Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File:                     ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier:          gPAk1LNphcbQoIAQHBARVEVAx7D0PHW2FRUC2pEN7Cg=
Subject key identifier:   5B:39:01:4A:BE:32:A1:AC:E1:00:8A:47:55:DA:09:6E:60:41:CF:62
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer:       /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial:       018F87ED8E8B624B2F6DEE5FE3E0E6EEE3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number:          0642
Signing time:             Fri 17 May 2024 19:00:43 +0000
Manifest this update:     Fri 17 May 2024 19:00:43 +0000
Manifest next update:     Sat 18 May 2024 19:00:43 +0000
Files and hashes:         1: RfTMWR_909_P121z7dyTUjKazsM.roa (hash: WDUX8aZV71c5AMueJIvhNQ/hCkx+cjSM8YjAxb0G1QI=)
                          2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: bhWE7rQ+QJFiv6qxVIF2PGWqMTA7qY1r/ybBOPtDWPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:8e:8b:62:4b:2f:6d:ee:5f:e3:e0:e6:ee:e3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
        Validity
            Not Before: May 17 19:00:43 2024 GMT
            Not After : May 18 19:00:43 2024 GMT
        Subject: CN=5b39014abe32a1ace1008a4755da096e6041cf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:35:1a:62:30:d0:e6:f9:ff:cb:c0:87:f3:
                    95:0f:af:db:88:ce:2e:77:50:d3:60:0e:d0:39:e3:
                    1f:b6:f6:58:b2:f9:9e:da:7c:ed:4c:85:64:c7:cf:
                    0c:51:b5:e5:19:ff:64:16:08:09:5b:cc:5a:07:3f:
                    c5:38:40:e1:53:13:47:81:68:f6:1f:b1:4d:53:5d:
                    88:57:57:23:d7:e0:e8:ab:74:06:14:6f:50:3e:ca:
                    97:d2:86:e5:2b:70:c8:62:4f:3c:0f:2f:7a:80:db:
                    8f:24:87:d1:62:13:01:a3:e9:d9:04:b9:fc:11:44:
                    ff:ab:14:9e:4a:26:61:48:03:c5:94:5a:ba:83:38:
                    55:64:99:05:c4:e7:5c:5c:83:24:4e:42:d3:13:6c:
                    16:b8:c0:5d:ad:f2:91:76:25:1d:d1:fd:01:bd:99:
                    0b:3a:d6:cc:f7:e3:99:e1:ba:ed:10:49:da:3e:c2:
                    9f:a3:8e:2e:bf:4b:0e:18:1e:82:9e:4c:a3:70:b6:
                    23:e8:72:85:46:26:14:0e:88:34:db:b5:ec:81:53:
                    20:da:81:b2:3c:76:5c:e7:9a:ca:bc:9c:50:bb:0d:
                    73:bb:96:b5:3d:94:5e:94:98:a1:a3:b1:a4:d6:62:
                    4e:cf:ad:bd:9f:07:b2:04:d3:bc:c2:f9:ac:26:f2:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:39:01:4A:BE:32:A1:AC:E1:00:8A:47:55:DA:09:6E:60:41:CF:62
            X509v3 Authority Key Identifier:
                keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:71:5b:50:c8:be:c2:ed:0c:80:c9:72:62:80:ee:fa:ce:d9:
         2d:7f:d3:2e:c1:66:ed:9e:37:6c:a1:50:5c:98:86:aa:e2:77:
         de:0e:9e:06:4f:47:09:8c:39:a2:b4:ca:ef:32:92:58:4a:0f:
         bf:21:3f:34:24:1d:10:a0:61:ed:05:5c:10:fd:55:bc:e9:77:
         27:15:f1:01:86:2a:fe:b5:21:3f:97:ff:8b:01:6b:98:1d:2a:
         ea:62:16:29:bb:65:8b:8f:f0:e1:6f:02:7e:c4:4f:ff:a5:ce:
         8f:0f:4c:07:be:2e:85:02:a3:77:08:96:97:bc:1b:8b:ec:a3:
         43:d3:d3:c2:4b:7d:84:fe:78:30:e9:53:6c:4f:a5:18:cd:83:
         c9:9e:37:83:d3:9f:29:c9:fe:83:b8:86:2d:c8:5b:a3:09:50:
         1f:1e:59:85:bf:3d:8d:a9:85:e0:bf:66:b7:4b:b7:52:c6:a4:
         4e:ed:fa:cf:14:89:96:21:0e:51:0d:cb:3d:8c:8e:12:2e:2f:
         5d:d4:bb:18:e2:03:07:fc:93:1a:e9:dc:d6:9a:b7:9f:97:af:
         24:e3:b3:27:79:86:01:24:76:07:79:96:c0:35:12:a4:ca:fc:
         d1:d0:91:fc:1b:b7:12:63:e1:c1:e2:81:3a:1e:0b:c3:cd:c0:
         8c:19:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:29 2024 by rpki-client on console-fra.rpki-client.org