Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File:                     osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier:          F4QyXe1peA9Y5JPovtsqRiZRBUNxomhoubOqZVPhK28=
Subject key identifier:   7C:58:94:6C:FA:BD:C9:A9:D3:B4:26:40:FF:E8:6B:26:85:6A:BF:9D
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer:       /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial:       018F87484604061FE2CD65F1677C9120EC23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:11 +0000
Manifest this update:     Fri 17 May 2024 16:00:11 +0000
Manifest next update:     Sat 18 May 2024 16:00:11 +0000
Files and hashes:         1: nbiagLn-a9y1x4zyQu5TPn_FYSM.roa (hash: jOr+1aMP8vug9/ihSygsQYVz+FJPeGjEJnShzVdeH78=)
                          2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: i4J5w/5LCgPA0qdP322XLEAxE3sIyD2tH1s29JnHTB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:46:04:06:1f:e2:cd:65:f1:67:7c:91:20:ec:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
        Validity
            Not Before: May 17 16:00:11 2024 GMT
            Not After : May 18 16:00:11 2024 GMT
        Subject: CN=7c58946cfabdc9a9d3b42640ffe86b26856abf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:0b:f0:d2:c9:18:0b:1f:6f:aa:59:9b:b5:
                    e3:d7:96:d8:86:26:bd:50:39:34:22:9f:ce:bd:cf:
                    97:49:f7:af:d0:36:85:be:ab:40:b8:5e:53:7a:0d:
                    0f:45:34:c2:49:98:41:af:92:74:0c:46:b2:ff:13:
                    ab:81:b4:e3:cd:19:80:e1:63:89:28:0c:01:e5:57:
                    60:ea:97:e6:41:9a:4d:dd:a2:68:e3:f4:e0:94:93:
                    cb:c0:8d:dc:60:55:f5:01:c8:4e:9b:8a:38:25:c4:
                    5d:f4:5d:82:aa:6f:fb:16:d0:e1:73:24:0c:35:fe:
                    64:ae:23:45:67:46:f0:e1:fd:6a:eb:67:4c:05:bf:
                    ce:79:d2:f7:ea:bc:a8:37:38:98:3e:4e:79:f0:52:
                    0b:fa:bc:6b:4f:66:42:7f:4a:46:92:5a:e4:e6:f4:
                    2a:a8:ce:e0:40:b9:91:a3:bc:8d:38:66:8c:93:62:
                    13:f4:cc:6c:28:97:3c:aa:9e:f8:5b:41:9d:3c:a6:
                    c9:eb:ff:85:fe:32:18:3c:3c:4f:f9:ad:6c:73:d6:
                    3c:52:76:11:56:14:84:b5:b8:3b:40:79:49:49:fb:
                    08:06:ad:76:55:d8:a7:56:16:23:f6:89:71:eb:5b:
                    c5:cc:98:5d:b0:bb:b7:a9:ba:f8:23:8d:8e:25:6b:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:94:6C:FA:BD:C9:A9:D3:B4:26:40:FF:E8:6B:26:85:6A:BF:9D
            X509v3 Authority Key Identifier:
                keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:57:7f:45:a0:4e:36:ef:07:94:c0:47:8f:c1:8d:39:f0:
         3f:43:2a:f1:f8:bf:cf:65:03:fe:25:5e:4b:73:d4:61:98:48:
         cc:17:e2:10:f0:2a:2a:15:ef:c0:6b:7c:73:dc:85:25:45:87:
         8d:fc:56:de:75:b6:59:5d:1a:84:f1:68:f8:b0:66:8e:3c:6b:
         da:14:87:19:7b:7b:79:ed:c1:c5:1c:89:76:a2:d2:73:b4:a0:
         1d:2a:96:17:6c:9b:b8:4b:b3:67:00:f0:46:f0:93:bc:98:cc:
         9e:f6:57:cc:4f:b7:48:04:a1:e9:31:06:a7:84:4f:b0:d6:e3:
         78:55:23:14:81:62:8e:72:48:85:ef:3a:9f:66:82:0f:ed:e9:
         38:fc:dd:8f:91:60:92:f7:51:a4:4c:6c:17:da:6f:75:9a:ac:
         c2:d3:34:d4:f2:ff:f3:52:e0:5f:fb:e5:dc:9a:25:3e:a0:42:
         21:6e:1d:bb:ce:42:6a:2d:58:98:17:bb:a0:11:3a:2d:46:ff:
         5a:2f:e0:58:18:a3:43:1f:04:29:6e:f9:cc:7e:3e:58:96:50:
         5f:6e:b8:5a:e1:18:d1:ca:84:8a:a4:c2:fb:53:c6:f2:c8:96:
         ce:a8:33:93:fb:67:2d:3f:e8:d3:0a:fe:cb:9f:d9:a4:24:5a:
         be:27:6b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:08 2024 by rpki-client on console-ams.rpki-client.org