Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
File:                     OcqgvSVNGof0uzDbO1E_25r2JfY.mft (raw, json)
Hash identifier:          tJM0ovk13aZq3WR+syjxWasrDGk257++MNRb8UdPD5U=
Subject key identifier:   0E:63:9C:BC:58:22:BE:32:29:1A:BC:C7:F9:AA:2E:3E:9C:A5:F6:06
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Certificate issuer:       /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial:       018F889250422DBF32AC41B360CDF5C789E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
Manifest number:          0389
Signing time:             Fri 17 May 2024 22:00:41 +0000
Manifest this update:     Fri 17 May 2024 22:00:41 +0000
Manifest next update:     Sat 18 May 2024 22:00:41 +0000
Files and hashes:         1: OcqgvSVNGof0uzDbO1E_25r2JfY.crl (hash: Pub9G9WlCqHfDW7ucxZB5oy1x5W3cCKTjSAK2FQr1Xw=)
                          2: VxlxdoLqNiPpy4IJtbfLwlSSzV0.roa (hash: uIUZieJ4FHgzdhmY+0JJ4SWlSVsKwFMrcPzkn4HdLRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:50:42:2d:bf:32:ac:41:b3:60:cd:f5:c7:89:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
        Validity
            Not Before: May 17 22:00:41 2024 GMT
            Not After : May 18 22:00:41 2024 GMT
        Subject: CN=0e639cbc5822be32291abcc7f9aa2e3e9ca5f606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:6f:58:7f:6b:88:79:01:e7:e4:6e:e9:95:
                    80:75:11:a4:61:a0:f0:e2:15:dc:9f:fc:db:a1:41:
                    b0:ce:77:1d:a3:ec:4a:e4:f9:7f:a1:96:27:b6:87:
                    1e:06:c4:dc:4c:2a:98:ab:24:95:cc:df:1c:49:1e:
                    70:70:5b:87:fd:b0:3b:13:10:5a:ee:98:9e:51:f9:
                    9d:7c:c0:3f:2d:7c:4a:2c:6e:20:12:41:be:00:5e:
                    44:b1:0f:0b:1b:57:70:6f:db:8c:c4:ba:6f:ad:13:
                    f4:d5:34:a9:56:92:db:b1:84:0f:93:77:20:92:12:
                    2a:4a:50:b8:f3:6c:a8:e4:96:95:62:f0:f6:00:50:
                    de:e7:45:10:80:79:ea:88:73:d2:1c:c5:13:17:a1:
                    af:ee:b2:e6:d0:4c:e9:49:4c:7b:6f:ac:6b:f2:98:
                    df:44:84:ce:52:22:21:c2:35:5e:c8:5a:78:c4:2e:
                    e6:8a:12:cb:04:d3:67:ff:0f:d1:79:11:23:b8:b0:
                    65:d0:56:91:41:d3:a4:53:15:13:ad:a8:5b:d8:63:
                    05:b2:6b:46:91:54:55:c5:e8:38:eb:72:40:f9:d8:
                    22:7e:58:0f:42:fc:37:ba:c5:0d:c9:32:f7:4a:5a:
                    5b:28:33:be:b1:1c:d6:c4:93:a3:3a:b5:f0:98:8b:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:63:9C:BC:58:22:BE:32:29:1A:BC:C7:F9:AA:2E:3E:9C:A5:F6:06
            X509v3 Authority Key Identifier:
                keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:8e:bc:8a:8c:55:9a:c1:e7:0b:f5:6c:2d:5b:a7:a1:1e:79:
         34:c5:43:ec:e7:fb:f1:b0:d1:75:61:11:f8:42:73:81:09:45:
         da:a8:19:e6:89:bc:ef:4e:43:10:8b:58:d0:89:85:7e:cc:fc:
         61:12:18:39:08:78:82:e3:7a:f5:ba:ef:94:e5:f7:99:04:68:
         81:a0:41:e5:b2:23:50:0d:29:42:fc:f3:64:60:6c:61:2c:d8:
         36:e7:bc:96:dd:f0:53:c8:56:f0:22:aa:1b:24:2c:9f:a3:bb:
         28:0a:5a:0d:1d:1e:78:0f:5e:53:a8:5a:f3:64:b1:5f:5b:a4:
         3d:14:bb:9c:53:dc:f2:f0:03:fd:10:d7:5d:71:4a:d7:9e:e7:
         cd:3b:cc:e7:b1:07:5c:d8:c1:07:c1:3c:b6:a1:e4:f0:48:1a:
         15:ab:84:7d:b2:a6:e7:dd:d2:50:63:80:0e:4d:61:b1:98:a5:
         f9:56:29:d1:46:d3:e3:f3:9b:ee:f5:29:f4:34:2d:4a:c9:33:
         a7:b4:97:6d:fe:ad:bd:d7:3c:a4:40:94:49:dd:fe:19:e3:f6:
         d0:f1:f3:6a:1f:e2:96:3f:de:c2:c5:f6:03:cd:d8:f4:5d:3e:
         02:e2:56:9f:70:30:6f:eb:fb:2d:b3:1f:f8:1e:02:13:f1:42:
         10:25:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:48 2024 by rpki-client on console-ams.rpki-client.org