Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File:                     OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier:          LXdUO3NAwbS0kYOdvxUvCayIWv4/9U2cjHL3YrvzadY=
Subject key identifier:   25:33:C0:61:FF:84:D5:B5:19:3A:42:63:A4:84:49:10:12:0D:0D:BC
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer:       /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial:       018F877F3F3F41F22AB9EC2B018FE372A6F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number:          06A3
Signing time:             Fri 17 May 2024 17:00:14 +0000
Manifest this update:     Fri 17 May 2024 17:00:14 +0000
Manifest next update:     Sat 18 May 2024 17:00:14 +0000
Files and hashes:         1: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: AaVg9Qbp1XZeD8NavXMGxq5a415YB9G43Qh0oXLw+d0=)
                          2: euHPlo17WzNYMDUqrNijt-LmjnU.roa (hash: DE9W0FgbO/Jl6bEIpFUERIUAEfIkLkj/UTxGcRGlM0s=)
                          3: ieCi14EzecEnAs_BMWpdP7kz42Q.roa (hash: XWjBilU8akuyIHc0fPR4ThII9u7vmhyMDDx1Qmyx0jU=)
                          4: j3NC3lfR-RD9xfbEyBbdJFl4Y1g.roa (hash: pVRbEnt3zgMjsyCsnSccl2aD1UCaO62vqsS0o8stxz4=)
                          5: p0CXUiRg3NCy_IiyPa6_KKT_ySw.roa (hash: WvMNBnH47W63yOd4ijCSIrg3us9ein+aGUwf5gNVM9w=)
                          6: qQaIb_WHGmczKXsAMaGP4BSL38M.roa (hash: zDdu1tLdIiwo4iP2jGNj05kokGUM5BnoQcyL3cpzqK4=)
                          7: vu1TKiCl1W-5NeafRVYy6paZ0_A.roa (hash: GROQSeZvE9EBBKmXeWn/02z5QKqt3JohvQXa7ClTsqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3f:3f:41:f2:2a:b9:ec:2b:01:8f:e3:72:a6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
        Validity
            Not Before: May 17 17:00:14 2024 GMT
            Not After : May 18 17:00:14 2024 GMT
        Subject: CN=2533c061ff84d5b5193a4263a4844910120d0dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:6b:39:b1:78:ed:89:d7:96:7f:d2:49:88:
                    8a:aa:0c:c9:f6:3b:b8:21:42:a7:a3:bb:89:23:5f:
                    c5:b4:13:92:4b:04:75:fe:e3:e3:e6:90:21:76:33:
                    0a:bb:df:aa:3d:c7:d5:be:2e:3a:14:97:7e:fa:2f:
                    f4:90:1d:4d:26:cc:bf:2a:33:67:a9:78:ec:71:20:
                    34:d0:e6:be:bd:e9:5b:61:a6:51:a4:8a:d3:a8:86:
                    0d:65:2e:be:c6:e4:60:07:ab:4b:29:97:08:0b:df:
                    db:d8:b8:c5:5c:64:4d:63:11:72:9e:ad:cd:30:59:
                    18:74:e5:32:06:53:c7:52:56:52:db:b3:38:6d:62:
                    12:d2:63:dc:a1:60:88:14:07:bf:7d:c8:78:9f:10:
                    14:8b:90:5f:05:6d:5d:9d:c1:da:35:3f:11:af:f0:
                    fe:50:fb:b6:b7:0f:02:b6:4f:6d:d0:65:ad:0e:1c:
                    a6:ea:b7:c9:56:f7:4a:63:9f:46:75:bc:8d:4e:5a:
                    cf:60:2a:2c:fa:45:2f:53:ed:51:f6:db:80:d0:31:
                    8c:a3:3b:8f:74:ad:75:f3:44:bd:28:e4:7d:3a:06:
                    8d:d3:ea:ed:69:a7:a6:84:45:7b:2f:a9:0a:2f:ba:
                    70:2b:e6:1c:2a:09:cd:4b:b0:9a:05:b6:d8:d2:78:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:33:C0:61:FF:84:D5:B5:19:3A:42:63:A4:84:49:10:12:0D:0D:BC
            X509v3 Authority Key Identifier:
                keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:a9:83:aa:05:ee:43:18:69:9f:29:6c:7f:9a:d6:73:b5:
         a4:7f:ea:b1:c3:d3:fb:de:f5:f7:a9:25:00:d3:de:97:06:8a:
         f8:18:b2:30:34:4d:9c:94:dc:59:80:f4:d1:8a:ba:c5:69:b3:
         b8:14:8d:94:e2:86:c0:24:f0:7d:b6:9a:bf:ab:27:0a:c9:e7:
         d1:7c:9e:02:0a:67:d2:1c:ef:54:f8:fa:26:67:1b:20:de:d5:
         c2:3d:60:50:75:e6:93:67:9e:0b:17:8a:23:7f:4b:e5:4c:4a:
         11:45:5c:62:16:0c:10:d0:33:61:e2:69:79:a0:fb:b8:f9:c1:
         44:1f:f2:f1:d1:96:cc:c8:86:73:a6:72:63:d5:2f:61:50:02:
         ea:0d:59:e5:8c:3d:a0:a7:5f:43:e2:ee:70:4d:4a:5c:d1:ff:
         20:f1:84:da:e6:0f:03:c6:af:6b:24:8c:45:97:03:31:6a:76:
         d1:fe:b9:76:7b:40:7f:cb:fc:ba:51:3c:51:46:c7:5c:87:8f:
         79:93:b7:8d:55:60:ef:ed:11:ad:36:2f:9e:a7:64:9a:4a:57:
         fd:f8:17:4d:23:ab:e4:85:fb:5f:4b:db:20:99:4b:c3:bb:d1:
         b5:10:11:5e:d4:87:f9:a1:5b:97:b8:ce:85:e0:58:40:ff:b4:
         f2:56:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:00 2024 by rpki-client on console-fra.rpki-client.org