Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File:                     oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier:          0BNLixOXwb4T5voWYn5OkZVywIunLPnrL35hdNF9y3E=
Subject key identifier:   0B:2C:0B:2C:F5:B0:F0:D4:57:EC:E4:01:69:CF:93:E7:7C:74:4C:B4
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer:       /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial:       018F866CE69240236567BF20E06AA439D16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number:          0B72
Signing time:             Fri 17 May 2024 12:00:34 +0000
Manifest this update:     Fri 17 May 2024 12:00:34 +0000
Manifest next update:     Sat 18 May 2024 12:00:34 +0000
Files and hashes:         1: jH5CbANqnBNxtHE4Wfn6BqAisQM.roa (hash: yqpwFWnkJn/4zzbeVulGFjO5sHw8ZkDZgD/nyBcu7+A=)
                          2: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: AxhQCnlcJSG7qkRjhW8ldnqLx5LBePtxLNGUX4bq5Z4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:e6:92:40:23:65:67:bf:20:e0:6a:a4:39:d1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
        Validity
            Not Before: May 17 12:00:34 2024 GMT
            Not After : May 18 12:00:34 2024 GMT
        Subject: CN=0b2c0b2cf5b0f0d457ece40169cf93e77c744cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:d8:79:52:31:09:09:bb:5a:3a:9b:cf:5c:
                    1a:49:5a:2a:32:d7:0c:33:6a:95:42:06:ad:a1:d1:
                    f7:10:69:18:d1:e9:00:f7:ac:94:e7:f0:38:3e:67:
                    41:fe:0d:0d:71:06:dc:4d:b1:3a:55:10:2c:e8:05:
                    94:e9:04:cc:f5:54:40:7c:9c:4e:86:85:fe:b0:34:
                    ac:13:d8:bd:b5:a1:60:00:13:9f:1e:3f:d4:e7:89:
                    a6:62:96:4d:f3:36:c5:1a:6f:8f:4a:3d:4d:ba:69:
                    ab:72:ec:8c:19:cc:a3:13:bf:aa:8f:c6:fd:9e:53:
                    2d:ab:d6:3f:ad:c6:95:5a:c6:25:86:04:37:04:40:
                    c8:7d:34:dd:85:15:22:5d:fe:09:18:60:91:ed:78:
                    2d:50:33:d4:c6:45:65:6f:1c:cf:41:11:6d:56:39:
                    d2:da:70:ab:99:c3:2f:ff:d7:39:3a:bf:c4:6d:cb:
                    da:67:6c:04:b8:a5:ba:6d:93:17:86:61:d9:7f:6f:
                    f0:13:61:c6:fb:2e:1e:83:2f:bb:39:53:92:3a:df:
                    27:04:33:a8:e4:a0:3d:14:a0:47:37:55:72:24:f1:
                    64:e1:21:88:d2:67:74:c5:fa:2a:27:47:7c:6d:88:
                    03:86:59:1c:6d:f0:d3:fc:f8:84:03:cb:72:f1:3f:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2C:0B:2C:F5:B0:F0:D4:57:EC:E4:01:69:CF:93:E7:7C:74:4C:B4
            X509v3 Authority Key Identifier:
                keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e4:7f:18:6e:67:67:3c:90:f9:d9:a3:6d:7b:f1:96:1c:0c:
         74:ff:d8:ea:60:75:ea:81:68:4a:70:73:c9:6f:80:c8:70:60:
         e9:65:75:64:55:07:10:1a:30:c5:01:1a:65:45:49:52:4a:82:
         b8:82:88:13:c0:3b:6f:e6:b8:1e:c2:68:24:dd:24:f7:07:0f:
         7b:cd:c1:87:6d:cb:f8:ed:69:b5:5f:98:bf:bf:ff:53:d9:67:
         87:bd:f2:f4:e3:28:71:2e:58:2f:e9:21:cf:3b:00:19:4d:a6:
         11:a8:2f:06:22:44:9c:3a:1e:63:2f:06:af:35:ad:d7:7d:e9:
         5b:4a:e1:0a:71:a5:a5:c0:24:38:cc:a8:d6:9e:3e:db:c2:59:
         96:ac:27:85:b4:1b:40:e4:a5:a6:cb:ef:73:cc:2d:d2:f6:11:
         9e:4f:e0:e4:e2:af:23:2e:86:77:fe:99:ed:9f:a7:e5:81:85:
         fe:81:69:16:19:88:ad:9e:7e:22:98:ed:5b:2d:b8:dd:29:f0:
         08:cc:cb:e9:aa:7a:b9:15:1c:d6:26:68:63:fb:85:a7:ea:fd:
         4e:7c:6c:60:5f:74:b5:d4:dd:be:0f:e8:3b:95:98:e9:8d:fe:
         dd:42:6f:bd:ac:db:d7:5e:c1:4b:3e:c2:50:51:c0:c9:df:4d:
         c1:72:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:46 2024 by rpki-client on console-fra.rpki-client.org