Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File:                     oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier:          elMRR3d3Wv8FAmfVrMY+nonq0a+HQ7NscKUpAfnrxVM=
Subject key identifier:   DB:C5:9F:65:76:15:5E:7C:FB:9D:3D:04:E3:D5:46:F5:82:FB:D5:65
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer:       /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial:       018F87488A103120DD3D4B0E4EDE02F380C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number:          02CC
Signing time:             Fri 17 May 2024 16:00:29 +0000
Manifest this update:     Fri 17 May 2024 16:00:29 +0000
Manifest next update:     Sat 18 May 2024 16:00:29 +0000
Files and hashes:         1: QMoo5MhPB-IRN-grs7DsurCHxxo.roa (hash: 9JdMsXD8FXCTc5K7E+/x+BhpYN+0N5DUdmtU/oYIyOE=)
                          2: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: usGGooIfsLHNUJZ9RDDMf3JN5bI1p2n6UnG4kl0XyFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8a:10:31:20:dd:3d:4b:0e:4e:de:02:f3:80:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
        Validity
            Not Before: May 17 16:00:29 2024 GMT
            Not After : May 18 16:00:29 2024 GMT
        Subject: CN=dbc59f6576155e7cfb9d3d04e3d546f582fbd565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:11:7f:fe:8a:4b:8c:8c:89:10:14:57:fc:
                    71:9b:f7:94:66:19:d7:b7:31:5c:23:47:f7:31:75:
                    2e:f6:79:2d:ba:e4:98:2b:8b:14:b5:db:3c:e2:f1:
                    a8:d5:8e:14:9a:65:41:bd:d2:bc:a0:f3:60:60:3e:
                    f0:20:22:a0:26:c3:ef:07:35:79:f5:69:f6:b7:6c:
                    70:c0:98:7f:53:64:84:f4:9e:69:0b:16:bb:18:33:
                    4d:7e:d0:df:9d:37:3f:a0:84:c4:f0:96:da:ba:e6:
                    39:c5:dd:45:52:a2:6c:ce:19:f7:b0:39:d9:97:61:
                    f0:b0:07:f8:83:7e:88:a8:5a:3f:82:4b:e9:77:77:
                    77:b3:03:9c:a2:e4:36:66:cd:70:7a:d7:1a:fc:f2:
                    be:82:6e:09:45:ce:c7:70:88:11:8e:c1:cd:fc:26:
                    71:71:46:18:c7:53:cc:89:cf:82:eb:79:e7:66:2d:
                    77:ed:f6:84:70:3f:11:6f:a4:86:9b:fe:86:d2:76:
                    53:3a:16:e4:b6:5c:5c:fb:22:cc:be:7a:f2:13:5c:
                    28:ed:c5:92:74:33:f8:0f:85:1c:a6:46:11:db:0e:
                    40:68:df:84:c3:d1:b6:d9:86:87:12:45:da:d0:0e:
                    7f:e7:27:cf:c9:3a:a0:c9:03:4a:33:4e:0c:c0:82:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C5:9F:65:76:15:5E:7C:FB:9D:3D:04:E3:D5:46:F5:82:FB:D5:65
            X509v3 Authority Key Identifier:
                keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:7e:83:90:a3:c8:75:9d:da:00:0d:a7:96:57:cd:5b:53:4b:
         7f:81:aa:d1:0f:2d:b6:27:37:e5:5e:8e:a4:c8:43:85:01:f8:
         23:00:d9:08:3a:36:fb:17:4c:90:b4:a3:62:50:a4:65:66:31:
         3e:c2:cb:2d:87:a8:64:75:6d:59:1d:d7:0e:8f:a1:11:f7:f8:
         c0:9e:f9:62:2d:a0:b4:d8:c0:36:84:12:ed:cf:aa:80:55:10:
         b0:00:fe:3b:a7:29:39:8d:70:71:5e:e0:c8:94:66:28:80:df:
         8c:aa:06:0b:6f:a3:d2:23:59:9e:e9:a6:ce:26:ac:38:6b:3b:
         55:98:36:af:aa:dd:15:44:87:e3:cb:b3:a5:91:3c:e6:c8:a5:
         f0:81:2f:0f:37:f7:ec:2b:82:26:bb:1c:07:e3:69:4c:a7:c8:
         34:72:1c:d6:e5:da:af:9b:b7:f8:4f:92:65:03:10:06:81:86:
         bc:10:90:4e:cc:cb:21:c6:9a:c4:c4:2c:4d:2a:52:c2:4c:43:
         92:9d:66:ca:1b:a6:48:3f:47:e8:2d:98:a2:7d:ea:11:51:e6:
         d2:ad:b0:9a:c4:22:2c:79:dd:8a:81:c7:56:ea:17:ad:44:eb:
         f3:6d:fa:59:61:d2:3d:6f:e6:5a:4f:3e:84:0b:2d:36:23:97:
         18:99:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:07:41 2024 by rpki-client on console-ams.rpki-client.org