Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File:                     oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier:          6B2l5xWLIam/BooMqOD1/NkK2A8y5J/sfUaxb4ib6O0=
Subject key identifier:   85:A7:A3:1D:98:A4:C4:3E:58:9A:82:51:31:0F:D8:CB:05:66:EC:89
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer:       /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial:       018F8892629901C084AD5B5F7D8045D2257F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number:          0741
Signing time:             Fri 17 May 2024 22:00:45 +0000
Manifest this update:     Fri 17 May 2024 22:00:45 +0000
Manifest next update:     Sat 18 May 2024 22:00:45 +0000
Files and hashes:         1: ZuZ2EyMptxSAWwdoTwBi_cItAtw.roa (hash: CMC+AXvZKTw16JIuhg27MM4r9y9yX5M4tgL7jj37NSY=)
                          2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: iKpr3VmCD802HvOBUm7X6qFGbxsJMdkTejKGzuQgCI0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:62:99:01:c0:84:ad:5b:5f:7d:80:45:d2:25:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
        Validity
            Not Before: May 17 22:00:45 2024 GMT
            Not After : May 18 22:00:45 2024 GMT
        Subject: CN=85a7a31d98a4c43e589a8251310fd8cb0566ec89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:95:d3:75:ff:85:d5:43:25:f5:08:10:68:
                    68:39:b9:dc:cb:7d:c7:d6:07:4b:96:07:d8:d3:6b:
                    2d:ef:86:b0:18:3e:3e:2c:32:e5:68:97:45:f8:54:
                    9e:d5:0a:28:9b:7e:3c:34:95:c9:3f:ae:e1:56:e1:
                    65:54:96:eb:2b:2f:6d:b1:8a:bf:4c:11:b8:e1:d7:
                    58:7d:35:be:9a:10:0d:25:81:3a:eb:dd:13:88:66:
                    21:8a:d7:e5:17:ad:fa:c0:43:f8:db:ca:49:2f:f7:
                    64:d1:36:c4:85:fc:3e:75:c8:31:48:a4:59:82:fb:
                    56:eb:d1:e2:43:50:bf:14:43:ac:07:fd:ba:ae:53:
                    b7:77:5a:fe:fb:75:c6:06:c1:31:aa:de:db:26:fc:
                    70:22:e8:8f:3a:d9:86:4d:8e:20:1e:ef:72:58:c2:
                    b6:42:e7:02:89:3c:cf:1f:1a:1a:3c:bb:2a:3c:11:
                    7d:75:57:21:fc:97:08:9d:b1:b4:76:99:41:f5:b2:
                    0b:a2:0d:73:41:4d:b8:f4:64:f9:23:16:e8:8b:aa:
                    5d:c7:88:d3:8f:76:1e:30:b6:bd:44:08:65:3e:72:
                    9a:00:82:2e:39:31:d7:8e:18:05:2e:1f:4a:0b:66:
                    e2:8f:89:1f:cf:a7:64:b8:20:ae:8a:57:a9:5c:fa:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A7:A3:1D:98:A4:C4:3E:58:9A:82:51:31:0F:D8:CB:05:66:EC:89
            X509v3 Authority Key Identifier:
                keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8b:df:d5:6a:40:8e:c2:72:d3:49:93:69:79:54:d3:b0:04:
         f7:91:76:82:d3:21:f7:7b:d4:9b:df:0a:ca:66:f9:51:48:fe:
         06:93:e0:81:9b:f2:33:31:91:e7:ad:d8:5c:a5:3b:79:f7:3d:
         ec:a5:58:76:d6:e6:a9:e3:94:3c:4a:7a:f2:8a:3a:8c:da:d6:
         c2:d9:7f:05:0d:dc:60:05:a1:c7:df:c4:6d:47:05:9f:f5:7a:
         09:24:1b:45:49:30:8f:b4:4c:e1:9e:dc:96:0b:f8:83:77:76:
         8a:b9:77:68:3a:39:27:92:6e:94:5f:5d:38:96:d9:94:54:ab:
         f8:cd:73:2b:ac:c0:17:ba:14:d2:66:60:06:c3:69:ad:b4:e0:
         00:f6:55:84:ef:90:e4:ff:33:2f:c2:33:ec:aa:e2:fe:23:bf:
         6e:d1:cc:85:cc:38:17:d5:9e:f7:70:a7:b5:16:ae:f6:7d:b2:
         1f:38:ed:6c:14:18:4f:39:cd:7a:2b:06:3f:2a:23:3f:a9:d8:
         a7:6d:6e:68:cd:53:8f:0e:94:b0:40:50:f7:35:48:a8:1c:89:
         ab:86:c7:61:0a:c2:b9:9c:d1:4b:20:c0:2d:00:7b:c3:40:a2:
         91:3b:33:94:be:c2:d2:82:f2:a8:50:f5:08:e2:2f:19:31:df:
         db:8b:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:17 2024 by rpki-client on console-ams.rpki-client.org