Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
File:                     v-OXGjLAaSxONC6RF5BmJHDPMbI.mft (raw, json)
Hash identifier:          FRSyMtFhG4fOXG62sFHM4Tzom0Da2cINeykhZi2PJXE=
Subject key identifier:   76:7E:13:8D:5E:27:FB:90:2D:4A:F8:79:F6:DA:93:E6:4D:D8:C5:1D
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       018F874941DF0494837F4B597023D7DAC580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
Manifest number:          0E98
Signing time:             Fri 17 May 2024 16:01:16 +0000
Manifest this update:     Fri 17 May 2024 16:01:16 +0000
Manifest next update:     Sat 18 May 2024 16:01:16 +0000
Files and hashes:         1: G2hOImdNEGDlRQm-dqf320DPZq8.roa (hash: Zl1Ws5dvZlh/edG6nDJPzN+7m4WTOwhyRVrCgQOyql4=)
                          2: RTeAWkRgTJaDfA0GlmEljbTfJ_o.roa (hash: va10SBySVKa0Lter6szdqMqWkj3SmHCyGJXvyqDPS7g=)
                          3: v-OXGjLAaSxONC6RF5BmJHDPMbI.crl (hash: QEboeyA8LgXJR9EDwREpLeKJk3qXZLwfK3HHIyki1Ps=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:41:df:04:94:83:7f:4b:59:70:23:d7:da:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: May 17 16:01:16 2024 GMT
            Not After : May 18 16:01:16 2024 GMT
        Subject: CN=767e138d5e27fb902d4af879f6da93e64dd8c51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:d2:26:b2:83:55:47:e9:86:f9:3f:e1:3b:
                    3d:f6:88:a4:a7:48:53:a4:5f:43:be:25:04:f7:8a:
                    93:ae:95:bc:c3:24:23:59:bd:0b:da:fe:99:2c:74:
                    a0:fc:ef:37:7e:30:71:bb:a0:a6:3d:26:62:25:17:
                    1b:76:59:70:6c:95:1f:7c:d7:41:c2:f7:bb:5e:d1:
                    b7:b0:1d:4e:d2:b9:d2:84:25:09:e9:fb:60:40:64:
                    02:34:0b:2b:24:ce:88:9f:03:f8:eb:af:dc:45:5c:
                    a0:41:31:20:47:49:09:d9:55:3f:03:d0:9e:b2:ae:
                    b9:95:f9:37:47:ed:b1:09:de:95:a0:5e:6e:2c:24:
                    65:16:2d:69:e8:1d:18:65:3e:11:fb:65:68:7b:20:
                    d3:0a:ad:65:e7:57:ae:28:a9:bc:85:ac:ca:10:82:
                    56:46:2a:d6:12:a9:d1:42:06:4f:52:30:2b:82:ec:
                    88:33:d8:46:39:45:f5:ac:61:ca:8d:65:44:e1:9a:
                    9f:ae:ee:6b:44:9b:a8:a1:3a:f4:72:6c:da:e6:ed:
                    d6:bd:7f:61:91:d6:db:5a:19:7d:5c:5f:08:41:b0:
                    3e:26:c0:31:e9:13:35:ab:8e:a9:b6:f4:80:50:46:
                    7f:cf:22:10:c0:8e:6f:be:51:ad:69:a3:74:3d:50:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7E:13:8D:5E:27:FB:90:2D:4A:F8:79:F6:DA:93:E6:4D:D8:C5:1D
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:22:eb:dd:21:9b:57:e9:5c:6c:2e:0b:ec:48:5c:a6:f4:
         a3:79:a3:51:94:db:f2:a3:ae:4f:3e:7c:ac:96:fa:ff:8e:5a:
         f3:e8:3f:42:c9:f2:a7:7f:a2:f6:13:45:6c:5d:3c:74:b9:34:
         50:3f:6b:8c:25:5d:ed:50:a2:4e:c8:06:a8:df:98:2c:56:82:
         c0:a8:02:cc:91:dc:a4:92:be:9c:b8:c0:f6:39:b8:38:c4:a5:
         6e:65:c0:cf:0a:e2:11:7f:52:8d:18:51:82:86:70:f9:45:1d:
         76:b1:3b:64:7e:74:6f:64:2c:bd:36:81:71:60:1c:ed:24:b3:
         4e:b7:b8:9d:8a:6f:34:9b:5a:00:a7:77:12:92:66:44:7a:d3:
         43:35:d8:a0:a0:ff:d3:8f:55:8c:4f:30:5a:1e:64:74:d6:4d:
         50:cd:7a:0f:dd:8c:5a:da:89:a8:ab:1e:bd:81:bc:99:03:52:
         3f:6a:9b:47:0f:4e:ec:d9:5d:c4:9f:47:6a:03:95:f9:2a:06:
         c5:e2:7c:55:18:f2:a1:58:7e:74:13:41:7a:2f:a0:3f:77:fd:
         d9:29:22:9d:f3:cb:77:e3:7f:48:72:cf:cb:03:70:9b:e6:ae:
         0c:68:ae:1f:ac:2e:29:0f:a1:ac:fc:18:3f:18:6f:71:e0:56:
         01:10:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:11 2024 by rpki-client on console-fra.rpki-client.org