Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File:                     O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier:          07c79wsBOAP6DGaKgLrfYnH8CW0T9rYrRzbYcdtfy3c=
Subject key identifier:   FE:CA:81:82:24:5B:4F:78:DB:AC:10:BE:63:EA:35:4E:1F:D7:65:37
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer:       /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial:       01904F7CA2C2E81B759AD89EDD7BA4DE8AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number:          0660
Signing time:             Tue 25 Jun 2024 13:01:26 +0000
Manifest this update:     Tue 25 Jun 2024 13:01:26 +0000
Manifest next update:     Wed 26 Jun 2024 13:01:26 +0000
Files and hashes:         1: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: yUuog0Q7So3xyI8L7BoqAAhXwAyW2xG2Fy/a5VYnlpg=)
                          2: c8bPGByrI0io92LDNwW2qNXjMl8.roa (hash: 1n2wF0OT2GvO7HDs+DeGwGEQjdCjWMY08/ZeKgviGZ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:7c:a2:c2:e8:1b:75:9a:d8:9e:dd:7b:a4:de:8a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
        Validity
            Not Before: Jun 25 13:01:26 2024 GMT
            Not After : Jun 26 13:01:26 2024 GMT
        Subject: CN=feca8182245b4f78dbac10be63ea354e1fd76537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:35:9c:a6:e9:8f:42:9e:02:79:49:c0:7e:
                    f6:0f:0d:78:18:bb:50:86:d3:36:2b:d1:44:dc:65:
                    86:7d:89:44:a3:a5:cb:0f:5e:ac:4f:c3:8a:93:16:
                    5b:17:0e:89:c9:1e:bd:48:97:24:44:51:e9:09:5f:
                    6e:6d:5e:57:b0:19:5c:5b:bd:06:18:ec:58:6e:42:
                    57:48:07:d0:68:00:08:c8:54:80:d6:2b:bb:58:86:
                    8b:08:9a:bb:56:a3:a2:70:40:e8:f8:08:11:2e:f0:
                    51:c4:07:de:59:a2:08:e8:85:08:ae:d1:39:d2:dd:
                    96:b6:7a:73:e6:60:1b:f6:7a:f1:40:86:56:57:4c:
                    34:a9:c1:5e:d8:9b:3b:d6:08:58:09:73:af:ba:62:
                    dc:ee:67:a5:68:7c:54:9a:20:a3:42:6a:84:8e:a7:
                    6a:23:f1:77:8c:8a:ee:dd:7b:c5:b0:40:1d:9a:23:
                    88:28:4f:ca:e0:b7:00:7b:5d:70:12:b5:78:7f:de:
                    67:0d:cf:1c:91:16:79:78:6a:f5:97:98:d2:6c:d9:
                    2a:b8:60:28:6c:23:17:b8:e9:fd:7c:e8:76:68:18:
                    26:6e:01:79:5e:1b:99:b8:b1:6c:05:57:0d:a6:52:
                    48:2f:80:01:9c:ff:7c:d9:f0:49:e1:e7:48:99:9e:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:81:82:24:5B:4F:78:DB:AC:10:BE:63:EA:35:4E:1F:D7:65:37
            X509v3 Authority Key Identifier:
                keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:9a:a8:0f:cc:ce:e6:94:20:2b:95:cb:ea:94:86:e7:e9:
         d3:a0:b3:9c:3f:6b:9a:13:fc:70:95:6c:4e:95:17:82:c1:f0:
         90:ef:35:c8:1f:ee:9b:77:92:e9:2e:c4:51:57:9c:fe:c2:c5:
         dd:4e:55:66:aa:c8:76:16:1b:28:9b:85:17:2e:07:8f:96:ea:
         0b:38:f9:eb:d6:2f:c0:fd:47:34:2c:88:45:12:bf:7c:a9:4e:
         de:01:c9:06:2e:c8:db:03:24:a7:b0:07:2e:c2:68:9a:c8:45:
         d5:94:9b:07:7d:5c:f3:ec:f7:e3:c9:52:ca:ec:9b:8a:cb:8a:
         ce:fb:19:01:2e:08:52:fa:07:c1:57:b4:2c:86:39:06:6c:b7:
         ac:9e:7f:0a:9d:00:df:d6:d8:27:61:15:dd:35:86:41:8c:74:
         86:2d:3f:63:e7:78:b7:b1:32:88:88:c8:c2:c8:1d:9f:1e:5d:
         50:37:a7:f9:41:b1:28:30:c4:c7:ce:fc:2f:d2:6f:e0:67:f3:
         0e:59:81:b3:4a:3b:14:14:81:5b:d0:01:1d:6c:44:33:4a:29:
         09:97:cc:bc:af:fe:d6:1f:15:28:29:a9:0b:ca:db:87:88:03:
         7a:c8:62:f9:5b:97:3a:14:6e:23:9d:d8:e5:c0:60:f1:ac:83:
         b1:f2:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 21:16:19 2024 by rpki-client on console-fra.rpki-client.org