Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File:                     O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier:          K/cO8bhERsQKuzOk934Yl72eBPzmGGqytRavjWAJp3I=
Subject key identifier:   46:F6:1C:71:B4:37:27:9F:69:F9:6B:0A:B4:43:6C:A5:FA:A8:5B:92
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer:       /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial:       018F88249DC4516C372356B0759E6AD60953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:51 +0000
Manifest this update:     Fri 17 May 2024 20:00:51 +0000
Manifest next update:     Sat 18 May 2024 20:00:51 +0000
Files and hashes:         1: 1Y4cXqzBq-syaCh4ZmGgHysqBgk.roa (hash: jKpSxvx0w0M/5Gj2mh2ylQULQliIpPnQJyzOwSgT+Pw=)
                          2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: To61JFU4DmFN3WODRGBTbFCDV/PWIhNTvTLeFnTA+N8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9d:c4:51:6c:37:23:56:b0:75:9e:6a:d6:09:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
        Validity
            Not Before: May 17 20:00:51 2024 GMT
            Not After : May 18 20:00:51 2024 GMT
        Subject: CN=46f61c71b437279f69f96b0ab4436ca5faa85b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:77:f1:64:f7:29:b3:de:52:b7:3a:78:0d:
                    cf:9a:ef:3a:fc:9a:cd:7f:e5:44:40:44:34:22:20:
                    d9:f2:78:6a:7c:02:b0:d9:0e:23:b0:23:28:7f:1c:
                    71:ab:8c:06:00:17:58:1b:03:5b:81:48:6c:32:48:
                    93:2d:94:c6:e6:f9:14:bb:7b:47:df:7d:09:ee:b4:
                    5e:73:4d:06:fe:d0:94:e6:e3:24:f7:ef:f7:79:8e:
                    6b:fa:e7:5a:2a:62:45:b0:dc:32:5b:03:3b:1b:7e:
                    d8:94:39:44:78:ea:a4:ec:33:46:59:cf:04:1e:a0:
                    b7:17:7d:c9:d6:7a:24:e1:2d:5b:0e:44:99:93:71:
                    82:53:fe:c4:60:c3:53:5e:72:a8:02:9f:91:f3:93:
                    73:0b:7c:7c:db:f5:c4:5a:78:39:57:3b:34:5c:b1:
                    b3:9c:62:11:6a:27:3e:e9:ea:79:9c:74:c3:9e:84:
                    81:ab:5b:44:c4:15:74:69:c1:eb:b4:74:f2:a7:d4:
                    ed:78:9f:33:34:ab:c1:94:19:43:27:85:2d:1a:36:
                    72:01:5e:1b:38:b2:87:ba:00:8a:36:6d:c2:dd:03:
                    ed:54:49:77:84:5f:c8:db:27:79:93:9e:6c:f1:08:
                    e0:ed:81:5b:25:a5:0b:16:48:d6:ad:31:d8:9a:36:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F6:1C:71:B4:37:27:9F:69:F9:6B:0A:B4:43:6C:A5:FA:A8:5B:92
            X509v3 Authority Key Identifier:
                keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:d1:77:0c:96:19:91:2a:76:34:3b:05:8d:09:3d:a5:3f:
         84:49:54:d0:11:25:16:92:03:7c:c1:ee:c9:0d:da:84:bc:12:
         71:12:99:f1:78:e7:f0:c6:49:85:e5:fb:32:b3:c8:7f:e8:a8:
         95:f1:9d:d9:28:09:8d:ec:ca:06:b2:05:54:ee:fa:04:71:7b:
         75:ee:cb:f5:7e:f5:47:e6:8c:1a:f3:66:90:81:18:f3:9f:d3:
         5d:21:55:cb:33:26:35:fc:c8:d3:50:5b:ce:79:0d:19:c4:c3:
         20:97:31:77:97:f6:db:58:95:3e:2d:0c:b5:3a:72:35:e8:d7:
         18:22:f8:06:b5:41:bd:ec:b4:b2:af:90:f6:31:50:d6:19:84:
         50:d4:86:72:05:0e:c2:e4:0d:f0:00:ca:99:f7:49:52:bb:fa:
         55:80:89:19:62:43:c6:a0:14:ef:69:8a:ea:96:d0:92:eb:12:
         6e:49:8d:fd:10:b7:76:51:07:01:fb:0e:f4:b2:b2:eb:a3:7c:
         71:4f:ef:c7:9a:b7:10:c6:8c:da:3e:c4:71:eb:4c:c7:a8:ff:
         eb:85:e5:c1:db:17:a7:b4:9c:fc:55:74:16:eb:23:56:8e:3c:
         60:71:10:a7:8e:f5:d3:50:41:3c:32:a7:b8:5e:6a:98:22:4c:
         56:05:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:40 2024 by rpki-client on console-ams.rpki-client.org