Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File:                     OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier:          QHrhIgKxYNzNsXOKP7wl3vN4Vch96BOO300fuXukZa8=
Subject key identifier:   52:BB:71:E8:2A:72:71:BC:04:72:0B:4B:70:AF:02:72:BD:8E:6F:79
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer:       /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial:       018F88FFB24B374EF1519CE41543578E989A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number:          012F
Signing time:             Sat 18 May 2024 00:00:09 +0000
Manifest this update:     Sat 18 May 2024 00:00:09 +0000
Manifest next update:     Sun 19 May 2024 00:00:09 +0000
Files and hashes:         1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: TVG1bCkXcIv5ELO5c6Zn37ZGgxj+ZTQt4Rcq6kmRClE=)
                          2: ec3aHhTvTsx4I7OruB7jJQb8CBY.roa (hash: 0zG9uNMeij80SA16j7cyur8N3afek2zCAIX8StCvE7E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:ff:b2:4b:37:4e:f1:51:9c:e4:15:43:57:8e:98:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
        Validity
            Not Before: May 18 00:00:09 2024 GMT
            Not After : May 19 00:00:09 2024 GMT
        Subject: CN=52bb71e82a7271bc04720b4b70af0272bd8e6f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:5d:73:ea:ad:43:28:f4:27:7b:ac:e3:8c:
                    4c:d3:03:06:bd:7e:d3:97:61:f2:85:f7:2e:43:9d:
                    8f:ac:ce:81:4b:fe:b8:8d:01:2a:d9:5f:9d:4e:b9:
                    32:a6:83:8c:c8:64:b8:55:47:bb:ee:d8:e3:86:a2:
                    a5:0c:54:6a:8b:c3:3a:75:5e:e2:80:04:c1:d8:2c:
                    6c:fb:91:a1:e5:68:39:bb:11:5e:2a:24:e3:f7:25:
                    a4:42:f5:fb:75:4d:ab:f4:b6:e6:c0:68:b1:31:02:
                    a1:c4:15:48:e5:c9:0e:8b:6d:0a:29:db:ac:ee:c7:
                    40:8e:d7:25:55:8f:ef:c8:bd:ae:9d:bd:36:f6:3b:
                    32:7a:d5:9b:30:2c:24:4f:60:47:89:10:0b:d1:bd:
                    82:55:5a:3e:31:88:df:b4:83:7a:99:11:a9:a6:39:
                    77:0d:e3:f0:7a:d6:5c:81:dd:76:5a:eb:c7:13:ea:
                    4e:ff:38:33:ef:e7:b4:4b:bb:8b:35:47:56:66:66:
                    bf:9b:e6:7d:5f:94:df:b9:b8:f3:a1:bb:85:7f:5d:
                    5d:c1:e2:10:97:b7:66:cb:17:29:31:5b:78:a2:b9:
                    7a:a0:93:92:96:cd:1a:39:03:c1:c2:1c:0c:7a:28:
                    06:7e:c3:32:90:2f:f8:8b:56:f8:e4:1c:9d:72:2e:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BB:71:E8:2A:72:71:BC:04:72:0B:4B:70:AF:02:72:BD:8E:6F:79
            X509v3 Authority Key Identifier:
                keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:63:92:a8:4e:f5:75:8c:3c:8a:6b:37:00:76:7e:0b:2f:50:
         e0:3d:ba:0b:c6:1a:fd:0c:40:7e:75:7c:60:78:b7:2c:c1:14:
         f3:7c:4d:4e:05:d5:64:f5:6e:c2:30:c6:ff:e0:1e:e4:42:b9:
         80:55:66:11:4c:40:51:83:9c:9a:b1:02:55:b7:8f:b8:06:88:
         49:2a:30:3c:e5:05:44:2a:57:03:39:03:96:f2:60:55:a3:80:
         0d:83:25:c8:e0:69:3b:17:b2:b9:34:f4:b6:69:ab:6c:31:e6:
         a7:6a:cc:cb:5c:93:a6:62:ff:b6:53:cb:b3:f4:b5:90:5d:2c:
         34:3f:ae:59:20:44:75:10:19:ef:15:cb:26:21:1b:35:5c:ab:
         19:13:5b:27:ca:28:43:cf:f8:20:ba:04:63:2b:ea:5f:37:70:
         ec:5c:42:1d:08:05:86:b3:8a:67:47:76:27:34:60:f7:d3:54:
         8f:f1:f9:18:ac:6e:e3:92:d9:54:7f:4a:b8:28:de:bb:ee:6c:
         17:0b:06:52:49:a4:da:d9:ba:40:0a:d0:0c:87:76:9e:bd:cb:
         da:e3:bc:3f:3c:d1:dc:ce:32:33:c9:38:5a:ef:66:33:8a:c9:
         4c:dd:c2:1a:6c:66:52:de:6e:d7:55:73:23:b1:4d:82:01:e4:
         cd:a4:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:06:54 2024 by rpki-client on console-ams.rpki-client.org