Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
File:                     OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json)
Hash identifier:          i9Q7hjsU1Z7DsIqAoqrA5LIWhgUr3o/t8dW7x37Kvo4=
Subject key identifier:   A5:84:80:70:8A:11:82:98:66:28:71:1F:A8:F5:17:DD:BF:EC:88:3A
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Certificate issuer:       /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial:       018F570349BBE8CE4DB12196FC02246F9D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
Manifest number:          0E9D
Signing time:             Wed 08 May 2024 07:03:04 +0000
Manifest this update:     Wed 08 May 2024 07:03:04 +0000
Manifest next update:     Thu 09 May 2024 07:03:04 +0000
Files and hashes:         1: ILr1oUS3WNj7lOx0gKWDmljoDf8.roa (hash: PKekSe9QALXUlXaAV5gd7ksF6Z+PSDBu0pg9bSLZBPw=)
                          2: NhBL06__L5XcxYEuIn0L50pwRjs.roa (hash: 5qZg8m9fpfGtH9610pRHgy/a0NvK/XOxWYxBGjD6bxQ=)
                          3: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: oNkntMLWQc0R7vnstV/lOn8/7wZneQDHpWRnB+WdSfM=)
                          4: RFfxaapS_vQyrkmmZQLFY15hv-g.roa (hash: DEUr0gAJ4rUsedletVyiNORU5Ow9A+cqDNsw8cJq7hY=)
                          5: ToG5SVaIe1aMNp1IJXqgYZl232E.roa (hash: 0CeH91XVh/wzRFcfzDhJZGcGpZ5aH+DyYm8Cy3Q/U1U=)
                          6: ZswLuE8xTpFjijEr7xnHMRmSDMI.roa (hash: xUP+inzdG1b7ZVqSQchmBhn+msiwJGSTVm7CuEHdxRA=)
                          7: _X37XPVHrFdw0mtv0RQAlO4LtYM.roa (hash: ca79JAfZ7oYzU13U+tH0I92+070ANgbKjpP/sYWJrmQ=)
                          8: r3Gy4wn92iIuLWmFRST98ph4FBQ.roa (hash: XPtgB2bTCBVH2+NgaKPj81KKkDUwMcuVeUBBDW+9YYc=)
                          9: sLMQOTgw6SPhburE63WoUY1c5Ew.roa (hash: 5bMThNgvoPfq7tvfVDiOPkA7In8Zy3dY8BYZ429DBaw=)
                          10: somf2MEdk4WC7d2Lke415mkyIog.roa (hash: eXCtaed9S0OHHEeDrs0crR1KqAF3HD7TCyy4cWsSCFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:49:bb:e8:ce:4d:b1:21:96:fc:02:24:6f:9d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
        Validity
            Not Before: May  8 07:03:04 2024 GMT
            Not After : May  9 07:03:04 2024 GMT
        Subject: CN=a58480708a1182986628711fa8f517ddbfec883a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:2b:09:81:3a:9d:1a:50:d4:9a:ed:38:2d:
                    47:a5:a1:43:dc:cd:71:3b:f3:34:b6:f1:6d:56:88:
                    a7:96:f4:7f:06:84:5f:d4:d9:c4:76:4d:b8:83:96:
                    60:0e:96:76:54:20:89:38:8e:bf:dc:77:60:94:ea:
                    90:a9:83:99:71:18:1a:b2:5a:ce:77:fb:7f:a7:e0:
                    a1:53:fb:ef:1a:2a:48:e4:5b:0b:07:c8:8a:07:ca:
                    80:80:65:b7:f5:2d:00:35:53:0a:02:87:98:75:21:
                    d8:46:f1:21:33:32:55:bd:59:94:10:06:fc:33:a3:
                    91:a7:cd:ad:d4:d5:83:29:a3:aa:4e:3d:d3:77:31:
                    ff:69:55:3c:4f:0c:99:a2:e6:86:a9:10:02:20:d8:
                    e0:06:77:fb:5b:d1:2c:35:df:ca:c9:40:28:2b:b8:
                    27:76:31:26:2c:90:50:46:d5:e2:b1:3d:f6:03:28:
                    8c:73:f8:4d:cf:9d:b4:40:f6:05:54:4b:0d:6c:08:
                    0d:4f:0d:c1:b3:95:3a:6f:63:71:0b:09:cd:da:e9:
                    6e:39:44:8a:c2:6a:f1:a1:64:ac:7d:69:98:84:d4:
                    fd:90:e1:05:f9:b1:dc:77:7d:84:dc:f6:5f:05:39:
                    df:38:96:62:b1:27:59:42:9e:ed:cf:b3:dc:c9:7e:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:80:70:8A:11:82:98:66:28:71:1F:A8:F5:17:DD:BF:EC:88:3A
            X509v3 Authority Key Identifier:
                keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:f3:82:19:a7:c5:5a:97:85:89:cf:48:fc:0d:5c:58:82:
         99:34:23:bd:ff:e8:1d:e9:65:20:cb:94:2a:3c:fe:6b:52:dd:
         cf:6e:d3:9c:5b:50:13:52:1b:53:44:20:c4:74:24:a2:2d:f6:
         7e:31:3b:73:23:01:b6:05:b1:a9:16:e5:09:8e:d5:3f:ed:22:
         00:45:e9:f7:1b:8a:4f:7b:d0:55:4b:57:d7:bc:1b:7f:e6:3a:
         44:f5:3f:6b:b2:79:29:3b:63:dd:f6:9d:2b:1a:dd:1f:8c:69:
         a6:54:99:40:1a:7a:74:9e:4d:9f:8f:b5:01:71:70:2e:9a:5d:
         30:92:f0:57:e0:98:02:75:1a:42:40:3f:84:d5:e8:75:cc:75:
         af:9b:b3:c7:a9:c9:ef:57:26:47:43:e9:f2:4c:fa:97:3e:99:
         65:cd:9b:6b:6f:ec:bc:cb:1f:b9:57:e4:87:aa:47:4d:f9:7d:
         b7:fc:26:2f:9e:f3:35:48:50:0f:76:38:61:8a:b0:be:7c:f2:
         cc:93:69:a9:c3:13:eb:56:78:67:4c:88:f2:c9:43:0b:37:19:
         05:f5:58:96:ce:6f:a4:27:cf:80:4b:9d:50:95:c3:39:c2:07:
         72:93:99:c6:d0:19:6b:a6:88:b1:90:34:b5:4a:00:4c:6b:e5:
         d7:b7:37:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:12:37 2024 by rpki-client on console-fra.rpki-client.org