Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File:                     ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier:          S5QaFmJaSmvnuqt5Rzpi88dOys6ySn/a5tc65eqJ8/I=
Subject key identifier:   0F:FB:C4:5F:FD:5D:E6:5D:F8:1C:90:71:4A:69:D8:05:B1:44:8B:93
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer:       /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial:       018F87ED6E838AFB3E63424AD659EDB21E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 19:00:35 +0000
Manifest this update:     Fri 17 May 2024 19:00:35 +0000
Manifest next update:     Sat 18 May 2024 19:00:35 +0000
Files and hashes:         1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: 0v/EE3KHynbw0lhZf/DvvNAUkvtvQT64frTFQL5MyqE=)
                          2: XHgh9VE1piNeT8CiINEjbtJMTi8.roa (hash: o5aOjYI20PmZjIr0a7BxYt3d/4CPhgirChXJwLoadbg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6e:83:8a:fb:3e:63:42:4a:d6:59:ed:b2:1e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
        Validity
            Not Before: May 17 19:00:35 2024 GMT
            Not After : May 18 19:00:35 2024 GMT
        Subject: CN=0ffbc45ffd5de65df81c90714a69d805b1448b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:65:1e:f3:3e:19:cf:e7:0b:f9:95:b5:70:
                    0b:7c:f8:0f:f1:ca:0b:b2:66:7a:af:53:9a:a0:1c:
                    ec:ae:81:0d:b0:06:a0:ce:19:94:69:8c:1b:01:51:
                    28:63:6b:8b:b2:c3:50:b3:6c:b7:ba:d8:ba:f9:c6:
                    e2:ed:bc:a5:2b:ac:db:a7:f6:8c:6c:38:15:89:07:
                    be:2d:28:fc:87:bc:62:24:aa:db:b3:6b:62:58:4e:
                    9f:db:7d:5d:d8:6b:41:33:e9:1a:84:79:58:11:69:
                    16:1f:ee:0f:e7:94:b9:59:f9:75:4d:dc:3c:e6:c9:
                    99:1b:32:24:e1:ed:c9:e7:2b:03:30:d0:ad:37:99:
                    c6:5f:29:98:9f:cd:69:0a:e7:66:9c:f8:37:38:83:
                    be:93:70:6c:0c:bc:af:1c:5f:4d:f9:22:a9:5e:59:
                    d3:69:f1:f3:ca:ec:9e:86:41:5c:4a:f0:dd:be:d7:
                    0a:6d:07:f4:ee:c4:73:3e:41:a4:92:1c:4b:a1:6a:
                    91:0e:25:97:ab:65:21:04:7f:5f:9e:ee:80:03:76:
                    60:82:67:c4:59:11:ee:c0:6a:17:38:fd:f1:5a:da:
                    13:c5:dd:03:ac:72:3b:7e:ac:35:8a:bc:6d:a0:1d:
                    c6:f1:7b:20:7b:11:fd:c5:15:29:7c:d7:4a:a0:00:
                    a3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FB:C4:5F:FD:5D:E6:5D:F8:1C:90:71:4A:69:D8:05:B1:44:8B:93
            X509v3 Authority Key Identifier:
                keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:c1:27:9d:27:9c:ff:23:cb:75:4e:85:f8:2b:37:33:11:
         4d:f1:52:44:5e:e7:a9:5e:e7:2e:c8:bd:14:18:34:4c:48:75:
         90:e4:58:9f:08:8a:03:94:f0:1f:dc:df:1f:44:8e:39:68:69:
         c3:88:98:ef:02:47:75:3a:41:18:60:e1:b5:1b:c9:97:76:ee:
         b6:5f:c4:47:8b:26:45:c1:c8:da:7c:9d:24:03:7a:00:a0:4e:
         e0:6f:a4:03:11:c3:ae:c9:e0:56:97:18:a2:d3:fc:1c:b9:6e:
         58:0b:95:dc:1a:f4:fd:f4:23:d5:c2:20:f2:e7:10:2e:9e:ee:
         3f:34:6a:a3:f8:ce:b0:04:16:03:d4:98:5c:7f:48:b5:3d:d0:
         c7:98:5a:17:6f:b3:da:8a:5e:e5:83:31:a4:52:29:40:0e:39:
         18:8a:60:72:b3:5d:d4:6b:2e:74:98:fa:41:17:1f:03:64:22:
         70:f8:fb:a1:f7:40:59:bc:db:2c:07:0b:e6:76:d4:24:99:96:
         ad:c9:4c:c9:11:df:28:ac:0e:01:31:4b:26:cc:25:74:2e:0d:
         62:0b:80:1d:56:3f:df:98:ba:df:a7:fb:40:2d:4e:5a:df:ae:
         55:70:aa:cb:0a:f2:ee:be:e8:58:a5:f8:74:55:2e:0d:db:09:
         1a:0d:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:27:36 2024 by rpki-client on console-ams.rpki-client.org