Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File:                     o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier:          pwUM17L7h3k0QGQ9Ev/QyoLHVNxjMJayzrOKcBPtrPU=
Subject key identifier:   A4:E0:F6:47:C0:8B:00:77:2F:44:E7:C7:18:75:93:A3:11:17:51:5C
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer:       /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial:       018FB26AABB6EFCB76CC693C336B70792795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number:          118E
Signing time:             Sun 26 May 2024 01:01:26 +0000
Manifest this update:     Sun 26 May 2024 01:01:26 +0000
Manifest next update:     Mon 27 May 2024 01:01:26 +0000
Files and hashes:         1: 7cgIn8OXqWKBWzjmZpHG7RqY9uU.roa (hash: /PjGQYL3vQwjgAyl2Ojtk29i+eXnESpE43sdsFd8Z5E=)
                          2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: DoXIeS4HmF/SIsW5Z22szhPZUdLVcNP2CeGY/hzj1lE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:6a:ab:b6:ef:cb:76:cc:69:3c:33:6b:70:79:27:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
        Validity
            Not Before: May 26 01:01:26 2024 GMT
            Not After : May 27 01:01:26 2024 GMT
        Subject: CN=a4e0f647c08b00772f44e7c7187593a31117515c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c3:67:58:00:2f:ce:cf:c9:d2:06:49:83:3e:
                    51:44:49:3e:27:30:e5:0c:29:b5:d8:7b:cc:e7:96:
                    b7:dc:8a:2b:e1:0c:75:e8:3a:66:25:eb:f4:2d:54:
                    63:92:17:a0:58:26:5b:d7:88:05:56:ab:68:b6:72:
                    cc:18:8f:39:03:12:ea:b2:2f:30:3f:58:1c:7f:18:
                    81:d3:fe:ea:03:1d:ac:cd:4a:60:b1:51:a7:15:3c:
                    ce:2d:f9:c7:a4:4e:47:16:23:1a:a3:71:35:c3:ee:
                    96:88:8a:09:7d:4d:ab:8f:7e:32:b1:d0:77:d8:a5:
                    e8:35:84:87:03:3a:73:36:e9:fa:99:e0:1d:63:6f:
                    df:8e:33:01:b0:0b:86:64:29:22:ea:da:5a:2b:c6:
                    4f:67:3b:ee:0d:b6:55:3f:f9:21:7c:df:bf:d8:0b:
                    61:08:87:ae:1a:11:d2:9e:cf:a7:d8:3b:51:2e:1d:
                    fe:51:ec:5a:43:a1:08:55:25:26:4e:d7:64:47:d9:
                    6d:71:eb:71:73:12:ea:46:ca:6f:98:ef:4e:e4:14:
                    62:74:d0:46:25:35:dd:39:5d:a1:a4:89:e0:ad:b1:
                    c2:59:0c:d3:41:1a:9a:c7:8c:ad:42:63:de:2e:fd:
                    80:b1:f2:16:5f:bb:36:b0:34:07:7d:b0:01:7c:97:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E0:F6:47:C0:8B:00:77:2F:44:E7:C7:18:75:93:A3:11:17:51:5C
            X509v3 Authority Key Identifier:
                keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:d7:a7:03:1c:0f:10:a6:5e:4b:b4:1e:79:90:20:2d:b9:
         fb:e4:ea:91:c1:d0:b6:74:b2:1f:ae:6b:d8:30:1c:1e:a9:0a:
         5c:77:2b:dc:a2:0d:71:3f:03:85:68:12:4a:40:aa:30:a9:c0:
         36:2c:da:a2:d8:dc:d5:61:8d:ba:2e:54:92:6f:f6:12:14:b9:
         76:90:18:d1:d3:9e:f2:62:87:ed:cc:2a:65:88:a7:1f:f7:1a:
         9f:e3:d8:46:b7:fb:eb:b1:64:c6:81:fa:fb:df:13:1d:b6:7f:
         e2:cc:56:d1:84:1c:74:88:a5:eb:b2:ff:86:6f:13:9e:6e:a9:
         b1:01:d8:e1:78:28:02:90:35:d4:1c:d9:47:b6:73:4e:21:59:
         99:01:6c:84:36:fd:12:08:80:f0:3c:48:2e:7f:74:02:1f:76:
         26:1e:9b:9e:19:e0:bb:6c:4e:2c:63:4d:69:26:cc:f0:7a:ae:
         54:1b:49:ca:f7:23:87:6f:55:25:1f:43:75:14:96:d2:63:d6:
         93:b1:42:7d:1c:8f:d8:ff:2a:a4:67:01:1e:6c:7a:21:e9:41:
         ad:c2:85:55:84:b1:c2:e7:9e:ed:bd:53:8c:69:7c:32:1d:5d:
         44:50:5f:a3:93:16:cf:cb:14:09:bb:5c:ec:e3:cc:47:4e:2e:
         47:fd:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:58:12 2024 by rpki-client on console-ams.rpki-client.org