Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File:                     O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier:          yOzmEDL5ysWwvCPOUUj9If3S8B2+kudvm/fSscouK9c=
Subject key identifier:   01:18:1E:8B:C4:CF:E1:58:4D:7A:97:02:44:82:A2:79:59:A3:9D:E6
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer:       /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial:       018F885B116E57296AF7CFEBC2114999AB99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 21:00:20 +0000
Manifest this update:     Fri 17 May 2024 21:00:20 +0000
Manifest next update:     Sat 18 May 2024 21:00:20 +0000
Files and hashes:         1: DEuGm-2mEwrD9Au_R_6tvbDjB9s.roa (hash: FkW+rGfq03jGufvzyIVBbZHhgXfxlKWyedQUbmDOfUk=)
                          2: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: hXP8u3J5c1mVVCjROqo1B2BWXw2tE4nPtLVi+gHYSag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:11:6e:57:29:6a:f7:cf:eb:c2:11:49:99:ab:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
        Validity
            Not Before: May 17 21:00:20 2024 GMT
            Not After : May 18 21:00:20 2024 GMT
        Subject: CN=01181e8bc4cfe1584d7a97024482a27959a39de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:19:bb:79:26:5c:12:17:4e:f6:f6:64:6c:
                    a1:22:9a:14:b1:ae:5c:42:69:00:4c:f0:e5:74:a8:
                    5d:ff:72:94:dc:09:2e:3e:85:5a:bd:fe:fd:0e:d2:
                    09:4d:20:4b:aa:ed:94:75:93:13:3a:a5:95:95:03:
                    87:9c:7d:81:e0:b4:a4:7f:6b:fc:0f:06:e7:4b:d1:
                    a0:37:c5:d2:9f:76:93:fa:d4:7f:51:d5:f1:d1:e8:
                    51:19:57:46:44:20:b4:fc:87:ca:96:c5:86:7d:1b:
                    3b:82:2a:c0:a8:9c:9a:a5:ad:6b:bb:cb:e7:dc:16:
                    e7:fc:84:42:d4:57:e6:75:97:5d:eb:ac:cf:03:5e:
                    a3:fb:88:6c:c2:61:27:13:38:2c:bf:e8:95:93:9b:
                    96:56:8e:43:55:31:ea:a5:a1:07:0c:c2:9d:f9:9f:
                    40:0a:84:fb:4e:7b:95:6a:fb:07:cf:61:dc:7c:21:
                    54:dd:ec:92:6c:48:29:95:dd:e6:be:4f:be:c6:cf:
                    18:34:06:4a:e4:d0:81:6d:27:61:3c:e3:1c:d4:f7:
                    92:de:f2:64:6e:d6:d4:24:38:98:44:7c:91:a9:da:
                    fe:6b:34:90:95:8f:50:a7:aa:32:29:17:6f:71:9d:
                    91:cf:06:81:b5:43:74:18:55:f5:6f:3b:53:85:f2:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:18:1E:8B:C4:CF:E1:58:4D:7A:97:02:44:82:A2:79:59:A3:9D:E6
            X509v3 Authority Key Identifier:
                keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:0e:a4:3a:08:d2:94:5e:4f:50:39:d0:75:23:65:5b:f1:
         b6:15:b1:50:8f:bf:76:c0:a9:6d:7d:26:29:bd:72:b9:38:d2:
         24:c3:98:73:ce:d2:18:47:9a:21:52:c3:86:45:3c:68:d9:f8:
         dc:3f:ff:e2:fe:11:64:fb:01:43:e2:b8:33:16:d4:ee:80:80:
         da:90:e4:e3:55:91:6d:a1:2a:ee:35:43:7f:bd:40:cd:dc:bb:
         39:6c:54:4e:16:bb:21:08:bc:36:06:87:83:90:da:53:9d:ab:
         49:32:6d:7d:9b:b8:84:59:c0:27:eb:7e:08:a0:b9:09:d1:a2:
         1a:a7:78:c8:8c:22:ba:ab:d4:cd:d1:25:ca:00:4e:c2:b8:31:
         b7:4a:ea:80:aa:3d:f4:05:20:31:5d:e8:fa:2d:d0:89:ba:21:
         89:84:77:f3:2e:4f:1d:c6:82:42:93:7c:bc:1e:26:19:de:88:
         4f:23:80:65:ca:f6:59:3e:f5:8f:ba:00:9d:8e:ad:cb:e7:5c:
         1c:b2:26:af:58:fb:bc:26:36:b6:e2:d9:b1:c5:cb:02:bc:dc:
         0d:18:5c:43:08:7e:6a:77:fb:71:93:b6:cd:b3:01:79:e0:b0:
         bc:7c:6d:40:af:52:42:9b:a4:0b:f3:ea:1d:fb:6c:f7:48:1b:
         2a:eb:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:01 2024 by rpki-client on console-fra.rpki-client.org