Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
File:                     OxO_giWSvRtUt3zCwcxCsozPFmk.mft (raw, json)
Hash identifier:          dSNVr4jYb+RS7rzAKFRNRXGDWLCAsOOkedebBSoe5NA=
Subject key identifier:   9A:D3:39:4E:7B:46:4C:03:D0:D7:4F:EF:3E:E6:F5:CF:44:52:65:9B
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Certificate issuer:       /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial:       018F174665F019784786355D395BF3E1328E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
Manifest number:          0C54
Signing time:             Thu 25 Apr 2024 22:00:40 +0000
Manifest this update:     Thu 25 Apr 2024 22:00:40 +0000
Manifest next update:     Fri 26 Apr 2024 22:00:40 +0000
Files and hashes:         1: 4eleNmX005n7wlXVlehMTBHp9tw.roa (hash: 5tRtBlf42R6PXZYfZGr+HDlBaIQdiVh4BjlyfhjnVHE=)
                          2: GOIB72ezfSlZwKpvCUux5Lmo21I.roa (hash: 39JJa0QSA9d/0vjDQmceQV/VLaieey+iN0iJ2bE/SBc=)
                          3: OxO_giWSvRtUt3zCwcxCsozPFmk.crl (hash: 8qR14rk5cvgse2l/00lGtRkQ5EUYWSJsXpThXf7k63o=)
                          4: dWOVBeC9rYrgiMsEUWG48qX1Wkw.roa (hash: E/5YJ+LBiC5osugGpetht8RXbDCTNLmcabUCRGWp2Ec=)
                          5: gNpvThMgL6xEAvEpyTKcV-Ozrh4.roa (hash: jjcLUmUpKFM1bHOItpI9x815JZiM1yE8LjuR0Ezk8Fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:46:65:f0:19:78:47:86:35:5d:39:5b:f3:e1:32:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
        Validity
            Not Before: Apr 25 22:00:40 2024 GMT
            Not After : Apr 26 22:00:40 2024 GMT
        Subject: CN=9ad3394e7b464c03d0d74fef3ee6f5cf4452659b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:54:b4:8b:ba:f4:1a:65:98:ce:d8:b1:7d:
                    0a:c2:7f:0c:75:a4:49:32:3e:22:7a:84:57:05:25:
                    8e:93:a8:c0:80:a9:53:7c:6a:b6:9a:78:1f:13:26:
                    23:0a:3f:ff:6e:a4:7d:2e:b6:bb:f9:3a:79:8b:08:
                    be:72:0b:be:0f:ce:be:da:85:14:ac:49:a2:da:e0:
                    84:f6:64:67:3a:05:4b:5c:ea:af:70:83:07:42:33:
                    eb:2e:9b:c3:c8:6f:a3:59:a3:1b:fb:a2:5f:40:f4:
                    0e:44:55:c1:65:30:b9:fb:b5:16:a5:2b:c8:cd:1e:
                    98:9f:30:32:6f:23:7c:2c:c5:6f:76:2c:07:ca:e6:
                    ca:25:a1:b4:e2:ab:2e:c5:19:2c:6f:c6:ab:01:6c:
                    b4:47:7f:17:27:c5:ec:0e:38:c5:19:bb:8c:20:6c:
                    9b:30:e0:73:55:10:3b:b9:11:de:24:3c:bd:f6:14:
                    4a:1a:f3:4f:bb:11:ae:54:05:ba:01:fd:04:6e:47:
                    ea:0f:17:b8:db:60:f6:f0:22:6c:17:4c:e5:bb:2c:
                    b6:d1:1e:13:24:46:82:39:11:9f:e7:5a:ca:11:ea:
                    a2:01:85:f1:82:f7:fe:f0:c3:e2:e6:aa:d1:55:f2:
                    38:ef:54:19:82:74:2e:81:29:af:4e:27:ca:d5:32:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D3:39:4E:7B:46:4C:03:D0:D7:4F:EF:3E:E6:F5:CF:44:52:65:9B
            X509v3 Authority Key Identifier:
                keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:98:f9:e6:e1:1b:2c:a4:43:dc:34:22:cc:e9:51:31:32:
         88:6c:62:2f:0e:f4:ba:ab:35:a9:16:8c:f9:22:7e:ff:14:fe:
         21:0a:d5:b5:e3:59:31:fc:cd:1e:21:cf:14:36:ad:35:ed:41:
         08:48:45:1e:e6:b2:43:ee:20:b5:8c:69:c6:80:4b:3c:24:6f:
         a0:47:cb:e4:de:77:05:48:04:59:31:b5:f5:0b:75:8c:bd:d5:
         4c:06:0c:d6:b6:b3:ea:67:80:c6:73:64:c2:5e:c1:53:2a:c7:
         ad:0e:5f:82:f3:53:e4:f6:3e:bc:da:da:dc:3a:79:b9:bb:ae:
         9c:e0:7e:da:e8:03:fd:77:2b:56:67:94:eb:47:47:f9:4e:5b:
         b4:e0:4b:7d:5b:c9:03:df:d3:f5:d2:1f:f5:72:ec:0d:65:ca:
         15:e7:ac:5d:84:00:aa:e6:92:f0:97:ef:aa:c6:05:4b:41:0d:
         4f:c1:c5:91:c4:a0:a7:a9:37:eb:6c:1c:b1:01:2c:6d:c6:c1:
         21:35:d0:04:ea:0a:99:77:6b:c0:e4:49:4c:9e:46:2a:40:9c:
         9b:a6:a6:3d:84:68:9d:f4:18:1b:7e:85:e4:f1:cf:c6:2b:16:
         c7:64:62:71:09:e5:28:3b:55:07:6d:54:51:b6:f9:07:75:b5:
         49:c1:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:40:19 2024 by rpki-client on console-fra.rpki-client.org