Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.mft
File:                     OVAwNhWspuX29bVpHHwsjcpfI00.mft (raw, json)
Hash identifier:          giU2wEPuxe08VHy0IuT2Jh/VWVGzssUb+bqW8aHiWP8=
Subject key identifier:   AC:72:6F:12:D8:4F:6E:C6:80:C4:6E:5A:10:3F:48:BE:7F:D6:07:8A
Authority key identifier: 39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D
Certificate issuer:       /CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
Certificate serial:       018F874AE9D15655827712DEB2749A2FC30F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 16:03:04 +0000
Manifest this update:     Fri 17 May 2024 16:03:04 +0000
Manifest next update:     Sat 18 May 2024 16:03:04 +0000
Files and hashes:         1: 976H3ZxeBlj4HLXPygIp3Icoka4.roa (hash: atcLM8pAdaorYbVKsUVrv4g3UA+MF2Mxd//buaakjPI=)
                          2: OVAwNhWspuX29bVpHHwsjcpfI00.crl (hash: r2l2F4D+djhbPXK8mXX6JFjuqCV2P5ZjfNpO0Qds2s4=)
                          3: S387aWDkfFt48htpm8QR4GuqGWk.roa (hash: +t8M+afgXGMsMKSeGQf/E/0pQgLXqc+qBs5gwR0xCqE=)
                          4: k-nuwK-F95AFujZnAFrvKZK1mwc.roa (hash: G/0ROXHfv9sHSwi05OgpwZ7Y9ZEUyH1d9Zxje5rQQdg=)
                          5: phkfEylG25y36_tNPl7nXs2580k.roa (hash: F6BjbF2ESOAQCTQorXrQzECGbCunbMBh3XYUXmbhnLo=)
                          6: r97tKQr7JjbyCHWHUFqOxhuR3KM.roa (hash: SgSu0UkV3mU+GdquaM0MRD4Q+rxh1diMxvd4zSGG46k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e9:d1:56:55:82:77:12:de:b2:74:9a:2f:c3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3950303615aca6e5f6f5b5691c7c2c8dca5f234d
        Validity
            Not Before: May 17 16:03:04 2024 GMT
            Not After : May 18 16:03:04 2024 GMT
        Subject: CN=ac726f12d84f6ec680c46e5a103f48be7fd6078a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:d7:b7:34:65:35:5d:22:3a:06:d8:68:6e:
                    78:04:8a:f6:a6:13:48:dc:a3:57:62:3e:eb:9d:f1:
                    04:3e:54:95:1a:aa:59:70:e3:b4:03:00:18:0c:92:
                    d6:40:ee:8f:74:de:7b:30:e5:8a:57:22:35:19:3c:
                    59:bc:d8:f1:25:9f:4b:44:53:94:f3:93:72:fd:ab:
                    e5:e5:5b:e6:fc:b3:08:85:36:f7:7b:ac:5c:79:23:
                    80:d6:b7:e9:47:9f:97:82:51:4b:b5:d3:ac:bb:3c:
                    de:7a:80:be:77:53:c9:87:04:8e:50:ce:f2:47:3e:
                    0c:60:a6:e2:da:02:f0:fa:13:8b:f5:da:38:c0:da:
                    db:06:06:ac:e4:cf:74:ef:92:e6:39:da:93:ca:10:
                    c7:af:ce:c5:af:e8:f0:1c:b2:23:61:34:77:82:07:
                    a8:b5:3b:c5:28:e3:ad:bd:e2:ef:15:7a:00:66:bc:
                    ad:ad:1e:56:35:f5:98:bb:a2:37:f3:28:78:fe:de:
                    65:58:4a:ea:23:65:dc:f5:c2:42:41:79:a8:e7:e8:
                    ac:23:a0:2d:41:2e:9a:0b:ea:b5:1e:5e:37:16:03:
                    3b:08:d7:84:ed:f3:49:3a:00:6d:76:e1:86:f8:00:
                    47:50:f1:74:ea:64:8b:6c:cc:78:68:ab:d0:d2:09:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:6F:12:D8:4F:6E:C6:80:C4:6E:5A:10:3F:48:BE:7F:D6:07:8A
            X509v3 Authority Key Identifier:
                keyid:39:50:30:36:15:AC:A6:E5:F6:F5:B5:69:1C:7C:2C:8D:CA:5F:23:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVAwNhWspuX29bVpHHwsjcpfI00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/38c694-23a7-48b2-aaec-6c8fd0bc5b00/1/OVAwNhWspuX29bVpHHwsjcpfI00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:37:69:ae:a8:74:19:f7:a1:c4:ea:c5:ff:35:2a:ef:ba:fe:
         ad:da:7f:b2:20:b6:e8:01:51:b8:c5:3e:c8:2b:92:73:44:e4:
         e2:c4:71:16:e3:9d:13:98:4a:5d:44:5a:e6:f3:91:1b:31:88:
         a0:07:b4:84:47:be:b6:28:19:b5:39:45:f0:ce:3b:c2:42:aa:
         2c:9e:c8:6d:a7:13:ef:9f:39:3d:11:63:f3:4c:f1:31:ca:18:
         7f:80:b1:c9:bb:7f:bc:df:e6:60:a6:0a:3c:63:a3:eb:89:10:
         fe:0a:42:1b:e3:ad:02:61:3a:6b:77:28:9e:91:32:a9:89:28:
         46:9e:04:cd:ee:b1:6b:fe:b2:c5:db:69:08:ce:90:0a:5b:55:
         e2:7e:f7:b0:15:66:c7:09:33:2d:35:7f:a5:ce:0e:61:42:ef:
         2c:f2:fa:4d:ae:99:8a:ff:5e:9f:a0:56:db:d9:9d:3a:9b:45:
         90:2a:27:11:2d:b3:a5:cd:91:a7:c5:81:0e:73:f4:0f:d6:a8:
         ae:7a:8e:c4:d7:9a:83:ea:df:52:d3:3f:55:a6:41:f6:be:34:
         ad:57:c8:5d:2f:99:e9:3a:cb:95:15:e3:db:18:1c:88:5c:3c:
         61:d5:61:ae:1b:e5:e8:36:f2:05:1c:37:11:2f:59:f8:12:0e:
         25:07:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:05 2024 by rpki-client on console-fra.rpki-client.org