Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File:                     OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier:          R0AXHRoG3gmGu0pYDNns0rB8NkT/YLVmsusXltEeJiU=
Subject key identifier:   4C:58:F6:65:E4:29:07:36:B3:B3:40:44:10:79:D9:4D:9C:97:98:10
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer:       /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial:       018F8748BD44DFD9BFD1865D24DB97865569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: 53pcZe5SwmFPFOnPPEzX4ZWfKjQ.roa (hash: w5CQn3gYJj/M/5D5SbDT+xa9qTmxMVGEtUHwxVf614w=)
                          2: 5cBzPIEs_tf2O8xuO7TjGarAIsw.roa (hash: e1Hm5mKmiodsz4hDKk7tdHcvbyGBK3YdDGoLXb2UaAc=)
                          3: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: jLg+H+Q7peeXQ6BjbEFBccZv0ywtjK8VCSXtq3BKSiQ=)
                          4: qFD0AFr9siC2lPz8IHM4Ta0Uqso.roa (hash: qTfYZo6fuJc/XUsw+63rGk9Vc2Vitdlm28gBPvP6EDw=)
                          5: zCN1Bjqy4ZpfGDaek4p07kjYuzc.roa (hash: Pg10Pm+tTSzZGyo1I7hwEn835o59mFVPW4wZmd8MZho=)
                          6: zKARK4esSWbyD0T0nOx_wHt3NKo.roa (hash: UE6tly2nStiz2YpoRCTMN/D3VkjihyGx97eOpWujAdc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bd:44:df:d9:bf:d1:86:5d:24:db:97:86:55:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=4c58f665e4290736b3b340441079d94d9c979810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:de:9c:a7:19:e7:7c:fc:84:2e:42:21:63:
                    83:e4:77:8d:e6:cc:ab:9b:a3:44:4f:e2:aa:f7:be:
                    ad:af:41:f2:37:df:21:e4:53:b5:51:14:b9:56:df:
                    41:28:53:cf:6d:37:84:43:88:09:11:99:63:3c:ec:
                    31:de:37:c8:71:2a:b0:9a:bb:99:f0:91:b1:ff:97:
                    ed:39:ec:03:0a:f7:ee:59:a0:bd:2e:6f:9c:40:ca:
                    a9:9e:d6:62:36:9a:83:ad:6a:d0:a3:a4:a7:67:94:
                    6c:07:f7:7b:c3:65:23:e4:ed:32:20:26:05:53:1f:
                    e5:2d:df:46:0e:61:91:5c:39:1f:98:d4:15:c7:a0:
                    d1:cb:d2:e3:42:b6:cf:56:e5:e7:8c:f9:c9:5a:c1:
                    17:ee:83:40:02:e0:9e:f6:a9:f2:12:ac:9a:99:74:
                    7a:45:de:26:49:c3:41:34:e2:51:d2:1a:d5:3d:3b:
                    93:45:16:13:5e:64:72:91:16:6c:5b:4c:7f:fb:a5:
                    f3:1c:f3:09:2b:bf:ac:fe:50:11:b8:fd:a1:cf:97:
                    61:0a:54:11:4c:89:37:5b:ae:8e:28:58:dd:93:67:
                    4f:51:0f:b0:37:80:4c:5d:63:3f:8c:f1:84:ad:f1:
                    9f:0a:22:23:eb:14:90:8f:91:1e:08:fb:1f:ac:6e:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:58:F6:65:E4:29:07:36:B3:B3:40:44:10:79:D9:4D:9C:97:98:10
            X509v3 Authority Key Identifier:
                keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:5b:af:25:f5:9b:1d:3b:4f:af:d0:dc:7f:7e:d5:55:dc:
         55:1b:45:c1:00:00:2f:05:2a:b9:29:11:d9:bb:dd:c1:71:5e:
         23:7c:b4:77:b6:46:62:6e:83:03:18:bf:1f:3d:ce:b3:13:94:
         9b:2b:ab:cc:6a:4f:79:6e:d9:90:c6:0e:b4:e8:da:6b:cd:85:
         62:ee:c6:33:db:e5:8f:a8:2d:45:4e:11:28:0a:a2:12:d3:92:
         50:54:9f:ae:59:2a:65:72:42:68:09:d0:bb:06:7e:49:c5:26:
         5d:b0:37:fe:a9:e3:1a:bc:fa:36:de:bd:d8:c0:80:fc:39:15:
         19:5f:32:a2:08:01:51:11:ff:f2:fa:88:76:c1:ff:05:91:38:
         e9:34:44:fa:96:d2:cc:d7:9e:f6:88:80:e7:34:c2:40:c4:6c:
         4d:f7:59:4e:c7:2c:1c:f8:61:86:4c:c4:ed:28:c4:28:f5:db:
         c5:ac:8f:5d:f9:a8:cf:d0:ca:1d:a8:2d:30:ba:96:bc:b9:66:
         f5:f6:8a:20:53:6f:6d:30:62:18:a4:92:4f:c6:36:48:6b:1a:
         cc:90:83:e7:b7:dd:eb:b4:bf:bd:f7:61:e8:aa:1b:fe:76:2f:
         c3:f8:a7:33:13:47:a9:f8:23:77:eb:fb:91:62:da:11:cd:1c:
         d7:88:d2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:52 2024 by rpki-client on console-fra.rpki-client.org