Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File:                     O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier:          ytkSsnFmqLoQmbupzNXqkusw1xXu2eoupcX3YRXCpuU=
Subject key identifier:   DD:88:C8:A6:F2:8C:F0:FC:B0:C1:D5:08:34:DF:33:C3:8C:87:00:AA
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer:       /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial:       018F8749BB70354EA258A823AB95A0D38350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number:          0E7C
Signing time:             Fri 17 May 2024 16:01:47 +0000
Manifest this update:     Fri 17 May 2024 16:01:47 +0000
Manifest next update:     Sat 18 May 2024 16:01:47 +0000
Files and hashes:         1: 7xGsaDa0fW3ashgtM6KwmBtVwps.roa (hash: HsKiQo+Ma8fHBdJi6/p+EMZuXP9k8MeQGljXctX6J8o=)
                          2: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: hu2w7RDkrTIcIAlHQabruw6a5mOPXKaDZEbssZSjyGE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:bb:70:35:4e:a2:58:a8:23:ab:95:a0:d3:83:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
        Validity
            Not Before: May 17 16:01:47 2024 GMT
            Not After : May 18 16:01:47 2024 GMT
        Subject: CN=dd88c8a6f28cf0fcb0c1d50834df33c38c8700aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:70:be:f9:b3:98:06:50:08:e9:70:53:e4:
                    4f:ef:a0:73:ac:2c:6b:fc:7f:55:6a:cf:b2:c2:31:
                    fd:2b:65:57:44:83:d1:6e:1c:82:62:a1:5b:39:fd:
                    c0:46:13:c6:d3:f6:01:56:68:45:fe:01:7d:e5:c7:
                    e8:bb:74:a3:ea:ce:9f:c3:9b:66:cb:4a:41:16:91:
                    b4:6b:21:5a:bb:0c:1b:f3:e2:96:6a:50:9d:2f:3f:
                    d6:0f:4b:69:89:fc:ed:df:53:25:50:80:15:d6:4c:
                    1a:de:6f:5f:f8:7e:e6:78:a5:91:0c:ec:e6:37:1a:
                    b6:35:46:4c:c4:f9:83:aa:65:53:65:e1:c7:8b:f1:
                    a8:3b:45:72:41:55:11:0f:dd:29:f9:1f:80:61:a3:
                    e6:4c:d7:4d:ec:d2:49:12:3f:a4:52:6b:5c:40:09:
                    95:49:03:5a:96:b8:26:1b:65:44:13:6e:1f:0d:11:
                    cb:c2:3d:bd:4c:f3:5d:2a:cb:c9:90:f9:86:18:04:
                    16:ea:2d:3f:e8:86:08:76:ef:0a:8b:87:1d:61:6d:
                    24:23:e2:3d:e2:5c:13:80:af:13:02:b8:e9:1f:34:
                    b6:d6:3f:69:57:19:29:af:37:4f:40:22:91:aa:7d:
                    6c:dd:24:85:cd:85:14:52:ca:c7:7f:00:f4:d3:4b:
                    20:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:88:C8:A6:F2:8C:F0:FC:B0:C1:D5:08:34:DF:33:C3:8C:87:00:AA
            X509v3 Authority Key Identifier:
                keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:eb:ef:e5:c8:c0:8b:67:9d:83:82:87:c9:9e:d8:93:ee:
         c3:81:dc:f2:cf:31:ba:0d:41:3c:e8:52:b9:11:29:d9:f6:a9:
         b4:ad:86:b4:aa:14:c6:26:17:01:54:2e:ce:56:fe:fd:81:04:
         a6:5e:7b:ea:0f:84:a5:21:6f:65:66:0e:7b:b7:ba:b3:00:b8:
         b7:b0:38:2b:c9:e2:4a:d1:94:00:30:8b:c2:29:31:7f:44:12:
         a6:ab:53:33:92:cc:1a:fe:f3:8e:0e:f9:d9:b0:50:40:a4:ef:
         c7:00:41:d3:46:ad:4f:74:49:f5:e0:a3:b6:07:93:47:5a:df:
         84:c4:52:dc:cb:09:85:39:af:bb:21:dd:3d:a6:3e:c6:02:25:
         ec:71:cd:50:03:88:bd:85:9c:7a:f9:6c:cb:86:cd:f8:5a:71:
         de:e4:60:53:2f:e8:b6:d8:e5:7e:89:c2:08:05:a1:a8:71:c2:
         2c:68:0c:d0:f6:d2:b2:a8:43:f5:e8:9f:fc:49:75:8d:f7:fb:
         36:73:6e:68:ec:5f:b2:89:02:63:34:8d:67:4a:d2:00:cf:ec:
         84:a1:9f:84:cd:79:8b:2d:c3:d7:14:a1:12:ab:9e:68:1b:97:
         37:92:09:9d:a1:57:fd:69:ac:c7:d7:e9:4f:6f:d8:b4:c7:6d:
         b7:8f:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:58:28 2024 by rpki-client on console-ams.rpki-client.org