Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File:                     OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier:          5YBEZu9RT4bKO89jYKyJ5FxD3ReL0Faehd0P9z3fvDU=
Subject key identifier:   E8:4C:D8:B7:3B:07:2E:F5:29:2F:85:38:83:3A:08:91:63:E9:7F:16
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer:       /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial:       018F874AB1E60F70DF39687671F1D4CD471C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number:          ED
Signing time:             Fri 17 May 2024 16:02:50 +0000
Manifest this update:     Fri 17 May 2024 16:02:50 +0000
Manifest next update:     Sat 18 May 2024 16:02:50 +0000
Files and hashes:         1: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: mw0kpt3m2voDqXpxQixdqoBDkgIM9xl9bc+5m8zqAXM=)
                          2: o9Pj9_3Vvt7ZK-Kf-kWl7uKxHVQ.roa (hash: EVEGUNZy1C7cisRnJgAlGG+LAmqp9NCr8LdboVHLrhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b1:e6:0f:70:df:39:68:76:71:f1:d4:cd:47:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
        Validity
            Not Before: May 17 16:02:50 2024 GMT
            Not After : May 18 16:02:50 2024 GMT
        Subject: CN=e84cd8b73b072ef5292f8538833a089163e97f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:57:da:76:f2:72:17:3d:f9:d8:ea:ec:15:
                    0c:c6:fe:a1:de:aa:7e:45:67:72:b0:34:00:0f:27:
                    26:aa:73:9c:10:2a:62:71:30:ff:c0:cc:a9:43:7e:
                    84:ca:0d:14:9d:ff:a0:11:c1:8a:64:55:32:9e:1b:
                    1a:21:5a:39:d0:71:8d:2e:da:78:7d:0d:74:e1:3f:
                    31:9d:a2:ff:ad:6f:d5:66:b8:48:59:aa:2f:da:b4:
                    5b:97:f8:26:b5:70:cc:91:df:b1:4f:b5:5f:38:d4:
                    b9:d1:7e:2d:36:6c:a8:35:a9:f1:9e:e1:7e:d6:f6:
                    52:87:ff:3b:7f:62:21:40:a8:a9:b0:1f:03:b1:da:
                    4b:cc:c8:7e:36:59:f2:2f:04:49:93:7a:b4:66:f9:
                    fd:fe:7c:e4:ea:55:31:e4:a8:cf:2b:61:22:25:a1:
                    5a:d2:95:96:71:27:a1:71:19:dd:01:af:a4:15:df:
                    63:90:cb:6c:8c:d1:78:38:a8:1e:00:d3:44:c1:6f:
                    0f:48:dd:49:b5:3e:f9:9d:75:8a:6f:fd:09:40:0c:
                    d3:75:95:ed:b2:82:b3:31:3f:92:f6:68:77:0a:c6:
                    a7:c3:30:7b:8f:67:59:d5:0d:ed:75:65:f5:e8:8b:
                    b1:1f:da:24:d2:93:c0:79:07:84:ea:7d:f2:94:b1:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4C:D8:B7:3B:07:2E:F5:29:2F:85:38:83:3A:08:91:63:E9:7F:16
            X509v3 Authority Key Identifier:
                keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:b8:46:44:e5:79:d2:20:62:3c:b9:0f:19:b1:e7:63:c4:
         15:f7:77:42:d0:d2:a3:86:92:a0:54:87:27:24:26:ca:21:b5:
         86:d6:3a:3a:18:83:bf:74:74:be:af:50:36:3d:ac:15:cc:13:
         a5:3e:e3:70:c8:06:99:57:6f:44:24:32:45:c3:88:cf:68:a0:
         b3:2a:91:2e:fd:0e:7e:e6:18:2b:df:ce:1b:c9:fe:66:c3:cc:
         45:ea:f4:d4:ad:8a:9e:b9:de:49:b1:55:5f:43:6d:38:22:f1:
         a8:36:09:cd:dd:b0:ed:79:5d:f6:c8:55:29:f4:bc:55:ce:3d:
         37:31:90:37:fb:8a:41:4b:c9:a9:77:ae:b1:2d:44:30:e6:19:
         8a:e3:d9:dd:41:16:59:c2:00:61:5f:1c:37:c7:87:2b:ea:03:
         03:2b:b7:89:23:fa:56:31:00:bd:f6:e5:44:4f:f3:9c:bc:80:
         07:d9:95:eb:75:e3:bd:07:2c:b8:c9:82:a9:27:ef:b3:f3:1c:
         af:5f:73:7e:61:5e:f8:44:52:02:ef:e4:92:c8:47:53:7b:5b:
         92:65:00:b2:17:ba:41:e9:38:5f:95:a9:14:e5:f0:c6:d4:e1:
         ac:f5:1d:f0:eb:65:29:55:31:3b:3b:2a:6a:38:b8:a6:74:a8:
         f4:fc:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:32:54 2024 by rpki-client on console-fra.rpki-client.org