Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File:                     O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier:          kGbzrh15n+e7TqPpFJO5Ww+5yuq6UA6yQ8W1OQaH6Ng=
Subject key identifier:   CF:3C:91:DE:90:4D:3F:05:05:B8:7F:02:21:8B:BB:17:81:3E:F2:0E
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer:       /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial:       01907508A9162995E0858D50199A6EA28A70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number:          B7
Signing time:             Tue 02 Jul 2024 20:00:20 +0000
Manifest this update:     Tue 02 Jul 2024 20:00:20 +0000
Manifest next update:     Wed 03 Jul 2024 20:00:20 +0000
Files and hashes:         1: 5cFouaeMdqNky0CoRe-4KADJ_lg.roa (hash: TIIIFr+7bCOHV8Z0SqUsErxUbpGtAQAHRW6lKCCkOTs=)
                          2: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: Wlmof9NmMoBvT8ctuoI9wjAy94ycu0P6HSrfu5uvrjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:75:08:a9:16:29:95:e0:85:8d:50:19:9a:6e:a2:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
        Validity
            Not Before: Jul  2 20:00:20 2024 GMT
            Not After : Jul  3 20:00:20 2024 GMT
        Subject: CN=cf3c91de904d3f0505b87f02218bbb17813ef20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:36:3a:e3:ed:05:71:c1:89:eb:00:a3:47:d8:
                    b3:b6:12:4a:b6:f4:e6:e9:3b:af:9c:81:c9:72:06:
                    69:da:26:ab:9a:e3:fe:e5:68:7c:dc:12:43:6e:41:
                    a1:2f:2f:f9:87:84:4c:76:32:ec:c1:58:dd:35:42:
                    83:9a:35:e9:6f:a5:1e:18:4f:f4:fd:22:42:4a:f1:
                    37:2a:03:6b:e0:80:d3:77:d7:cb:3e:fb:73:8d:0d:
                    b4:80:98:8d:ca:3f:62:77:ec:45:44:a7:bd:bd:d5:
                    7e:05:ae:77:72:e9:04:47:2e:26:95:ed:b5:a5:1e:
                    15:12:84:fe:56:86:e1:50:aa:ed:42:f5:f0:e2:b1:
                    cf:9e:3e:4c:7d:e7:a8:60:88:90:07:92:8e:62:11:
                    c2:9e:e6:e7:c7:56:dd:13:44:4f:aa:af:45:1e:c1:
                    cc:39:e7:93:f5:03:af:23:f2:03:b5:2b:b1:74:4f:
                    48:da:27:1b:61:9e:5e:87:f0:86:09:94:ce:85:cc:
                    d4:f9:7c:f6:7f:18:0d:d0:86:78:43:8f:1b:e1:e1:
                    9f:49:c6:25:52:86:5f:3b:33:16:ff:a1:c1:26:a7:
                    c9:c9:f3:a2:f7:9e:2e:cd:89:ee:79:ae:f2:35:84:
                    13:89:44:bb:13:18:26:20:3e:67:19:ef:c1:99:e4:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3C:91:DE:90:4D:3F:05:05:B8:7F:02:21:8B:BB:17:81:3E:F2:0E
            X509v3 Authority Key Identifier:
                keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:86:90:26:d0:25:30:74:ae:35:9d:e7:22:c6:09:34:76:
         53:9c:a5:6d:a0:f3:9a:f9:29:c6:c5:bb:c8:f3:d3:ae:c4:4f:
         77:9e:ba:c8:40:f1:0e:20:1a:4c:37:91:0c:61:54:7a:5e:8e:
         df:9f:f6:ae:e3:16:87:57:91:5e:8f:6f:ac:c3:d8:ff:5a:98:
         52:15:24:ad:c1:52:49:a3:89:58:55:9e:a1:68:80:15:8c:4b:
         a6:da:bd:39:d7:10:1c:12:1c:3b:32:85:45:3e:da:5f:17:b8:
         bb:87:b9:b3:ba:c6:8a:41:a2:13:de:60:36:35:e3:79:d8:48:
         2b:90:ab:31:9b:38:32:3e:f9:87:9b:92:e6:af:7e:a3:36:50:
         cb:8b:34:48:6a:6f:8a:e4:c4:5d:5a:c3:30:5d:f6:ac:e3:44:
         0c:28:9d:e0:ff:8f:6d:76:2d:43:aa:e8:d4:99:c3:c6:20:03:
         69:4c:3e:67:17:20:6a:9d:e5:40:66:f4:e8:fb:e1:15:10:91:
         49:3a:50:60:4d:1f:9b:b3:87:bc:da:2f:17:04:57:d0:df:9a:
         ad:1f:14:c1:63:5b:bc:45:bb:fa:ec:ed:32:ac:0e:a1:43:a3:
         5e:60:1f:17:62:64:67:eb:a5:66:e4:51:38:70:0d:61:eb:84:
         3f:3f:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:30:15 2024 by rpki-client on console-ams.rpki-client.org