Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File:                     1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier:          Ogl9gBUaan3/jf89SRHu78LhDjdOEeawhzns0lehuwY=
Subject key identifier:   01:27:34:99:54:93:18:67:2F:14:9C:CE:A0:F2:EC:4C:1A:E8:45:2F
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer:       /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial:       018F3A0A9D5E7B7103B4A80047661F8E7C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number:          0EF1
Signing time:             Thu 02 May 2024 16:02:05 +0000
Manifest this update:     Thu 02 May 2024 16:02:05 +0000
Manifest next update:     Fri 03 May 2024 16:02:05 +0000
Files and hashes:         1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: 64puHTTxL71h+vMThaEom4cgFYQAv8Mv1/rtPGGeosY=)
                          2: M3zoZjFFwe62Hx6u2n_FAOd-8Us.roa (hash: 5RJbF/13FEacwJC+HoxjO5tISxw5GGHsVorU0Jr9eHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:9d:5e:7b:71:03:b4:a8:00:47:66:1f:8e:7c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
        Validity
            Not Before: May  2 16:02:05 2024 GMT
            Not After : May  3 16:02:05 2024 GMT
        Subject: CN=01273499549318672f149ccea0f2ec4c1ae8452f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:15:af:e6:24:eb:ff:94:ce:00:67:7b:fb:
                    b3:0c:4b:10:68:08:58:c5:37:5d:53:bd:54:13:a4:
                    1f:60:ce:d2:92:24:94:20:05:2f:33:d6:7c:d2:54:
                    57:28:ac:c8:9c:b4:7f:1f:27:5f:fd:d5:bf:e0:7b:
                    ee:b3:ef:1e:72:89:20:db:89:f4:af:39:f3:e4:74:
                    cf:57:ea:7a:c8:c3:0f:9d:17:52:34:1e:72:d4:cb:
                    ba:c3:51:5e:d1:e9:11:d8:46:1a:ed:95:cf:56:22:
                    93:a4:b6:c1:ed:95:1b:98:27:5d:17:b2:d2:7d:f5:
                    6c:95:84:bb:f1:32:48:b6:31:bb:47:db:c0:5c:62:
                    be:7c:be:a4:17:0e:74:39:7e:72:ae:36:75:40:b1:
                    e7:ea:ee:00:32:84:69:88:e8:8d:b2:6d:a0:6c:3a:
                    c2:06:e2:d8:3c:49:31:e2:fa:04:19:93:56:5b:95:
                    c7:4d:4a:7b:42:55:9a:4e:72:80:bb:0f:a4:47:a1:
                    be:40:d9:d2:86:a6:52:36:39:74:9f:60:da:37:e8:
                    7e:be:48:12:07:8f:10:01:e4:78:2a:79:ba:fd:a2:
                    cb:95:cb:a8:82:95:26:c4:da:57:8b:1e:d0:01:93:
                    46:b4:46:23:66:d5:95:00:0d:68:b4:f7:7a:b5:e0:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:34:99:54:93:18:67:2F:14:9C:CE:A0:F2:EC:4C:1A:E8:45:2F
            X509v3 Authority Key Identifier:
                keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:08:96:19:19:3b:b6:8e:a6:aa:23:02:3c:03:77:e2:42:e0:
         7a:5e:18:ba:f8:73:16:66:fb:c3:db:70:ea:d3:ad:2c:d2:88:
         de:b7:8f:3f:ca:86:66:97:3d:4d:b2:81:92:3d:e8:5b:c5:f8:
         bc:79:84:3f:74:ad:8c:69:a8:98:e0:5b:58:7c:5f:2e:70:dc:
         25:1d:2e:1f:72:73:4b:94:9c:b3:39:c0:03:ab:1f:ab:65:be:
         95:d2:16:75:15:2b:cf:fe:37:61:4a:0d:a0:56:40:e5:eb:f0:
         44:41:83:ca:20:4a:9d:52:4c:7d:73:b7:ba:a6:48:92:65:01:
         b0:05:82:c2:fa:42:33:14:92:25:78:15:2b:98:bb:2a:8a:a0:
         4f:e9:93:e7:f9:58:fe:d6:2d:c8:b5:18:36:23:df:e0:d6:4b:
         71:eb:4b:e1:d7:eb:41:41:1b:66:16:4e:16:a8:8c:25:fd:ca:
         13:b8:15:75:32:38:c5:35:b1:af:80:b9:d8:82:8b:ed:92:d1:
         67:b4:68:cd:c4:1b:68:09:4e:79:d2:eb:a8:00:43:bd:b6:ee:
         fc:8b:ce:c5:c4:1e:ba:38:d1:ff:c1:34:0f:8c:41:ef:8d:b1:
         52:7d:7e:da:4b:81:33:98:00:c1:fc:2b:1f:7d:ea:97:f6:bd:
         0c:f6:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:02:54 2024 by rpki-client on console-fra.rpki-client.org