Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File:                     oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier:          ulEUMMfps9TayuqTagK2PCY2k1vxM5Q0yvhiLF7Mo4k=
Subject key identifier:   50:60:F7:CD:5C:B6:52:81:1E:29:C2:55:36:4A:78:62:17:88:D4:ED
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer:       /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial:       018F87B65BD1EA706F8B888EE5A96E9CF4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number:          0C12
Signing time:             Fri 17 May 2024 18:00:26 +0000
Manifest this update:     Fri 17 May 2024 18:00:26 +0000
Manifest next update:     Sat 18 May 2024 18:00:26 +0000
Files and hashes:         1: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: uAxQPTVc3bBrILITLa0zeuomlVbO4ZU5BHSq28E0tU8=)
                          2: uloD8jS64gFfYfmTNkwIs_kLIW0.roa (hash: SdzG9+M5b/x/AcfxzJxdVrLfdKelJi/3glH+S156H+8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:5b:d1:ea:70:6f:8b:88:8e:e5:a9:6e:9c:f4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
        Validity
            Not Before: May 17 18:00:26 2024 GMT
            Not After : May 18 18:00:26 2024 GMT
        Subject: CN=5060f7cd5cb652811e29c255364a78621788d4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:f3:bc:dc:e3:ac:dd:d1:3b:6b:ee:6a:81:
                    1b:07:ff:be:3d:8b:f3:b9:04:2b:dd:2d:ff:b1:be:
                    18:07:6f:35:60:7f:ef:a5:67:22:4f:06:4e:b8:f4:
                    d0:31:5e:10:12:b1:68:16:cb:ca:21:73:b3:fa:54:
                    4f:f0:71:aa:75:5f:da:e2:0b:ad:2c:05:2c:50:62:
                    3b:6c:4b:94:e9:ab:35:cb:33:3f:21:5a:7d:5b:88:
                    82:c7:be:4f:63:0c:90:ed:b4:14:0e:9d:c0:82:5b:
                    d4:70:8e:a7:78:f4:98:d0:18:38:b9:bf:6c:67:54:
                    9a:3e:a9:8d:48:74:16:a0:66:fd:84:df:d7:9d:97:
                    0a:09:7f:09:94:c0:56:ee:dc:e6:ec:d2:9b:bb:dd:
                    79:ae:ea:72:1c:02:67:35:22:7b:78:a0:28:6c:91:
                    12:5c:b5:65:4f:ab:76:40:b3:93:9f:30:91:3a:28:
                    cb:5b:d9:df:d6:58:f3:eb:23:3d:84:b1:e7:b6:1d:
                    56:99:76:8a:ef:05:12:f7:62:a8:99:26:7a:85:6c:
                    7e:bb:47:50:6b:51:5e:f5:20:27:a6:bd:58:44:de:
                    c0:71:b9:c6:45:1c:77:ff:ff:c0:ff:25:87:a6:da:
                    c5:5f:4c:e1:81:6c:4b:65:93:35:79:02:fd:5f:74:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:60:F7:CD:5C:B6:52:81:1E:29:C2:55:36:4A:78:62:17:88:D4:ED
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:87:ad:75:0e:23:25:8d:33:23:e9:13:79:12:d6:3a:2b:
         d4:92:79:c6:14:41:6c:25:9a:80:67:f4:9f:1e:b0:26:53:17:
         e4:f4:97:1e:35:bb:68:2c:5c:a4:ad:6d:df:db:30:c2:37:e7:
         d3:42:c9:1d:43:58:b7:5c:a2:3c:3d:67:cd:92:20:35:00:1f:
         67:4b:73:1d:e9:81:80:63:03:9a:6a:54:5b:53:5b:cb:96:93:
         d1:67:3c:62:71:0c:27:de:a1:1f:80:fa:b9:ee:4d:8a:e0:c9:
         84:40:d3:3b:35:00:72:2b:b5:af:7c:b1:ce:b5:49:fc:96:31:
         e7:bb:15:ef:10:16:c4:fb:4f:95:22:55:d9:41:46:3e:92:d3:
         d5:34:c3:28:a5:07:ee:7d:80:81:ce:9a:8a:4a:7d:22:46:80:
         c5:97:ed:de:6c:e1:61:1d:ea:99:22:44:8c:92:82:25:e4:89:
         a3:cb:40:f1:1c:06:a4:0d:be:3c:fe:70:11:ad:5b:59:8f:1f:
         94:12:9c:48:12:58:9b:7a:89:31:02:33:19:00:ce:26:cd:89:
         aa:00:a5:33:a7:75:75:12:ec:b0:7a:2c:6a:0c:45:87:be:4a:
         02:19:37:39:b6:ac:55:3b:63:a9:7f:0f:66:f4:97:db:57:c5:
         96:6c:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:51 2024 by rpki-client on console-ams.rpki-client.org