Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File:                     oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier:          9h4AySz8FfKacG4vwbNeTviQnjBLzQHAez7BDzfORSA=
Subject key identifier:   DD:E3:FF:A5:7E:D1:3E:61:2C:57:BA:12:35:8B:6C:80:04:00:D4:0D
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer:       /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial:       019063713C0DE56823E7B17E8D624DE76AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number:          08CF
Signing time:             Sat 29 Jun 2024 10:01:23 +0000
Manifest this update:     Sat 29 Jun 2024 10:01:23 +0000
Manifest next update:     Sun 30 Jun 2024 10:01:23 +0000
Files and hashes:         1: IMWWCNqy5FphtAiMS8OFDUHXZFw.roa (hash: bmTSiVl6qB4udIHFs06GZosezYq12NWt67ccfrOUhbc=)
                          2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: AZAapIR9pNVffPgZ2EvbIwOk+m6Hijp+/YbEmRQCDxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:71:3c:0d:e5:68:23:e7:b1:7e:8d:62:4d:e7:6a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
        Validity
            Not Before: Jun 29 10:01:23 2024 GMT
            Not After : Jun 30 10:01:23 2024 GMT
        Subject: CN=dde3ffa57ed13e612c57ba12358b6c800400d40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5e:b8:a4:19:be:7a:43:f1:7f:59:eb:b9:3c:
                    a6:cc:b6:42:d6:ab:11:96:b1:17:16:e5:f2:2e:2e:
                    69:da:ec:4f:ff:15:c2:43:f9:f7:e7:1f:5e:b8:d9:
                    49:0c:71:be:05:c9:d6:f7:7e:eb:de:74:3e:4b:58:
                    8c:6e:d6:85:44:96:5f:f5:39:51:65:4c:80:8f:16:
                    fa:13:85:ce:0f:f5:80:9a:b8:39:0b:2c:75:00:cd:
                    33:82:4d:07:d6:a4:54:96:0d:37:b0:5f:56:36:a7:
                    88:f9:1e:e6:8f:57:ea:15:de:67:ea:41:cd:58:69:
                    44:ca:3c:1c:c1:90:3f:cc:c3:88:6e:67:0a:35:39:
                    d5:4e:bd:c4:44:d7:15:f6:60:74:1a:c4:f7:1c:db:
                    f0:89:99:54:80:2f:9d:88:21:55:be:3e:8e:07:d0:
                    38:70:e0:66:fe:7c:da:1f:60:6a:a8:14:ca:29:c3:
                    6c:f9:11:8c:c0:f0:5f:76:16:06:a5:84:2b:1f:ee:
                    f9:6e:42:7c:57:7a:fe:4f:8f:ad:64:9f:3e:cb:86:
                    5e:18:89:3e:86:5b:e0:19:e4:41:89:1b:2a:57:5f:
                    d6:c9:1e:bd:ac:ea:b4:42:b3:02:17:de:4b:10:9d:
                    7c:bb:1b:1f:f5:34:4e:25:87:d1:d2:5d:b8:3e:61:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E3:FF:A5:7E:D1:3E:61:2C:57:BA:12:35:8B:6C:80:04:00:D4:0D
            X509v3 Authority Key Identifier:
                keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:44:76:ea:78:e5:09:8e:c4:61:03:02:74:c3:a1:53:b8:
         a0:28:e3:c3:c9:bf:5b:af:23:07:6c:8a:60:48:8e:bf:c6:03:
         e1:69:3b:bf:1d:95:71:39:27:64:39:80:a2:32:fe:ce:f0:b6:
         15:1f:87:f4:31:29:9f:58:8f:a5:0a:e1:a2:1b:a8:6d:b8:81:
         2d:96:18:ee:96:53:39:4a:8a:d3:4f:40:fe:af:d6:b8:25:ce:
         8f:68:d5:6b:4b:1f:4f:1c:e8:c4:0a:8c:74:9a:52:03:f4:f4:
         e8:9f:df:2f:14:d8:2b:3c:ed:1a:c9:32:a6:94:62:e0:ab:0a:
         d8:cb:bd:c0:22:33:15:aa:d2:ce:89:fd:74:60:7f:50:a9:3a:
         7e:7b:19:db:e5:b5:5c:46:63:06:8e:40:14:0f:19:42:40:cf:
         67:b4:d9:57:a3:72:d4:e9:fb:f3:63:2d:92:16:f6:47:6f:13:
         bc:f0:f9:ab:f7:14:68:c7:df:46:aa:1f:f9:6a:26:86:62:99:
         f9:bf:26:19:4b:bd:13:f5:b4:31:e7:21:6a:a5:d5:61:68:40:
         4e:2f:b2:a8:99:8f:17:6c:0a:ce:4f:77:6e:78:ef:a6:12:73:
         ce:d5:0b:de:79:22:53:8d:21:22:92:37:bc:75:cc:9b:08:cd:
         ad:e4:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 11:39:26 2024 by rpki-client on console-fra.rpki-client.org