Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File:                     t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier:          TkG6LqrqA1k2Td3Kl8UggWpMQw18S50X/zaF/cM929g=
Subject key identifier:   C5:21:E8:31:74:D1:42:E6:A3:56:EF:36:D4:EC:FC:A0:BC:5E:AE:B6
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer:       /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial:       018F874A37F485E20DEA18EE8E7BC9DB0B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number:          0900
Signing time:             Fri 17 May 2024 16:02:19 +0000
Manifest this update:     Fri 17 May 2024 16:02:19 +0000
Manifest next update:     Sat 18 May 2024 16:02:19 +0000
Files and hashes:         1: gMpTInTqdtB7pj6MZ68qjsurvUw.roa (hash: cwnuoHULVDwBTRHISosdYISepxzWd2ya6RvGbFf/j9w=)
                          2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: JybHMrtWRXN3XbL8Z/g6h/70uxcnNvPoDLSKS1SKH7U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:37:f4:85:e2:0d:ea:18:ee:8e:7b:c9:db:0b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
        Validity
            Not Before: May 17 16:02:19 2024 GMT
            Not After : May 18 16:02:19 2024 GMT
        Subject: CN=c521e83174d142e6a356ef36d4ecfca0bc5eaeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:81:8e:c7:85:7c:c7:2d:5f:8f:6c:06:94:
                    b0:79:70:f5:59:4c:27:6c:bc:02:33:12:f9:17:b6:
                    ed:44:dc:46:1a:a6:3e:b2:31:78:33:2f:40:53:5b:
                    41:40:55:cf:06:50:ef:ce:04:46:71:bd:b3:6b:60:
                    43:b0:09:18:c5:b9:80:ef:1e:b9:62:ec:e1:a8:fe:
                    ab:23:8a:ab:d8:70:95:5b:b1:9e:74:85:0d:4f:54:
                    b1:35:e0:e1:03:7c:f5:90:10:99:13:ec:5f:ca:98:
                    c4:55:e5:81:28:ca:df:19:48:92:43:67:f6:87:cd:
                    af:b5:20:0f:cc:10:90:c3:ab:34:2d:2d:5e:2b:1a:
                    1b:9f:3a:ee:56:de:91:d4:5c:d8:c6:c6:8d:bd:4a:
                    1b:43:6a:5e:a4:8b:0b:cb:f2:a9:e6:c5:de:a9:69:
                    60:79:a3:38:43:0d:70:84:78:92:75:8b:99:16:98:
                    f4:58:fe:cc:dd:de:37:26:18:97:78:55:a8:96:25:
                    b1:c0:e3:85:0f:6e:a4:56:2a:a0:e6:60:6e:41:02:
                    b4:27:01:8f:c2:79:2b:e3:99:4c:6c:c2:84:0f:5d:
                    c6:3c:50:9a:da:e8:37:6b:c6:b0:d7:c4:af:94:2c:
                    8a:a2:62:41:2c:1a:a7:2c:e1:2a:91:34:1a:e2:c2:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:21:E8:31:74:D1:42:E6:A3:56:EF:36:D4:EC:FC:A0:BC:5E:AE:B6
            X509v3 Authority Key Identifier:
                keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:16:85:bf:e5:24:17:08:3a:f7:09:50:64:c2:bf:0d:7c:
         bc:58:c5:40:86:b5:f8:34:79:d1:aa:55:b3:b6:a6:14:dc:8e:
         a0:87:3f:30:6b:75:bf:35:d9:df:06:53:07:33:6e:ef:77:37:
         54:78:0a:ba:46:04:79:1e:1b:9f:f9:52:3b:10:b1:62:14:e2:
         a1:58:36:30:7b:cc:6b:b4:1c:46:6b:e5:3c:b0:25:6a:0c:47:
         3b:b1:12:80:c4:1e:03:f6:a5:ec:a3:e5:c1:9a:17:42:60:b8:
         e9:ad:03:d9:d3:b2:eb:17:87:3a:19:33:03:f2:25:73:a1:9d:
         32:28:76:d6:cc:d3:ed:14:3f:60:06:f0:89:cc:12:f0:d7:94:
         e0:c2:ca:69:0d:6d:a4:04:79:70:7f:f2:87:f2:89:02:2c:75:
         16:76:2c:39:50:3a:6f:5d:a4:b9:16:12:37:8f:d7:45:6b:25:
         8c:15:8e:5a:47:7e:bf:cf:fa:e8:d9:98:d0:45:75:c2:cb:b7:
         f0:54:cd:41:e6:bf:05:61:13:4e:ea:1b:93:93:f6:2e:05:47:
         e8:24:ca:c3:73:81:d7:cc:06:7e:da:9d:bf:3d:22:0d:17:da:
         72:8b:08:9d:de:19:2e:19:be:a7:da:25:55:b0:4d:0e:5e:d3:
         ac:a9:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:47 2024 by rpki-client on console-fra.rpki-client.org