Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
File:                     OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json)
Hash identifier:          7faIGYLeCu+QRrQe9bALRryqUQn0pi2+Ps4Ps7nlhJQ=
Subject key identifier:   35:E8:F6:86:B5:F6:42:81:23:D6:CD:A9:B8:4A:91:6E:88:71:62:E4
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Certificate issuer:       /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial:       019041F7A6B675CDBD706576601996151EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
Manifest number:          11EA
Signing time:             Sat 22 Jun 2024 22:01:07 +0000
Manifest this update:     Sat 22 Jun 2024 22:01:07 +0000
Manifest next update:     Sun 23 Jun 2024 22:01:07 +0000
Files and hashes:         1: 1_SzZyq2obXjdTzemeJppGfjRxE.roa (hash: LHDx4hdCnh61MdXiRXc5naL2lsnf5IHvU0LYvAEiOt4=)
                          2: O4nrM5WX5GnRP7jkLucpKQQVnp0.roa (hash: ouvzE8EZpiPX27FOFr22RBvr375LGxV/4YgG1HiTVmk=)
                          3: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: LrklTil4MRd6AA8y4piXZKyfEAwAv3TrP/0SVUTXQP8=)
                          4: PtJ6K5Qnr16X75GCo4oFKORqsc4.roa (hash: e1Nd6iOS6u3nuRd89q5DPXTVzx6X0yH6vgUt11jCI1k=)
                          5: cv5QsCgAg8wRk7x9ZvO5tx-Vt7U.roa (hash: GQLFLaufmoXEcgOMwCMq7qgmmmzC3q73v2wAfgusvpA=)
                          6: jba3T6xmAIny0k2MpA4vbRCvFKM.roa (hash: K1sdn93u9/x1JkSvDdTvjGBXzFcXwsEb3XUN3mCKJ0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:a6:b6:75:cd:bd:70:65:76:60:19:96:15:1e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
        Validity
            Not Before: Jun 22 22:01:07 2024 GMT
            Not After : Jun 23 22:01:07 2024 GMT
        Subject: CN=35e8f686b5f6428123d6cda9b84a916e887162e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:71:9f:57:17:da:dd:d7:5c:23:4c:02:d1:
                    69:2a:71:76:da:98:6f:b2:26:ec:7c:2d:18:86:b2:
                    bc:54:60:3d:28:6c:0c:17:ee:51:19:06:6a:a0:42:
                    f3:85:dc:ff:01:ed:5b:6f:87:3c:c7:92:2e:44:67:
                    06:92:63:80:dc:87:bb:4f:d5:ac:2f:d0:81:8d:7a:
                    f2:e6:b0:30:eb:4a:e0:da:ca:9b:3d:4d:9b:61:2d:
                    51:a2:7e:cd:72:91:a2:3c:dd:50:fa:de:ea:31:a1:
                    2b:51:2a:07:e6:db:8f:d3:ed:c9:fd:1d:c3:1f:33:
                    51:86:98:91:9f:88:88:85:35:8b:ae:3e:88:21:fc:
                    e3:ac:51:d8:44:1a:05:f3:37:21:58:8c:22:e2:f6:
                    22:a2:b3:8b:b8:c5:3c:a1:4b:76:4a:1d:0b:43:8d:
                    a7:0d:e9:da:e0:2b:6f:e9:53:34:83:68:ac:1f:61:
                    2a:4f:4c:18:c3:c8:e8:e5:49:9f:90:4b:a7:f2:b1:
                    00:20:2c:7c:4e:9d:cc:41:9e:fe:9c:99:9c:62:46:
                    60:13:da:58:f5:e5:61:11:4c:81:8e:12:ea:9f:c8:
                    c2:e5:0a:6c:76:64:16:29:46:b8:ec:58:22:40:28:
                    0c:4a:b3:c3:fd:3c:b7:d0:b8:a4:b1:dd:8e:fb:26:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E8:F6:86:B5:F6:42:81:23:D6:CD:A9:B8:4A:91:6E:88:71:62:E4
            X509v3 Authority Key Identifier:
                keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:88:a3:26:97:93:fd:f7:76:66:82:cb:11:d9:6a:53:e9:36:
         1e:d3:25:ed:7d:36:3c:35:b1:d1:0a:85:92:cd:7f:42:93:81:
         04:21:4d:31:db:9b:71:35:b9:64:f2:0f:04:4e:52:7b:ee:f5:
         db:27:1f:ef:0a:f7:7b:e2:02:84:92:ba:a0:27:fa:d6:7a:73:
         59:de:96:15:51:86:05:1b:6a:62:40:0d:8d:30:9e:d2:a6:25:
         90:06:c1:97:c9:73:87:3e:41:ae:33:6d:74:9f:60:6b:8f:d7:
         8b:3e:24:b4:97:92:32:ff:7e:0e:fb:23:63:8b:89:05:e8:f9:
         c2:e4:27:2a:74:ee:c8:de:cb:75:02:70:c7:b3:6c:9c:5d:16:
         67:bf:16:b8:f8:f2:c2:8c:7b:74:ee:4b:14:27:2d:fe:a5:e1:
         1d:e6:24:41:1e:3f:a9:96:bf:3e:98:08:9f:46:c0:60:4e:3c:
         74:39:8c:ba:49:13:8c:d8:01:92:bb:28:7a:78:a2:65:ae:5f:
         8f:e9:13:a1:73:52:3f:80:5d:44:dc:67:a4:7b:59:3f:36:ff:
         d6:db:ef:40:66:17:d1:31:97:b2:71:62:fc:3a:ef:8f:42:f5:
         37:a5:63:31:76:5d:e8:c0:f0:f2:27:9c:bf:55:2e:ed:a8:4a:
         a0:d8:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:53:21 2024 by rpki-client on console-fra.rpki-client.org