Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File:                     OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier:          y07uqWF5vhi7vfEwILpSxVmuKMdUH5RtUGrfDyWF6Vg=
Subject key identifier:   2E:8D:4B:12:84:94:EF:26:51:24:85:37:53:37:C4:44:44:E6:05:A7
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer:       /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial:       018F87ED07AE433647F86EC7F01BD2957F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 19:00:09 +0000
Manifest this update:     Fri 17 May 2024 19:00:09 +0000
Manifest next update:     Sat 18 May 2024 19:00:09 +0000
Files and hashes:         1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: I6jsNEonj+v0Dz20HfIDOL88IG9ghMC8FHy6GXPGlKg=)
                          2: ljYUEwMk2Dm5z9GTQTvNUIAGSkQ.roa (hash: Y83QBK+ZOtJiOAYxiXxS2DRuvXjxuSd7xgB5r4MEe8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:07:ae:43:36:47:f8:6e:c7:f0:1b:d2:95:7f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
        Validity
            Not Before: May 17 19:00:09 2024 GMT
            Not After : May 18 19:00:09 2024 GMT
        Subject: CN=2e8d4b128494ef26512485375337c44444e605a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:a4:88:8e:2a:20:40:5c:bf:0b:04:f9:e2:
                    c5:80:91:5f:e0:69:a0:6e:de:a4:e2:3b:4d:c3:7d:
                    c0:f8:db:f1:84:69:a1:7c:65:65:f7:c8:a1:ee:7b:
                    c9:99:d1:4a:21:af:4c:0f:e0:cb:84:31:7a:1c:32:
                    5e:97:dd:36:5b:47:13:03:86:03:2a:3f:ca:97:7c:
                    a1:fd:f1:c6:a3:4f:34:13:29:d4:85:1a:11:cb:e2:
                    a8:a8:f7:3b:6e:63:e4:44:c8:76:74:ce:85:fa:d9:
                    03:41:93:67:a7:9f:44:1a:41:ac:50:96:2f:90:84:
                    51:39:e2:89:ef:df:69:ce:4e:17:67:10:f6:df:22:
                    f9:c4:1f:a1:98:2f:6f:56:f1:8f:d9:bb:84:d5:06:
                    f7:90:17:3b:f0:b2:93:2d:d9:a3:c0:76:81:fa:15:
                    c3:cb:42:d7:eb:d2:be:5e:fa:e8:de:6a:6d:b4:5a:
                    2d:9c:fe:38:75:bd:96:7a:f4:41:ce:bf:92:90:0f:
                    2a:fe:0e:c4:f6:c0:ab:c4:66:5d:97:b6:a9:44:29:
                    e9:b0:72:64:e3:be:5c:f2:e7:e3:f2:96:83:ef:5d:
                    f7:db:fc:96:a1:25:11:a9:50:b9:86:d6:94:e3:9a:
                    a8:9a:b2:62:02:8e:d5:57:70:68:f1:cb:d6:b2:26:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8D:4B:12:84:94:EF:26:51:24:85:37:53:37:C4:44:44:E6:05:A7
            X509v3 Authority Key Identifier:
                keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:3c:50:7d:5d:aa:05:d6:f4:ed:91:ae:4b:b0:9f:b6:8d:c9:
         71:8c:00:e1:d0:42:88:98:9d:bd:26:7d:e5:10:1a:8c:da:08:
         ba:46:e9:94:3d:74:54:37:de:5f:b3:21:c3:6e:ce:81:26:2a:
         d0:2c:00:b9:1e:8a:81:d2:19:d7:30:31:67:0c:ed:79:16:8c:
         24:c6:12:37:22:e8:02:eb:a0:c8:5f:30:6d:cf:6d:18:c0:fd:
         ff:23:89:32:58:1b:18:1e:6a:f8:73:00:69:c4:43:2f:76:1d:
         5d:b5:e9:d8:bf:fb:97:19:46:02:5a:8d:74:dd:e8:92:a5:f9:
         ab:74:bb:c7:5a:0d:bd:99:e1:ef:4d:87:ad:61:81:8d:28:7b:
         35:fe:84:2c:17:4e:cf:8b:1b:84:b4:23:85:17:ac:e8:ca:5c:
         44:d0:a7:e3:9d:90:76:79:fb:83:0d:30:58:97:d9:ce:03:77:
         02:13:61:f9:38:2c:38:9d:dc:6b:c7:81:81:33:64:13:ac:f6:
         e4:32:e8:e6:84:51:c1:d2:0c:5f:c5:c4:42:a0:0e:a6:d1:8c:
         83:c2:45:e0:1d:67:2d:c1:7c:70:14:51:ee:16:69:ee:4a:38:
         61:1c:f9:cd:9c:8e:fc:43:fc:f4:72:e3:c7:2e:76:70:f7:4b:
         53:85:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:31 2024 by rpki-client on console-ams.rpki-client.org