Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File:                     o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier:          1ZxIM6P6ELFfAQWmYhSISzcgeC5ClgVRm8snv6SrOUE=
Subject key identifier:   9C:93:4C:A3:09:EE:09:07:20:49:BB:3C:37:17:77:52:82:D0:24:5E
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer:       /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial:       018F87B6CCBF40955AD97FA124C43B2BF82E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number:          0E12
Signing time:             Fri 17 May 2024 18:00:54 +0000
Manifest this update:     Fri 17 May 2024 18:00:54 +0000
Manifest next update:     Sat 18 May 2024 18:00:54 +0000
Files and hashes:         1: Qml9SyeRjUOWuE1hVRihuu0Lo7M.roa (hash: jbkxw2b8mChEmY5mQNvVNj64jOKLZrqSeqANgR2IIJ0=)
                          2: guBY5axYg6fQaqviS0rbcHGzcm0.roa (hash: RG9zrPmkYfp0eq4Y/LDfyKXSYM0KVej4LePIS3gFDkI=)
                          3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: xTP3RfL/wKPVo5ayOriaQlfGFGP3E69bPx8AOw9NjLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:cc:bf:40:95:5a:d9:7f:a1:24:c4:3b:2b:f8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
        Validity
            Not Before: May 17 18:00:54 2024 GMT
            Not After : May 18 18:00:54 2024 GMT
        Subject: CN=9c934ca309ee09072049bb3c3717775282d0245e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:e6:77:91:ed:af:3d:fe:c5:aa:9f:3f:be:
                    58:98:09:b6:fb:16:33:7e:b6:48:ce:4e:a1:16:e3:
                    8d:e5:d5:85:86:23:63:cc:63:55:fe:e3:bd:31:0a:
                    91:57:84:c9:95:c0:74:ca:cc:c4:39:ea:8f:10:27:
                    de:f1:b6:c1:42:42:65:7e:0e:aa:fa:0f:50:b4:8e:
                    19:66:04:4b:ce:d0:2b:5b:00:81:9c:d6:9b:04:f7:
                    04:ec:a6:89:ed:6a:9e:34:b0:06:5f:59:26:01:34:
                    2b:fe:2f:41:29:6a:bb:47:2f:cd:a4:32:60:11:7b:
                    a0:3b:51:2b:fe:98:05:7b:6f:c1:5b:65:18:93:de:
                    01:39:f1:c9:80:26:95:80:14:82:06:e8:1c:7d:5a:
                    10:e5:02:a1:40:72:9e:73:91:c9:6c:fe:d8:2f:d9:
                    0a:4b:d2:8c:bf:77:66:d4:41:d7:6f:40:a1:a6:1b:
                    34:8f:a4:49:8a:2e:e3:c2:55:cb:04:ec:5c:1b:2c:
                    95:34:8c:6c:b9:41:7b:29:1b:06:13:22:60:14:bb:
                    cb:52:0d:6a:dd:08:df:c2:01:9a:11:7e:63:4f:80:
                    41:34:ec:ff:46:a4:1b:43:94:b5:32:7a:b2:46:65:
                    51:80:b6:fd:29:5a:b4:e5:d2:66:84:4a:aa:15:5c:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:93:4C:A3:09:EE:09:07:20:49:BB:3C:37:17:77:52:82:D0:24:5E
            X509v3 Authority Key Identifier:
                keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:d6:ef:6e:f4:e7:e6:d9:bb:fb:74:42:ee:0f:2f:40:23:
         a1:30:b3:32:8f:30:a2:74:0a:da:20:aa:13:ba:87:b8:bb:aa:
         11:65:c6:40:af:5e:86:9d:fa:81:db:94:c5:74:89:29:ec:74:
         4b:4e:1e:49:c4:9d:0b:d1:0c:b5:4d:79:98:c8:01:41:54:7f:
         fb:b5:2e:dd:bb:43:98:6b:dd:23:f8:a5:f2:49:32:12:ff:53:
         0b:30:93:24:c9:7f:6e:ad:56:af:6f:86:50:74:0d:30:33:3d:
         a8:8a:93:c9:b1:d7:51:8c:cc:8a:6d:4b:f2:dd:b5:1e:44:a5:
         fc:d3:cf:5f:d9:09:0f:7b:68:e3:f0:7c:35:6d:a9:0b:27:52:
         f3:77:2c:41:8b:4f:9a:c1:98:9a:c9:89:2a:55:ab:1c:32:64:
         4c:59:a7:30:1c:59:44:0b:45:53:9c:ae:ad:d8:60:78:bd:4b:
         72:5e:b6:45:b7:dd:cf:41:8d:e1:db:4d:ee:af:a9:2b:6c:ce:
         43:44:12:57:25:31:5b:2c:a7:df:10:55:5e:67:a8:7a:9d:89:
         0e:0e:7b:96:c1:ff:24:68:47:84:57:1c:81:60:4a:46:1a:b3:
         76:61:e7:f2:a9:cf:b0:ef:a6:08:3b:88:48:a8:e6:ac:dd:2f:
         a9:ad:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:39 2024 by rpki-client on console-ams.rpki-client.org