Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File:                     OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier:          2AKXYalVPmaPI7IXk73FqghkjzyB4ZXjiOpGsVuEOXI=
Subject key identifier:   70:D5:15:C3:E6:E9:C6:A7:FA:50:BE:7F:41:5A:83:13:78:8F:7D:30
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer:       /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial:       018F8DEF9124A801343AEACF853CE76EE809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number:          01F1
Signing time:             Sat 18 May 2024 23:00:38 +0000
Manifest this update:     Sat 18 May 2024 23:00:38 +0000
Manifest next update:     Sun 19 May 2024 23:00:38 +0000
Files and hashes:         1: FfIZ2qbJX7YHYpHv1LL-IF7peRc.roa (hash: 5KAjkEvQR+TyOSqH9rjqbi9YEXImRnTFiCP8cdRcDNc=)
                          2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: 7TyZkXcVN6vdHpzToeDUlb9SXv7OPls00wZGS7Pzy00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:91:24:a8:01:34:3a:ea:cf:85:3c:e7:6e:e8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
        Validity
            Not Before: May 18 23:00:38 2024 GMT
            Not After : May 19 23:00:38 2024 GMT
        Subject: CN=70d515c3e6e9c6a7fa50be7f415a8313788f7d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:1d:03:e3:69:fa:8d:be:35:a0:a3:38:6f:
                    60:58:0a:59:ce:6b:45:e1:ec:f1:93:a4:9d:03:f0:
                    dd:b0:1b:74:a2:b6:ac:49:b7:fe:18:9e:b3:d2:bd:
                    87:bb:37:41:dd:88:08:ae:ef:65:f2:60:f3:95:9e:
                    0e:c7:12:88:1a:8f:80:e6:62:64:0b:e3:f4:14:4a:
                    e2:a4:a0:a3:eb:d0:69:56:ba:b9:9f:c0:29:67:f9:
                    cd:6b:aa:2f:7b:2f:cf:27:e1:6c:a7:02:ed:cb:1b:
                    41:f1:42:ae:fb:e0:11:01:98:4d:9b:7b:ea:7f:7d:
                    66:c9:dd:da:b6:35:b9:32:05:7d:d2:d6:ff:e0:1c:
                    7b:e9:b4:85:87:5e:28:11:27:84:20:26:c1:43:d5:
                    b7:76:d1:ac:bd:e6:16:4d:3a:de:e7:75:be:74:79:
                    bc:33:8a:c1:01:18:20:69:5d:37:42:2c:9e:58:52:
                    c4:e9:95:4c:79:6d:42:41:15:1e:c3:84:18:ab:f9:
                    3f:16:d1:a0:0d:f1:16:34:b3:aa:a2:b0:e8:45:fa:
                    d8:fb:ac:f3:78:2c:40:73:39:bb:9a:67:65:bd:fc:
                    47:d9:7c:42:95:eb:26:95:07:21:9a:a4:e4:51:d9:
                    7e:68:51:7f:82:0b:03:85:d1:0b:1f:64:27:ad:73:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D5:15:C3:E6:E9:C6:A7:FA:50:BE:7F:41:5A:83:13:78:8F:7D:30
            X509v3 Authority Key Identifier:
                keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:47:cf:b8:d2:a5:0e:b6:53:d0:18:c2:9c:f3:db:15:d4:69:
         da:d2:ce:09:c5:50:a2:48:eb:1e:08:48:de:8a:5e:47:2c:c1:
         98:92:41:86:20:6c:1e:ee:db:84:8e:8e:0d:1a:2a:59:8e:ae:
         9e:f4:1c:f2:d9:b5:ef:64:0f:28:45:29:b8:c5:9e:2b:ac:c4:
         c2:dc:49:c2:7f:72:0a:af:57:db:87:e6:7c:38:a1:c2:c1:aa:
         58:08:7c:48:db:70:30:b6:2d:99:d8:19:5c:96:09:26:a8:4b:
         3a:71:78:d6:64:ae:bc:4e:c3:06:9c:e8:f5:90:94:06:b7:4a:
         75:d9:42:9c:0f:61:53:6c:ff:3f:2d:c1:33:6d:80:95:68:e3:
         96:c6:6c:81:2f:63:83:48:3a:03:db:51:84:8f:45:d2:31:06:
         09:82:15:d8:e1:43:d0:72:c0:db:98:c0:9b:4f:35:5f:ea:06:
         a1:c6:73:05:12:3e:d5:cd:03:9c:a9:74:a6:0c:fe:33:96:c6:
         f8:ac:77:56:74:07:bd:63:7c:a8:1b:93:b1:b8:62:77:14:99:
         cf:7f:bf:ac:8f:a8:0e:da:9d:fb:a6:2c:43:22:16:f2:74:30:
         83:5a:84:f7:9a:ce:65:b6:6a:af:74:f5:47:b1:89:c9:c0:aa:
         f8:ee:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:16:22 2024 by rpki-client on console-fra.rpki-client.org