Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
File:                     ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json)
Hash identifier:          +f7sp8STYN6q9S+/QVzQoL3PnV2VgORQEUI1R60lOhw=
Subject key identifier:   06:D7:68:79:35:5B:E9:84:00:8C:A2:46:FE:B4:A9:2F:78:F6:9A:5E
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Certificate issuer:       /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial:       018F88243A1D4446741C173F81873574CF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
Manifest number:          1191
Signing time:             Fri 17 May 2024 20:00:26 +0000
Manifest this update:     Fri 17 May 2024 20:00:26 +0000
Manifest next update:     Sat 18 May 2024 20:00:26 +0000
Files and hashes:         1: 1b1sfeuUrI6kHZZcru0rVUPN6xs.roa (hash: 5DXVyGF9+ODXXosS3KiNDVTiRt7dAPB8oE2s8NuxB14=)
                          2: 3huFFsbphldObsDJWECB2zJOaPo.roa (hash: R2WXSrRbSzKlIoFxTRfVS07hf5RvC1wJrGu0kv/Yw6E=)
                          3: 7AUCOp8doWAnFtkF84ohyXaw_V8.roa (hash: 1Aa9w+YLf7szXydvZ6yQdvFkVOWBB1ppD9PDcmJ0bOM=)
                          4: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: tgkb7jk/diTEoPm0rcc8bMw3VSfLGN7L/axQmxn78So=)
                          5: RYIPtWVXSSza31HEB8r_uZmgeTI.roa (hash: 42kcuynvlcrgmsVZFXRCGdLIO5CNKUaxgM8+2Wb840c=)
                          6: a4YsGT-AwRqEZqUc_gFJdMQqb1M.roa (hash: U3agAORIA0H2LAsf5q7/o3vqT0lHAYKjazdYqGzW2pY=)
                          7: aMcI3IXm06cgbR_KJnqGt28zZ-8.roa (hash: chb/OvRT2T3jcGSvoKb8dvp5jFoWeKhTTEO6gGR8PXU=)
                          8: ljErZIQ9clzEzn49eM6c8voNk-s.roa (hash: 9ntGoDtDwvb/cekg1nOWuu+4MJOEpG0mVAnyAT7jlco=)
                          9: nevZ6euM76WMVvW6gwVEf5P2BW4.roa (hash: SieEc8r9ZNxd7n2oeA+DFz5OR5VkyV28urJmNXP7muU=)
                          10: sfQZPpGpNeYVWXlyQqqfFO1t7t0.roa (hash: ri3ZVcjnGr/qNykNmEWEMclDO7bE40245vOX+J8H8QE=)
                          11: wMsOz3AXQOjBsWoWLodPOyFasfI.roa (hash: WeOKxjC6hdXry8MmMzVaE2aKLRmjlNMw2ySRYlYGpXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:3a:1d:44:46:74:1c:17:3f:81:87:35:74:cf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
        Validity
            Not Before: May 17 20:00:26 2024 GMT
            Not After : May 18 20:00:26 2024 GMT
        Subject: CN=06d76879355be984008ca246feb4a92f78f69a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:cb:57:2f:bc:4d:20:1f:61:64:15:e4:a5:
                    23:cb:7c:fb:92:32:76:0b:9c:4d:18:a8:e0:34:cd:
                    50:72:57:51:f2:57:31:bd:c6:a3:a8:b0:11:ca:35:
                    af:b0:42:af:1e:c6:e5:3e:c6:df:6c:66:d2:36:15:
                    3e:73:a9:bc:0b:44:db:5c:37:1f:66:61:9f:16:87:
                    1b:16:c5:03:20:e3:8a:ea:b8:12:0a:dd:d2:92:bc:
                    83:06:43:d8:24:e6:16:9a:4d:2f:13:9e:4d:70:a1:
                    1f:05:be:d6:37:3e:9b:d5:ce:e7:eb:fa:ec:ca:6b:
                    73:c7:b7:22:6c:80:38:8e:d6:80:ef:d0:11:e9:27:
                    43:42:81:a5:ac:ad:bc:2a:57:b4:9c:30:83:ec:bc:
                    47:00:8b:71:41:d7:25:b2:f4:84:73:06:a7:28:65:
                    39:71:52:e4:5f:ef:1d:85:f8:c9:31:9a:b6:24:79:
                    46:bd:ab:b3:d7:86:3d:7b:22:f2:66:7d:d5:82:9b:
                    d8:fa:9d:05:d0:6c:a9:5e:95:4f:26:ce:45:39:75:
                    3c:db:9e:48:3a:4c:8c:a4:4e:eb:15:4d:5c:52:d5:
                    6d:4c:bd:af:58:1e:d6:8e:04:33:10:54:c3:1a:1b:
                    11:8d:df:7a:ef:74:ad:b1:14:06:e3:d9:39:c4:d9:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:68:79:35:5B:E9:84:00:8C:A2:46:FE:B4:A9:2F:78:F6:9A:5E
            X509v3 Authority Key Identifier:
                keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:33:ee:72:ee:c2:e8:7b:f5:66:21:9c:2a:0c:75:71:ce:2a:
         c3:db:a9:7c:f2:f7:9e:94:a8:69:b4:bd:26:78:44:f4:ba:d2:
         b3:39:69:c8:47:cc:c6:6f:f0:a4:c7:71:25:8b:8a:39:50:33:
         61:a7:a2:4c:3b:a5:34:ae:40:64:a3:0d:c1:62:8a:8c:96:b1:
         02:d0:0e:9a:f9:5d:c8:03:2b:25:b0:4b:3d:79:a0:34:f3:da:
         0b:81:b4:05:fd:ba:6b:7f:d0:18:78:25:3d:96:f1:2c:b7:fb:
         31:7d:43:66:3a:70:8e:13:81:14:1a:94:04:a0:7c:db:4f:13:
         15:50:41:37:f8:f0:e5:80:54:b0:ff:19:95:a8:18:02:05:a4:
         93:91:2f:5b:d3:91:77:97:a0:df:37:c6:38:0b:ce:77:80:68:
         44:64:8a:99:83:29:ec:8c:b7:e0:cf:98:3f:83:4f:a8:10:11:
         8e:47:dc:35:c4:0c:80:7d:8a:c5:d3:de:48:12:35:74:24:2f:
         6e:eb:58:3e:9c:8f:7d:5b:3d:71:b7:50:20:e4:e9:30:68:d7:
         73:9e:f0:de:4e:6c:01:0f:65:41:27:d7:c3:53:33:96:f2:f7:
         1a:da:f0:b5:ef:e7:31:59:6c:9e:44:35:50:a3:eb:b0:26:3e:
         65:f7:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:06 2024 by rpki-client on console-ams.rpki-client.org