:1f:cf:08:5d:5c:04:5b:d4:
         2d:3f:66:15:dc:bf:b1:50:c1:dd:c7:fc:8d:1a:37:21:87:9d:
         49:ce:de:33:f8:09:48:22:d4:5c:91:c8:ac:de:4b:5f:58:c4:
         e1:8f:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 03:52:24 2024 by rpki-client on console-ams.rpki-client.org