Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File:                     f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier:          asPnNmr4Ncv5NPI0Hyl+ksoHUIzRIDU8BUf+pPkkJII=
Subject key identifier:   D0:72:80:2D:B3:F8:F2:57:F8:B6:1C:54:F7:D9:5B:C7:C4:75:CC:37
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer:       /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial:       018F86A38EA24FCA979C834A9164A827B8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number:          0A24
Signing time:             Fri 17 May 2024 13:00:16 +0000
Manifest this update:     Fri 17 May 2024 13:00:16 +0000
Manifest next update:     Sat 18 May 2024 13:00:16 +0000
Files and hashes:         1: WxlDWzOy4Fv4iKcjVJUKNbFCXDU.roa (hash: 3536b2nemRCGC9lKmJOL46IS+goTdyKnxVd8h8e27ic=)
                          2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: I9A47wJGRR8NI3vMYIHVt0X2I8oUyu7B1rWiOhn563U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:8e:a2:4f:ca:97:9c:83:4a:91:64:a8:27:b8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
        Validity
            Not Before: May 17 13:00:16 2024 GMT
            Not After : May 18 13:00:16 2024 GMT
        Subject: CN=d072802db3f8f257f8b61c54f7d95bc7c475cc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:e6:a8:58:f9:ae:87:a7:fb:d2:02:6a:0c:
                    cb:71:c0:c9:13:41:e5:d6:5e:c8:f2:4c:68:6d:94:
                    87:68:ef:75:00:70:d5:f2:8c:ae:c9:cc:af:27:28:
                    bc:9e:20:0e:10:0d:d1:5f:b4:27:86:3f:86:d0:4b:
                    c1:f0:50:2e:ce:97:ef:48:f3:b8:35:2f:f6:75:47:
                    5b:ed:9a:80:af:bb:56:7c:c8:7e:42:f7:9e:00:a7:
                    5f:8e:ee:87:bc:c1:00:86:97:4d:b7:bd:86:02:13:
                    f2:52:d6:86:30:9e:7b:aa:af:3d:64:87:b9:45:58:
                    71:d0:33:90:54:c8:76:3f:ba:6c:96:bf:54:08:8b:
                    3e:4a:71:04:9e:6a:ce:04:8b:f5:19:98:aa:01:15:
                    66:12:9e:c8:58:81:47:4f:91:02:7c:56:40:96:f7:
                    d0:60:e8:45:1d:53:3a:54:87:e8:d5:42:01:6e:50:
                    5a:41:8b:fb:47:1c:d8:a8:55:13:c0:3f:7a:57:89:
                    0d:fa:4a:7e:db:ed:07:ea:1b:b5:84:1e:af:1c:04:
                    28:0f:c5:1c:d9:43:d0:2d:58:8d:fd:ea:ff:ea:cc:
                    5b:0a:f1:11:9e:dd:81:a7:4f:05:7a:b4:ff:0b:2e:
                    11:8c:d5:fa:cd:0a:8f:bf:e8:2c:39:8d:78:73:9f:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:72:80:2D:B3:F8:F2:57:F8:B6:1C:54:F7:D9:5B:C7:C4:75:CC:37
            X509v3 Authority Key Identifier:
                keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:60:fd:0c:6f:38:8f:2e:1c:8c:73:b9:a2:2e:94:c6:fa:
         84:3a:ea:65:a0:ce:20:ff:88:4a:7f:07:dc:18:e1:3a:bb:03:
         7b:b1:e8:29:6f:6a:30:4d:65:4e:8f:2d:ac:e7:b7:5a:9e:03:
         cb:e7:55:64:de:86:cd:a3:a0:2b:cf:7b:61:9d:fb:04:ca:2b:
         68:46:7a:08:2f:7e:cf:f1:2a:e9:38:5e:f9:47:08:6d:ad:a0:
         20:c3:09:de:44:a2:37:32:2d:23:43:6a:f2:ca:3e:18:a1:ae:
         b8:17:78:80:e1:77:37:da:d8:9a:94:28:5e:35:34:99:fb:b4:
         16:0e:ed:db:91:45:63:0e:7f:60:d3:c3:93:b5:01:cd:20:19:
         af:fc:e9:c7:e8:f0:b6:f9:08:e4:33:49:6d:20:b5:e3:81:e8:
         23:06:03:93:bf:31:c9:5c:d4:39:2e:96:a8:60:24:d5:da:41:
         4c:b3:48:d4:9d:9f:78:f5:0c:f3:3b:f9:6b:e0:d4:c3:48:c2:
         d3:08:e4:21:dc:ae:08:08:18:1f:f3:d3:65:c9:48:f8:25:5f:
         df:71:99:a5:6d:39:64:65:38:b6:6c:00:46:89:c1:e4:1a:fd:
         0a:be:c8:00:aa:5c:8f:54:13:d4:51:2a:37:a7:67:75:cb:88:
         7b:02:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:50 2024 by rpki-client on console-fra.rpki-client.org