Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
File:                     o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft (raw, json)
Hash identifier:          m7fc+D26TJwwJqQHWai066xnsZt+myuYEH5L0//8XNo=
Subject key identifier:   66:10:89:2B:0D:AF:BD:FA:F0:42:03:3E:1A:A2:1D:2C:69:85:7A:D0
Authority key identifier: A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
Certificate issuer:       /CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
Certificate serial:       018F8748F5F919991490FE613388ACB26360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
Manifest number:          046F
Signing time:             Fri 17 May 2024 16:00:56 +0000
Manifest this update:     Fri 17 May 2024 16:00:56 +0000
Manifest next update:     Sat 18 May 2024 16:00:56 +0000
Files and hashes:         1: hetelT-FRG_bHpO0RqW2JskTYug.roa (hash: je/CZRQfYGzlTl5t2Ogh0NcIDSAzmn8Eoi/V49KsI0Y=)
                          2: o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl (hash: d1uJsb4GFlVP5KUmkYJhQos1TdH+JQZ1mB0IPlmDza4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f5:f9:19:99:14:90:fe:61:33:88:ac:b2:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
        Validity
            Not Before: May 17 16:00:56 2024 GMT
            Not After : May 18 16:00:56 2024 GMT
        Subject: CN=6610892b0dafbdfaf042033e1aa21d2c69857ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:9a:82:16:6e:be:24:a7:89:af:41:2e:04:
                    ee:4e:6d:86:ca:8a:70:d1:c2:10:ac:f0:c3:1e:44:
                    b2:06:b7:53:16:96:2a:fc:60:09:91:0b:c6:82:b3:
                    7b:75:70:73:82:4a:f8:60:c5:d7:f7:05:ce:d4:03:
                    c9:b7:57:8c:bd:e3:b9:b0:72:d1:2b:cb:c8:ca:0b:
                    8e:00:13:19:3f:6a:30:fd:b0:81:d7:18:fd:1e:93:
                    90:49:7f:37:8e:8f:d7:73:c1:56:54:f0:2e:ec:e6:
                    4a:cc:30:64:2b:41:43:dc:b1:84:b9:4a:ab:6d:b5:
                    0d:09:5d:7b:a0:df:5f:ff:52:cf:a3:9d:8a:04:e1:
                    b8:bc:2f:7a:a0:0c:21:e7:63:7a:3f:a7:10:a6:40:
                    d7:34:ad:b5:3c:f6:09:a1:31:11:f0:06:3d:4b:05:
                    fc:4f:3b:2e:94:59:07:43:94:da:64:d3:90:42:45:
                    a2:cf:03:a3:99:15:17:fe:ae:2f:e2:21:25:8c:a7:
                    bb:87:e0:24:97:10:9b:d0:f9:95:46:49:e9:00:bb:
                    02:12:ca:3f:b8:46:62:58:72:1d:36:f3:e7:02:26:
                    8e:7b:fe:39:b1:de:87:f3:f2:28:62:cb:fe:66:e0:
                    9d:dd:a8:1a:3b:60:24:a0:4c:bc:f2:ff:6e:52:da:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:10:89:2B:0D:AF:BD:FA:F0:42:03:3E:1A:A2:1D:2C:69:85:7A:D0
            X509v3 Authority Key Identifier:
                keyid:A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:b1:a1:a8:68:02:f8:9d:58:0a:97:93:9a:32:ed:6f:29:
         c3:14:6a:01:bf:73:d9:d5:a9:48:4f:ea:99:ad:25:2e:66:f8:
         8f:43:b6:af:e8:8e:40:4d:c1:6f:5b:f9:f7:d1:98:e1:49:4c:
         15:d8:56:0d:5e:07:26:20:d9:f7:8c:04:c6:4d:26:ae:b4:fb:
         2c:56:c2:ac:ff:7d:80:c3:b7:93:79:53:70:4e:c9:61:6b:4a:
         b0:88:c6:f6:f8:52:92:1a:ad:a9:06:8c:b3:12:b3:f0:2a:7a:
         b4:f8:b6:25:c2:be:c9:51:36:97:ca:c3:01:25:6a:1f:21:9e:
         2d:fa:d1:cb:8e:6b:82:cd:3f:0c:11:d7:68:02:9d:67:ad:d8:
         c0:00:b5:af:4f:a1:c2:be:0f:f1:50:ee:d8:f7:61:05:2a:63:
         b6:b5:47:e5:23:1e:52:f1:d5:b5:9f:bd:4a:4b:e1:a2:ab:e0:
         d2:67:1b:dc:9e:55:d0:7e:a4:d3:cb:69:07:a5:d5:68:9c:da:
         07:50:eb:47:70:78:d2:8c:d1:a3:2a:1f:70:d8:e1:c0:0f:6e:
         9a:38:f6:80:32:71:b6:9f:3e:87:94:0d:f3:60:0a:a5:97:8f:
         f7:46:1c:d7:b4:e6:62:ca:53:82:bf:a5:05:a2:98:7e:d4:0a:
         9c:aa:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:57 2024 by rpki-client on console-fra.rpki-client.org