Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File:                     OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier:          MbHSGi4+f/0jnFaqMqreNm010RBbFx0KrVgeXAtTtuQ=
Subject key identifier:   36:8D:22:72:47:CB:70:84:FA:62:86:EB:90:5F:DE:BD:D6:6A:C3:34
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer:       /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial:       018F877F3C36A7C4CC46219AEC05E05F4DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number:          DC
Signing time:             Fri 17 May 2024 17:00:13 +0000
Manifest this update:     Fri 17 May 2024 17:00:13 +0000
Manifest next update:     Sat 18 May 2024 17:00:13 +0000
Files and hashes:         1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: 2kagFxbqGSrcXEou+Y1X3/KdXAQonVj0M759vyXU558=)
                          2: pAuPjj9q-k0PexnlF5olfjeENRM.roa (hash: xVhnEHZLWAgaORYhg2oYkJluGkwPhPXFaYiliNUJi9g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3c:36:a7:c4:cc:46:21:9a:ec:05:e0:5f:4d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
        Validity
            Not Before: May 17 17:00:13 2024 GMT
            Not After : May 18 17:00:13 2024 GMT
        Subject: CN=368d227247cb7084fa6286eb905fdebdd66ac334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:87:f3:b1:01:09:56:85:cb:2f:c7:65:63:
                    cd:55:92:b4:28:d2:ee:7c:ab:81:ee:a7:fd:d7:96:
                    58:e9:06:a0:09:32:d1:a4:ff:85:26:20:92:7e:b3:
                    40:ae:fa:eb:7f:88:09:a0:33:75:b8:a9:61:92:88:
                    0a:d2:ee:03:2b:d2:e3:bd:a6:e3:3d:8b:69:58:4f:
                    9c:2d:9c:b8:3c:8e:9d:38:8a:30:51:2a:6f:c7:76:
                    fd:86:c3:d6:3d:43:29:e3:5a:dd:c4:bf:41:19:8a:
                    40:25:1a:fc:74:28:f7:26:bb:7f:89:54:a4:6b:d8:
                    92:be:67:b6:1e:ba:19:cb:4d:ec:e8:d5:28:12:50:
                    dc:f1:75:da:08:ec:60:23:d1:af:e6:e3:4b:18:3f:
                    65:16:0c:df:ab:43:85:27:18:09:bc:2e:f6:b3:9b:
                    c2:63:cd:14:a8:ef:71:4f:e9:4a:aa:1f:e5:87:70:
                    fc:b6:03:43:5a:b8:9f:ef:d6:c4:fe:77:14:6f:8c:
                    9a:90:91:17:d2:40:eb:93:5a:5a:e5:ab:e1:9d:d1:
                    33:3c:88:1a:4e:dd:b9:06:7a:f8:9f:30:ee:8a:d5:
                    ad:4d:f1:d9:78:26:89:1f:cf:22:4b:48:7a:19:66:
                    bc:81:29:c5:7e:e1:da:c1:7c:56:0d:22:03:ef:d2:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8D:22:72:47:CB:70:84:FA:62:86:EB:90:5F:DE:BD:D6:6A:C3:34
            X509v3 Authority Key Identifier:
                keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:ab:28:02:50:0b:db:d4:68:0c:6f:e6:c3:3b:50:6d:33:
         34:4b:e2:28:ee:aa:17:c5:78:25:94:e7:9b:b9:0e:40:29:17:
         ef:a5:ff:45:2b:39:c9:38:85:cd:5f:9f:e6:c1:0f:e0:b1:fa:
         c2:7d:bf:82:6d:c1:9f:09:91:71:9f:b0:85:b4:1f:38:7e:4f:
         bc:a8:32:78:fb:fb:7c:cc:64:01:36:fc:4a:95:81:7d:91:df:
         4e:16:93:2d:79:d2:f5:9a:e8:d8:92:cc:15:be:de:9f:d3:2f:
         b1:3f:67:81:4e:18:80:92:62:44:24:23:ca:22:69:ad:9f:40:
         ab:3f:7d:29:66:03:04:8a:b6:cc:38:6d:30:9c:45:21:05:9b:
         b2:1b:cc:56:f8:11:4b:83:3c:aa:5c:8d:9a:0b:e2:0f:f0:63:
         f6:b0:b7:e1:28:79:45:0a:39:64:22:2f:4c:7b:04:2c:7b:98:
         8e:58:8d:77:61:52:5a:41:73:bc:b2:8b:86:33:3e:5f:00:ba:
         16:40:60:8d:69:4d:24:e4:86:c9:37:96:a7:71:4a:48:08:1c:
         bf:aa:d1:58:1f:73:e9:b3:0f:26:9e:b3:fc:bb:b9:ca:f1:66:
         66:1a:57:55:bf:f6:71:e1:c2:b8:b4:55:68:94:9d:74:5a:4e:
         20:29:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:58:59 2024 by rpki-client on console-ams.rpki-client.org