Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File:                     oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier:          PO+XxEVhMpLgASjxXnGM+ioRo2Vdc/FWi8aojFGF5zw=
Subject key identifier:   5C:AC:E1:39:85:82:2F:3D:7E:60:51:13:B7:E0:B0:03:94:D5:2D:09
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer:       /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial:       018F874AF6174E3597F7590CDB925EB8995E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number:          0112
Signing time:             Fri 17 May 2024 16:03:07 +0000
Manifest this update:     Fri 17 May 2024 16:03:07 +0000
Manifest next update:     Sat 18 May 2024 16:03:07 +0000
Files and hashes:         1: iq9XwmtDI3DQNq_CNJaNO_CV8OA.roa (hash: x5F9SSdHSoC4P09UO6M94gdC/LEyoqDTrVT1yt4VP2o=)
                          2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: c+/IxeKMOEEskL/DpZlVuZgLw9eIKCH2lc+9gN4Ak9U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f6:17:4e:35:97:f7:59:0c:db:92:5e:b8:99:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
        Validity
            Not Before: May 17 16:03:07 2024 GMT
            Not After : May 18 16:03:07 2024 GMT
        Subject: CN=5cace13985822f3d7e605113b7e0b00394d52d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:72:45:08:57:2a:88:14:87:9f:9d:08:c1:
                    ec:f6:3b:b5:68:fc:d4:b4:9e:d9:76:d7:40:7e:54:
                    59:c9:07:7a:55:44:5c:8d:dc:4c:ce:dd:63:3c:13:
                    fa:12:34:51:e5:26:53:a1:af:f9:83:63:61:65:35:
                    84:e6:2f:bf:4e:3f:41:2d:2d:bd:b5:34:26:7e:0e:
                    b1:a7:ed:36:75:56:37:51:85:5f:88:6e:78:fa:b7:
                    87:b5:5b:df:96:13:c0:9c:40:b4:bc:2c:b6:19:0f:
                    46:95:b6:24:01:2b:4a:3a:1a:fb:74:e9:68:2a:d6:
                    98:6c:69:ce:4e:39:1f:51:e3:f6:d0:89:09:29:5b:
                    e4:22:af:47:8a:27:1a:41:a3:3c:bd:15:db:4a:5f:
                    19:ae:7e:99:6a:65:e4:12:88:dc:cb:87:98:10:ac:
                    06:73:be:02:64:63:b4:43:1c:30:95:77:30:e5:a0:
                    0a:a3:f8:83:2f:74:71:6e:20:c5:8f:4a:f8:87:57:
                    fd:f3:c8:af:c3:65:00:71:ef:eb:e8:d1:e9:2c:7b:
                    ab:6e:0b:03:9a:a5:e1:cd:ff:e7:7b:8d:7b:c7:e6:
                    17:a1:72:10:b5:7e:d4:11:cd:81:17:34:15:77:b7:
                    f1:9a:a8:20:15:09:64:e4:b6:2d:cf:44:02:17:77:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AC:E1:39:85:82:2F:3D:7E:60:51:13:B7:E0:B0:03:94:D5:2D:09
            X509v3 Authority Key Identifier:
                keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:a7:36:65:62:0b:7d:f2:77:39:2e:66:4c:4e:d6:c2:45:
         02:0e:a9:02:68:ef:61:21:e8:77:da:2a:96:b8:c1:a1:93:0f:
         6a:14:2b:7c:ee:34:3e:d2:f3:12:83:c3:1e:2a:ee:52:fb:16:
         52:1d:c8:3e:21:11:f9:7a:00:1c:6f:05:43:22:e7:1c:98:e8:
         7e:82:0c:3b:a4:7e:a1:b8:f0:c3:ed:1d:2b:2a:51:3e:6c:14:
         67:5f:b4:d6:63:55:88:a2:b3:de:15:d7:5e:90:ac:ff:6e:a5:
         ac:fd:c4:64:8d:48:60:45:94:9a:ed:27:61:97:48:cd:83:ff:
         8d:9f:14:1a:da:fc:29:74:83:7b:e6:09:46:2c:f9:7d:e9:90:
         02:7f:69:af:e3:da:ca:9f:62:c2:ff:3a:2e:4d:8c:a9:fc:db:
         a6:d7:4e:79:b2:67:b6:35:af:4d:c5:24:47:a3:d8:0c:0f:9d:
         be:ef:ea:a0:21:2a:73:ae:92:91:27:bd:79:68:5f:e4:f6:63:
         f6:86:2e:55:52:5b:bd:40:df:45:55:43:ac:4c:9a:35:71:ca:
         3a:d3:ff:7e:da:f5:fa:68:01:c4:45:c1:e2:a1:b8:8b:f0:14:
         ac:92:28:26:62:a5:70:96:56:89:34:c9:82:6f:c0:9c:48:68:
         47:59:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:31 2024 by rpki-client on console-ams.rpki-client.org