Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File:                     O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier:          VZz51mLXBAI7zfcJQbVPqH60POTMAGVjEpfRPE9H8PU=
Subject key identifier:   91:69:06:20:B0:A5:15:8F:47:AE:5D:7C:28:4F:90:81:06:DC:D6:CC
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer:       /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial:       018F8749817073DD370B121E7C398B65804F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number:          048B
Signing time:             Fri 17 May 2024 16:01:32 +0000
Manifest this update:     Fri 17 May 2024 16:01:32 +0000
Manifest next update:     Sat 18 May 2024 16:01:32 +0000
Files and hashes:         1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: G9VrsEtN83oR4AORK+Pj1ooCQlLpBX3ct4uHI08VHYY=)
                          2: hi_IrmTQFxOV1zM1MOB99U_EijA.roa (hash: PR9qToW+vsddrF4iEx2riOs5GTs75XwFFFuBz9w0aUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:81:70:73:dd:37:0b:12:1e:7c:39:8b:65:80:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
        Validity
            Not Before: May 17 16:01:32 2024 GMT
            Not After : May 18 16:01:32 2024 GMT
        Subject: CN=91690620b0a5158f47ae5d7c284f908106dcd6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:7e:1b:fd:3e:96:2d:f2:16:a7:a6:75:c3:
                    d4:84:bc:94:4c:38:e3:44:03:b7:4d:25:dc:43:76:
                    4e:ad:1c:43:a0:9d:b3:4b:a0:0c:e0:d5:91:2b:89:
                    9b:8e:af:a4:f7:4b:93:b6:c3:f7:d0:4b:73:51:3c:
                    0d:4f:b4:a9:f5:c8:88:e6:00:ec:aa:2b:0b:92:a2:
                    ab:ef:8e:5f:fd:5d:22:30:47:2e:a5:31:4b:9f:04:
                    4b:bb:3b:ff:07:40:bb:44:89:0b:8d:a3:ae:f1:40:
                    bc:97:9a:d2:4c:9e:55:49:e1:15:d3:90:54:81:d8:
                    83:ac:ac:c2:ab:e2:3a:3c:e1:bd:3b:be:22:41:64:
                    b7:e8:b2:15:ad:85:76:1a:58:f3:e1:66:e1:f7:c2:
                    9f:a0:31:31:ae:2c:e8:6a:41:93:a8:33:d1:a1:5c:
                    9e:12:d6:2b:15:db:f3:24:e7:a2:ad:81:3a:e4:b7:
                    49:cf:54:a5:72:c9:5e:a6:16:cf:23:d3:cb:6b:9f:
                    a2:df:60:34:91:6c:3b:66:1f:e3:f5:f9:2d:2a:03:
                    62:7a:bd:5f:4b:98:e8:d4:37:ad:78:59:2a:4e:91:
                    fe:a8:be:c7:66:0f:f2:f4:bb:99:62:96:b1:d2:a1:
                    8f:85:ab:af:24:b9:0e:e4:41:69:02:f4:1c:30:f3:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:69:06:20:B0:A5:15:8F:47:AE:5D:7C:28:4F:90:81:06:DC:D6:CC
            X509v3 Authority Key Identifier:
                keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2d:de:a5:ca:53:3d:f1:58:93:08:26:3d:28:de:45:01:24:
         71:03:2c:6f:ff:01:89:8e:67:b0:93:a1:40:24:35:5d:2d:85:
         7f:29:63:b7:a4:ac:03:c4:41:da:28:12:ed:8b:ee:03:0d:72:
         54:2a:86:e0:fa:f6:b0:76:84:20:39:0e:63:3b:0e:ee:f1:50:
         2a:3b:4f:f8:a4:16:71:c5:23:33:7a:04:1a:92:c1:2b:f2:30:
         6c:92:48:62:a5:0c:d2:46:93:c9:12:86:b3:56:96:a4:ad:74:
         53:49:bf:37:72:0f:48:b2:00:e7:d0:1c:3b:78:3e:08:bd:88:
         48:63:5d:38:b1:9e:44:8a:5f:b7:5b:b4:61:7f:61:6a:2e:37:
         bf:57:28:dc:93:77:35:59:3a:88:bf:28:35:ea:90:78:ea:02:
         df:0d:ee:d3:74:08:24:97:ed:ad:72:74:c5:c7:87:e7:1a:4b:
         76:0b:a1:cd:99:6c:7c:0b:8d:66:cc:9e:8e:ab:ef:5d:08:55:
         9e:6b:90:be:52:17:b2:7a:f1:11:b5:00:db:97:12:c7:65:1c:
         49:a4:9e:93:48:66:3e:ef:ff:e9:86:2a:61:02:67:b9:5f:e4:
         f0:3d:29:23:4c:48:1f:09:b5:05:21:39:2a:b8:4f:9f:53:bc:
         26:8e:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:14 2024 by rpki-client on console-fra.rpki-client.org