Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
File:                     0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft (raw, json)
Hash identifier:          ZWQW2DImpnFk8ht0MG2A8Xkr2/oNmB6evhVqtqz+prY=
Subject key identifier:   A7:A8:5B:5B:CD:45:6F:B8:49:3F:0E:FF:CD:8D:CD:FB:C7:52:71:06
Authority key identifier: D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
Certificate issuer:       /CN=d0c3d358812e60b680e4e11632f139560bf525fb
Certificate serial:       018F45A074719B90A094657C002FDD0E92E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
Manifest number:          08DC
Signing time:             Sat 04 May 2024 22:01:34 +0000
Manifest this update:     Sat 04 May 2024 22:01:34 +0000
Manifest next update:     Sun 05 May 2024 22:01:34 +0000
Files and hashes:         1: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl (hash: piznsym3ZNlGHQBRcoclUV+ad52TMm2tbaVlKHcdjvc=)
                          2: VYxETRyMB_5brJe_4iKAuiQbEUI.roa (hash: dmcYzJ1f0soAolwfqw1exU9yBuWbBJ6h+v0u9bOPZQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a0:74:71:9b:90:a0:94:65:7c:00:2f:dd:0e:92:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c3d358812e60b680e4e11632f139560bf525fb
        Validity
            Not Before: May  4 22:01:34 2024 GMT
            Not After : May  5 22:01:34 2024 GMT
        Subject: CN=a7a85b5bcd456fb8493f0effcd8dcdfbc7527106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:cb:91:1c:08:80:02:62:24:91:81:21:a6:
                    e0:5b:1b:bd:65:1b:5d:ea:1d:92:dd:be:10:66:84:
                    5f:f3:27:04:f8:63:fb:cf:08:00:2d:2d:2b:bc:90:
                    7d:7d:f7:fb:6a:a9:1c:de:30:10:cc:5c:6b:60:03:
                    7a:97:85:d9:53:47:33:10:47:26:ae:36:bb:a0:32:
                    dd:a3:ba:65:6f:50:93:74:53:cf:37:19:fe:36:a1:
                    89:f3:7e:42:03:27:a9:13:62:64:a0:34:00:5c:62:
                    08:c0:3f:95:51:18:5e:64:86:f1:e6:53:59:91:27:
                    8a:94:c3:c2:c2:d9:1a:1e:84:2c:6a:99:d7:1d:c2:
                    71:ab:c0:9e:be:6e:dd:72:30:c0:38:59:46:b2:6d:
                    9c:11:9e:f5:9f:40:3b:5b:ed:5c:e1:45:ae:6c:97:
                    19:b8:ac:6d:f5:37:b0:f2:c9:5c:35:da:73:8a:c5:
                    1f:4a:54:57:cc:ec:54:e3:eb:87:48:aa:f9:12:0f:
                    2f:d7:8e:a5:82:cf:8f:75:c3:ce:26:70:0a:78:a3:
                    8f:2d:0a:16:e4:03:b5:f6:33:d9:4d:6f:36:f4:3d:
                    94:40:9f:ee:63:17:dc:44:2e:01:f8:83:f2:de:78:
                    4f:b1:16:5b:90:9c:d3:95:06:a8:56:62:58:32:fb:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A8:5B:5B:CD:45:6F:B8:49:3F:0E:FF:CD:8D:CD:FB:C7:52:71:06
            X509v3 Authority Key Identifier:
                keyid:D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:4f:a1:1c:38:ad:e2:71:71:fe:67:40:25:cf:82:87:85:0c:
         1a:5e:e1:9f:d2:c5:f5:1d:bb:6d:04:12:ba:79:29:7d:d2:93:
         b5:f6:5c:85:1b:25:f4:33:f0:86:7b:9f:c9:cc:a0:10:8f:27:
         bd:40:09:c9:f8:59:ee:b0:aa:d0:5b:fe:db:3c:29:65:b6:36:
         62:b4:8b:c8:dc:1f:b5:d8:bb:65:e7:cf:cc:40:93:a0:6a:a1:
         97:5a:fe:93:cc:58:a8:1a:5a:52:d0:b5:4e:7b:f1:0a:d9:26:
         78:49:c6:52:e2:30:60:76:e6:8d:20:87:d2:c4:7b:c2:9f:ed:
         b4:cf:57:d5:6e:f2:08:3d:ae:59:ae:90:2e:ec:72:d6:83:37:
         cc:08:19:4f:7b:83:1c:7d:c6:f6:e6:45:ed:26:f5:d8:90:7e:
         fb:18:51:81:6d:3c:76:27:4f:db:48:cd:dd:e5:8c:85:8e:34:
         dc:4c:13:45:c4:ab:f5:c6:1c:ed:b8:78:30:5f:60:c7:15:04:
         75:b6:84:e3:1a:20:1c:68:9a:84:c8:4a:1b:53:64:33:33:ca:
         a7:05:5d:fa:36:5c:6a:2d:04:a5:d6:b3:dc:0a:fc:56:c9:61:
         45:64:38:e4:51:da:79:17:8e:d5:fc:5a:d6:f0:5b:83:db:43:
         57:6e:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:19:23 2024 by rpki-client on console-ams.rpki-client.org