Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
File:                     O2BOwM_ulmxBmzptXwgrVjwYaL0.mft (raw, json)
Hash identifier:          015i4e8TqeGPeLLi95LYv7iZLMxSqLXni2gAfZbujDQ=
Subject key identifier:   BC:9A:98:E9:F2:C6:1B:5F:AC:16:FE:6B:4C:4E:85:3A:A1:38:BF:D1
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Certificate issuer:       /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial:       018F866CB7863C6FBF5F3DD5F1C91D9D1249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
Manifest number:          0524
Signing time:             Fri 17 May 2024 12:00:22 +0000
Manifest this update:     Fri 17 May 2024 12:00:22 +0000
Manifest next update:     Sat 18 May 2024 12:00:22 +0000
Files and hashes:         1: O2BOwM_ulmxBmzptXwgrVjwYaL0.crl (hash: yL6QR51/LmvpA6olq+dnsq8H5iKa4U+gIQhOpvq6QSk=)
                          2: d7hGeELk-c59GNwaSK-0R5GYUac.roa (hash: Uhp/1BGk+SNcyeD+F3L4iX4LSjeMatYBrwROeo8IuVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:b7:86:3c:6f:bf:5f:3d:d5:f1:c9:1d:9d:12:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
        Validity
            Not Before: May 17 12:00:22 2024 GMT
            Not After : May 18 12:00:22 2024 GMT
        Subject: CN=bc9a98e9f2c61b5fac16fe6b4c4e853aa138bfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:f9:4b:cc:f4:54:1b:55:77:48:55:27:c8:
                    05:a1:3e:22:d8:3f:18:ce:f5:11:9f:e1:47:63:34:
                    db:67:31:08:eb:28:fa:a9:b8:97:43:b2:37:2f:f1:
                    9f:b5:15:3a:aa:9b:22:c7:fd:a7:21:33:8d:1a:dd:
                    ed:97:40:06:50:a5:65:67:04:80:a3:fe:aa:55:35:
                    84:1e:9c:44:f1:ba:a4:86:ca:10:3c:7f:84:aa:8e:
                    a8:20:83:6e:2f:2b:51:eb:bc:a6:59:fa:db:ef:91:
                    a3:33:c5:2b:cb:bf:61:2d:86:cd:b5:06:e9:a7:7b:
                    91:a3:40:da:3a:1b:5a:1c:6e:88:b9:63:a9:18:81:
                    12:62:9a:bb:15:f7:fb:98:0c:cb:8c:f7:81:61:88:
                    0c:b0:49:84:f7:db:d0:ff:98:63:32:c4:5b:d7:19:
                    3e:dc:42:63:61:3a:41:17:d5:46:72:2e:c5:33:bd:
                    6b:b0:2a:52:5f:9d:1f:6b:20:45:62:95:d7:12:c9:
                    7b:6a:83:76:0e:2f:5e:58:8e:7d:03:e0:ec:5e:ea:
                    db:63:3e:c9:15:67:85:07:fc:b6:f9:16:56:8a:4b:
                    97:ca:91:8e:f8:54:5d:f5:25:20:4d:d5:fe:98:27:
                    db:7d:02:26:17:bb:dc:cc:33:ba:c2:83:3e:1a:4f:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:98:E9:F2:C6:1B:5F:AC:16:FE:6B:4C:4E:85:3A:A1:38:BF:D1
            X509v3 Authority Key Identifier:
                keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:49:45:1e:d0:8b:1f:4b:16:dc:50:99:6f:00:38:b7:43:
         4a:b2:07:00:91:39:69:37:93:87:d9:ab:27:03:63:d1:e4:04:
         c3:62:75:9e:d8:1b:6a:93:01:b7:19:fd:60:22:d5:cf:e6:94:
         0a:3a:56:9f:1a:2d:ed:05:f0:16:e9:fa:ba:5b:22:48:84:75:
         e1:70:e5:b5:23:f6:03:30:12:2a:77:3b:dd:75:01:d5:ea:40:
         0c:0a:02:61:c2:ed:df:8d:a1:14:95:e5:45:6a:a9:0e:0f:07:
         da:14:75:9e:16:a3:35:35:82:50:f0:bb:cf:7c:e1:51:8e:70:
         b4:31:b5:9b:54:53:5f:e2:eb:fb:c6:79:da:05:eb:56:a1:48:
         81:1c:6e:ae:a1:ff:32:88:90:71:93:ab:4e:ea:a3:b9:23:35:
         49:10:78:50:7f:7e:11:4d:cb:73:df:40:7d:0f:fe:f6:55:fd:
         a2:14:7e:d8:36:d2:38:87:93:70:b3:db:5e:b0:7d:93:61:da:
         bd:a1:8e:90:58:96:e0:e0:b1:f4:44:1e:13:3d:6e:76:28:50:
         38:bc:40:14:35:1f:a2:a3:ce:f2:88:3b:47:03:29:17:e7:3c:
         19:6e:f7:23:10:9d:4a:93:63:92:a8:47:6c:31:4f:d3:2b:af:
         a0:c4:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:26 2024 by rpki-client on console-ams.rpki-client.org