Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File:                     oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier:          nyftuPoJyQEff7Yw8105LNjc4za5+dvQzxukwo3pHSc=
Subject key identifier:   0E:E8:ED:71:B5:DC:F2:DB:DC:5C:22:90:8E:E5:C0:F6:67:85:8C:E3
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer:       /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial:       018F86A414555483B6D7F2536DAEB60737A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number:          02EA
Signing time:             Fri 17 May 2024 13:00:51 +0000
Manifest this update:     Fri 17 May 2024 13:00:51 +0000
Manifest next update:     Sat 18 May 2024 13:00:51 +0000
Files and hashes:         1: K2fndFZcTwkaVHlE7QASxrVLA_I.roa (hash: kQN+ab1bSKuO00jeDjeooBXmeIm0Pxy69bXYbxukd0I=)
                          2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: SD40PHr/yxMDL9jXaL543isnbyp1Fny8r+wnN3biPvE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:14:55:54:83:b6:d7:f2:53:6d:ae:b6:07:37:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
        Validity
            Not Before: May 17 13:00:51 2024 GMT
            Not After : May 18 13:00:51 2024 GMT
        Subject: CN=0ee8ed71b5dcf2dbdc5c22908ee5c0f667858ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:fc:3a:ef:87:6e:7f:9b:6a:b0:0d:cc:84:
                    6e:aa:9c:0b:f7:3e:80:d2:79:70:27:79:9d:5c:90:
                    39:c2:22:8f:95:b5:e3:aa:54:48:3d:02:56:01:d6:
                    6f:bd:e9:43:31:64:91:c5:95:c3:c5:c4:f6:01:67:
                    fd:8b:cc:ed:b9:a6:e8:8e:86:c9:54:82:ec:b5:e4:
                    83:2b:16:6c:87:02:f1:91:f8:64:bd:4e:ff:14:5f:
                    02:2d:18:d9:67:2e:dc:12:d3:4c:74:a3:57:4c:f3:
                    ce:22:7a:d8:da:46:0d:28:3e:90:89:e3:54:e8:85:
                    ae:65:59:0a:a5:95:49:56:5d:3c:e8:7b:30:73:94:
                    5a:26:b4:0f:96:0a:dc:e0:6e:b2:59:a5:08:07:3e:
                    a8:89:bf:8f:fa:c1:88:fd:ef:8b:5c:2f:2c:c3:6a:
                    5b:12:33:74:32:67:96:eb:fc:3e:55:26:1e:81:e6:
                    10:c0:a1:52:16:87:63:81:b2:cb:c4:8e:21:be:72:
                    1e:59:ff:19:88:47:d9:06:c9:90:13:60:ac:1f:26:
                    f0:06:8a:7e:2d:91:ef:5b:4c:8f:89:37:3b:54:ae:
                    eb:ef:1d:72:71:57:22:6b:37:d3:b3:d2:95:18:db:
                    94:91:c6:68:05:a9:6d:96:77:90:d9:ef:62:9e:f2:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:ED:71:B5:DC:F2:DB:DC:5C:22:90:8E:E5:C0:F6:67:85:8C:E3
            X509v3 Authority Key Identifier:
                keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:de:22:1c:99:2c:1c:f6:53:e3:93:e4:12:f2:23:55:a3:d3:
         be:eb:18:73:42:fa:a3:b6:25:ef:ca:8e:89:dc:86:51:67:ee:
         f5:06:82:f3:d1:d5:00:e7:17:e4:90:7f:af:07:c3:8e:b8:11:
         ee:16:22:54:20:dd:7b:68:de:58:be:e3:6d:50:ca:8f:37:fe:
         31:6a:2e:01:26:95:7f:55:c7:d0:25:d3:be:85:82:f3:56:3c:
         0f:2e:a4:38:71:db:4d:25:2c:f0:00:9b:a3:f2:f8:ba:49:47:
         97:0d:33:ae:fa:1b:f6:33:2f:48:2f:65:5b:75:55:77:31:4a:
         a4:3d:88:1f:40:64:76:71:86:17:69:89:95:62:11:74:89:52:
         b1:55:f3:47:19:62:c2:04:e5:09:93:21:f6:35:29:f4:34:b2:
         12:2f:1a:42:66:5e:a6:0c:16:2b:da:a8:9d:fc:45:25:40:e9:
         91:16:d4:dc:15:6a:42:9b:6e:54:88:29:c7:d4:f5:92:5e:60:
         08:23:08:0a:f6:73:5e:62:87:74:38:e9:5c:0b:91:d4:08:34:
         02:2e:cb:7e:ff:ef:bf:3a:4b:6c:4b:ed:ee:2f:e6:e8:06:4e:
         7f:ca:26:8a:1a:7f:b3:7d:4f:d1:55:aa:fb:15:51:e6:81:bf:
         7c:d2:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:55:16 2024 by rpki-client on console-ams.rpki-client.org