Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File:                     o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier:          KyoHsNze9sCeUL6sV1ivGpY6523rdHp5E5Y7G+WFbIg=
Subject key identifier:   2E:6D:81:F6:5D:E3:38:CA:B8:1D:1B:7B:C7:B9:86:5D:AB:4A:EE:B5
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer:       /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial:       018F874A254F9BB9CB1C0EA0C47778E3E847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number:          1187
Signing time:             Fri 17 May 2024 16:02:14 +0000
Manifest this update:     Fri 17 May 2024 16:02:14 +0000
Manifest next update:     Sat 18 May 2024 16:02:14 +0000
Files and hashes:         1: 4ORe2X1iPPR8WW4U270aGg6m-9w.roa (hash: HnmO2+M/L6Bls//+lJ/dqu3Ge7stVfLuPpcOxh6vo7k=)
                          2: J5mBSix-udXnFbcxqhhMfR-u9mE.roa (hash: 5iTchAkjqwYFP/Kqx6Swg1w18G9Jysa1ksWuUa6LY68=)
                          3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: Q0uinhddR6Odtpq93ndA13iHbTK741ByJxqtpi1UPbM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:25:4f:9b:b9:cb:1c:0e:a0:c4:77:78:e3:e8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
        Validity
            Not Before: May 17 16:02:14 2024 GMT
            Not After : May 18 16:02:14 2024 GMT
        Subject: CN=2e6d81f65de338cab81d1b7bc7b9865dab4aeeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:4c:b9:a8:39:51:76:3a:80:d4:6b:dd:82:
                    ca:a0:ce:eb:60:d6:a0:40:07:55:01:1e:8a:7e:de:
                    9b:9a:80:d6:0e:41:e9:ba:d1:41:8e:28:5e:f0:d9:
                    53:9c:53:b6:72:2d:7e:1d:ee:61:a1:b4:a4:59:4d:
                    c0:5d:5a:f1:80:f9:46:e4:2e:52:7b:e2:8c:a1:3b:
                    64:21:6e:02:49:c0:e6:31:c3:9f:71:dc:f5:d7:47:
                    ee:95:f2:29:11:97:08:d5:0e:60:cb:d9:76:bd:8e:
                    ae:1e:98:c8:a3:7a:77:68:b5:6e:12:e7:24:d3:b3:
                    d6:97:ab:77:e0:ea:25:a7:f7:99:26:18:36:02:e0:
                    26:ac:da:a2:cb:bb:f7:6c:ed:f8:c7:05:d1:7b:ac:
                    4d:6c:c9:ef:bf:de:f6:59:ae:5d:67:5f:7b:dd:d5:
                    84:52:2f:fd:df:1c:06:81:f9:00:d7:84:62:c6:0c:
                    e5:7d:e4:e8:cc:40:98:ce:5c:fc:87:c3:21:0d:4c:
                    22:e3:f5:2c:16:01:05:f3:ef:62:3d:95:c2:e2:9e:
                    6f:c3:4c:ac:20:1a:65:fe:3b:97:21:8a:9e:a7:b4:
                    ee:03:e7:b8:39:1d:e2:ca:2a:8d:b2:9a:1a:a9:d0:
                    ab:63:0d:5f:25:58:3f:58:1d:e8:27:02:51:58:d6:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:81:F6:5D:E3:38:CA:B8:1D:1B:7B:C7:B9:86:5D:AB:4A:EE:B5
            X509v3 Authority Key Identifier:
                keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:12:da:43:48:84:25:ef:7c:b3:05:ba:8d:ec:27:8a:14:31:
         ab:57:fe:69:b0:e8:2f:88:b0:93:c4:39:a4:78:0c:b7:17:d6:
         63:3a:24:48:21:11:74:46:65:3f:65:0b:32:9f:06:69:66:c9:
         a0:af:ef:6d:7e:c5:97:db:07:1f:74:79:a5:e2:3e:a4:5b:3d:
         33:13:29:46:e3:3b:69:c0:1d:8c:12:51:cb:59:25:d5:71:77:
         1e:c6:8c:4a:d3:ca:68:c4:b5:bf:d5:af:ab:70:a6:dd:00:67:
         84:46:91:13:9c:3a:b1:ee:06:2a:03:05:65:12:03:2d:74:42:
         f4:c0:7f:2a:17:d4:09:14:28:90:0e:09:5c:d9:af:87:30:8d:
         80:10:15:d9:b6:0c:61:16:de:3b:d8:d2:4d:7e:35:67:f1:4c:
         69:64:6b:cb:4d:09:fe:aa:f3:8b:17:8f:95:f9:ee:cb:91:5c:
         97:be:1f:cb:88:78:a7:8f:c4:3d:1c:75:a6:b4:cb:78:f0:06:
         99:3b:f9:d8:c2:be:a0:50:82:a1:70:3c:96:74:df:52:44:01:
         bf:66:40:21:08:e3:88:09:3f:ea:b4:d9:99:e6:23:64:0a:a2:
         45:2e:65:2d:2e:6c:c1:f2:3d:af:a7:51:ea:81:b8:c6:33:68:
         2e:71:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:54:33 2024 by rpki-client on console-fra.rpki-client.org