Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File:                     Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier:          Wi6x3/AvuAjQuF4hidDqwSHags4hNO12qGal4RPfaUw=
Subject key identifier:   18:B7:08:90:E3:5C:29:E4:DF:E6:06:93:42:87:3E:DB:25:39:72:3C
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer:       /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial:       018F866CF132E7CC7D3647A394A99E990A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number:          0C35
Signing time:             Fri 17 May 2024 12:00:37 +0000
Manifest this update:     Fri 17 May 2024 12:00:37 +0000
Manifest next update:     Sat 18 May 2024 12:00:37 +0000
Files and hashes:         1: 7p4GO_BeFOQo9RZ5rRsva1a-g4s.roa (hash: MD7CHecx54zBuxFOSDYlf0ddQy2Ve0BtTWHRDIC5KU0=)
                          2: OIhyWOTKjlptxci_fO3PEZsxwgk.roa (hash: w6Xub6dt16GDeGADmTQgAO1Jtz3XszSh33NrLDUKASk=)
                          3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: VqxBm7OAmer719pLKrTjLFR6Hj/NyCv6SiCZD9WKP+A=)
                          4: jgsL-JNXkk1yn6-KH57YxQ3sNT4.roa (hash: KYZEuwALNUosXDw8VKskpBQREoLm3E1X/8f7lMje9/A=)
                          5: q2b8j2QLI9q-Is-Mhode28ziJUI.roa (hash: fs1CIWhk0wPbID7yrPtjmyOmI9moAxHjNXQcBtaE5L8=)
                          6: tioPK1mYWU0Pn0U1tC3bvtbsdRk.roa (hash: Rr3uSRnIjAguCBoNiWmXOP4PbQlgbep3C3eY/p3jKCg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:f1:32:e7:cc:7d:36:47:a3:94:a9:9e:99:0a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
        Validity
            Not Before: May 17 12:00:37 2024 GMT
            Not After : May 18 12:00:37 2024 GMT
        Subject: CN=18b70890e35c29e4dfe6069342873edb2539723c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:4f:e2:1a:77:97:b9:2a:07:5d:03:7a:6c:
                    ea:3d:5d:f2:6c:35:8d:26:18:45:86:b3:e2:48:8a:
                    50:ef:d6:e7:51:78:29:dc:49:78:d4:19:62:4f:9c:
                    5c:8f:68:91:b9:c0:07:fd:4e:91:61:bc:95:c0:b9:
                    00:48:0b:e0:e5:75:e1:3c:d8:9e:58:55:eb:06:75:
                    90:d9:38:d8:0f:78:b0:a6:7a:b9:2a:76:f8:0a:b1:
                    8a:c6:65:31:a4:b5:ce:4e:d9:3c:e9:55:c1:f6:19:
                    d7:5b:7c:45:94:c9:d7:54:15:72:27:a7:b3:2d:65:
                    ea:1e:2c:bd:f0:28:6f:f6:fe:e6:c3:04:3b:8d:1d:
                    14:67:9b:f5:05:ab:0f:90:f8:8a:c1:1b:88:d1:1c:
                    69:60:10:3d:3a:1f:11:cf:67:f2:24:85:47:ac:e6:
                    fb:8a:47:c1:4d:81:c7:e3:6a:64:39:a2:ff:95:31:
                    be:43:79:f0:14:bb:7b:ee:83:df:3c:87:93:c6:1c:
                    3b:7a:42:db:b1:5f:8c:66:f8:9f:da:18:d6:92:30:
                    39:05:b1:87:ae:b1:df:af:c1:a6:b0:1e:05:c3:f9:
                    68:91:38:f8:63:ff:b2:ca:32:1a:62:27:ac:8c:c0:
                    5d:c2:bb:c2:33:a2:4b:48:19:bb:11:3d:90:f5:56:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B7:08:90:E3:5C:29:E4:DF:E6:06:93:42:87:3E:DB:25:39:72:3C
            X509v3 Authority Key Identifier:
                keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cb:99:fa:98:ac:19:a3:36:1b:ed:81:6e:d5:c7:d6:31:39:
         f8:12:e3:9e:c6:37:a9:3d:4b:90:33:81:b6:c5:f7:68:7d:64:
         9b:6f:f1:71:f6:d3:a4:09:b6:d1:a6:10:08:3d:95:8c:3f:1c:
         62:9a:a6:75:f5:dd:2b:bf:26:62:14:21:e4:d0:3c:ae:19:12:
         cf:84:75:b3:e7:18:2c:d5:73:ba:c2:f8:0a:5a:2c:a6:44:86:
         5d:fb:68:29:65:18:49:80:30:28:1e:18:8b:92:a7:bb:66:7d:
         a5:4b:99:89:60:fc:e6:82:b6:c5:46:3a:f0:8b:57:c9:ef:e8:
         00:27:c6:d9:50:37:e7:29:1f:c0:7e:8f:9e:0c:99:57:f6:83:
         11:c9:7e:d0:e9:64:fc:f1:94:2d:65:2b:a4:99:8b:99:70:c5:
         88:38:d5:ad:cf:65:13:db:17:62:80:9d:01:b6:4b:bb:2c:a0:
         13:9c:e5:b5:4d:8a:51:38:38:a6:04:a1:1b:dc:64:e1:d4:7f:
         88:a9:e5:2f:e3:1f:02:8d:ad:f5:df:79:a9:ce:f4:fa:99:49:
         62:1a:7a:34:3f:9f:06:56:bf:18:38:2f:78:11:31:ee:b9:4d:
         36:eb:d4:9a:09:1a:dd:a0:31:e2:e7:a7:5a:e4:37:10:49:0a:
         c9:f5:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:08 2024 by rpki-client on console-ams.rpki-client.org