Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File:                     O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier:          SnWDsJcDLF23DOtNEu93+rJXUwTMsIGKTlJeO55qZ4w=
Subject key identifier:   0D:BC:16:24:F2:1A:B0:99:ED:6B:98:31:EA:5B:B0:16:91:8E:07:F4
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer:       /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial:       018F874A55E195B4AB5896A33F098307E0F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number:          053D
Signing time:             Fri 17 May 2024 16:02:26 +0000
Manifest this update:     Fri 17 May 2024 16:02:26 +0000
Manifest next update:     Sat 18 May 2024 16:02:26 +0000
Files and hashes:         1: 1g85YJKV8Mi-kt63aJE8_emVTKI.roa (hash: c9wij0uWlYCvDAaMNliyaA/wCwTZd3wf6CO7J6BFfUY=)
                          2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: MNjpCY0NrHCtYr9wq8VOcruZ08jL8atHPJO2w7+dLUw=)
                          3: pMc7Ql1zgTKnJoi0Q3G88YacrxI.roa (hash: BlqRpgboFx58Pp09H3YGOuvvzS+Nmegp7axf1GyMm2Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:55:e1:95:b4:ab:58:96:a3:3f:09:83:07:e0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
        Validity
            Not Before: May 17 16:02:26 2024 GMT
            Not After : May 18 16:02:26 2024 GMT
        Subject: CN=0dbc1624f21ab099ed6b9831ea5bb016918e07f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:58:74:85:3d:e7:21:2f:e9:c6:2b:f7:8e:
                    1f:ed:80:af:ec:58:f3:61:c2:5b:0a:98:36:97:76:
                    2b:cf:54:5c:69:23:e3:36:ab:d5:43:a6:a7:9f:09:
                    fd:3f:58:70:35:cf:09:2b:04:fc:41:59:ee:18:7c:
                    17:ec:b0:04:25:ad:15:ec:9f:bf:0c:07:a5:b9:a4:
                    b0:0a:d3:09:42:99:67:29:3e:6a:19:c8:2f:d2:86:
                    2f:7b:ef:b1:f0:39:08:8c:53:52:eb:e7:e4:a1:18:
                    aa:cf:34:25:36:19:2b:39:19:bd:45:40:a1:ce:3d:
                    14:43:b1:45:b3:26:73:a0:2c:67:8f:09:99:bb:d7:
                    3e:ed:c3:0b:c6:f5:70:8d:58:a8:56:52:4b:bf:e9:
                    67:30:63:50:68:8e:0a:1b:c5:8f:47:9e:12:f2:7e:
                    5a:20:87:c5:67:da:9b:f9:e6:22:ae:06:e4:36:19:
                    ca:47:1b:ff:40:13:66:33:64:5a:e0:f0:fe:ab:92:
                    86:02:db:f0:67:fc:08:ab:c1:67:e0:88:d9:8b:6d:
                    d6:bd:c7:7e:b6:05:05:68:46:5d:c4:7b:3d:b6:3b:
                    d5:ad:ce:42:d9:26:da:05:39:f8:94:40:c6:2e:bd:
                    8d:58:fb:88:40:4a:d0:da:f0:25:51:f6:49:2b:f0:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BC:16:24:F2:1A:B0:99:ED:6B:98:31:EA:5B:B0:16:91:8E:07:F4
            X509v3 Authority Key Identifier:
                keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:13:68:83:30:ce:65:fa:e5:d6:e4:35:68:f3:b4:7f:e8:67:
         32:4d:2f:5e:07:59:e7:f6:2f:95:01:a7:d5:f9:c1:89:ac:c3:
         10:27:1c:67:68:e5:02:46:67:da:c4:ba:1f:cf:09:b5:57:38:
         60:53:9b:39:56:84:e8:8f:2f:ac:1f:d6:8c:2b:8e:85:f0:d0:
         91:4c:9f:2d:8a:36:ea:40:23:7a:27:a1:fb:42:8e:f4:9d:ba:
         a3:64:e2:ab:79:fb:33:13:01:68:a5:6d:bb:4e:16:e6:ca:56:
         a6:8d:c9:ae:c2:53:c0:00:72:e2:ee:b2:f5:dc:55:4f:5b:2a:
         78:b2:60:9e:8c:e0:25:7b:12:f1:9a:b5:ca:a3:24:7c:84:78:
         32:fc:af:f3:27:7a:39:63:6a:49:87:9b:bc:09:10:03:f0:8f:
         60:30:35:ef:6f:b8:1f:b8:24:b0:6c:d8:fb:d9:fb:41:9d:0c:
         f9:9f:c8:96:cc:be:e0:28:d8:3b:6d:64:4d:30:37:51:c6:38:
         81:12:f6:53:6f:31:1f:bd:e6:bb:bb:94:da:90:6c:a7:9e:bb:
         77:67:ef:46:b3:90:8c:b1:a7:a8:bd:e2:df:95:c7:e1:21:b9:
         48:b5:bb:99:c5:e7:97:55:e4:cd:39:8c:d4:9f:98:64:73:a1:
         fe:6d:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----