Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File:                     ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier:          NCrUuJPysmkRAFTQcRfKP3+tobLhJe45fwH+e8L2nWA=
Subject key identifier:   1D:8E:28:D9:67:51:AD:CF:B6:16:FC:20:6D:40:77:78:26:3C:AC:5C
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer:       /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial:       018F866C7C3A46D33BB5F825EB042DCE5BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number:          1117
Signing time:             Fri 17 May 2024 12:00:07 +0000
Manifest this update:     Fri 17 May 2024 12:00:07 +0000
Manifest next update:     Sat 18 May 2024 12:00:07 +0000
Files and hashes:         1: 6CneQwGIdtbb5lsyjYncescluxY.roa (hash: L22oJdnSc7sOzBGfLtnpLRzZygWN2Sr+NNfPd8DL4Fk=)
                          2: IbhiVQVBlN7qbNcQHVNxqRaWsLo.roa (hash: 4pMrJXngBQm15IBpeYt22Vvj4d163rxvNHpM6/gMdHU=)
                          3: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: HisEFWqzSC+Ykm+ARHydDWQjYXWKZ6TCwusYeFT2he4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:7c:3a:46:d3:3b:b5:f8:25:eb:04:2d:ce:5b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
        Validity
            Not Before: May 17 12:00:07 2024 GMT
            Not After : May 18 12:00:07 2024 GMT
        Subject: CN=1d8e28d96751adcfb616fc206d407778263cac5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:ee:c7:1c:11:23:e9:ec:7d:b9:06:3c:43:
                    15:e3:34:f2:19:5a:f3:27:1e:b4:46:99:c1:b9:41:
                    67:a5:8f:d7:e1:95:08:82:c5:66:6e:ce:22:4b:78:
                    6d:ff:f4:b8:e8:ca:01:7a:f7:31:aa:b1:47:ef:22:
                    3d:61:c4:41:e0:9f:9b:f0:ed:19:e3:f7:1f:68:e1:
                    9d:a8:3b:69:a5:1b:fe:05:37:6d:5b:26:a4:6a:d5:
                    2a:50:8f:93:39:f3:42:0b:85:3c:1a:a9:3e:80:fa:
                    d9:0f:a7:e7:09:c7:e1:a7:f4:55:99:7f:d4:6f:b4:
                    9e:9f:eb:44:5f:e0:64:42:dd:6b:61:bf:29:61:d5:
                    d5:0d:d2:52:f6:69:02:e4:3f:66:64:99:b6:6b:de:
                    46:1a:57:28:40:89:44:6b:55:45:5b:60:f6:ca:14:
                    a7:52:da:83:16:3f:e3:b3:b9:f2:17:6c:ae:24:96:
                    11:2b:37:82:7c:d6:3d:18:39:e5:49:65:62:35:5f:
                    87:d2:c8:9c:ee:bf:69:90:aa:cc:3a:1b:69:db:3a:
                    94:2c:c8:a7:6d:4d:28:a2:56:fc:98:8b:a8:59:15:
                    a8:d6:80:37:5f:03:a2:dc:21:b2:93:1c:f2:02:21:
                    18:a4:f4:fa:1e:fd:9b:bf:47:a3:77:9a:a7:cf:a1:
                    b6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8E:28:D9:67:51:AD:CF:B6:16:FC:20:6D:40:77:78:26:3C:AC:5C
            X509v3 Authority Key Identifier:
                keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:ea:8a:03:37:65:e8:4b:63:c1:ec:0a:71:e6:25:8f:1f:
         90:0e:41:19:b8:ac:c2:01:35:df:8b:5f:fe:64:d7:72:9a:5c:
         40:43:a4:bc:22:38:99:b5:10:f4:4c:45:1a:9e:90:d9:7a:7f:
         22:ad:b5:4a:d1:ae:81:07:a0:b4:1f:66:78:05:4a:c8:df:8a:
         8a:78:ee:0e:c7:07:a1:6b:99:4a:07:6a:4e:3b:b4:b4:37:a4:
         75:a6:ab:9e:36:c2:56:2e:51:d9:62:b5:e9:51:f0:85:82:d9:
         9c:b2:09:c6:59:f6:3e:30:4e:39:28:77:c7:69:56:f7:2d:9c:
         2e:ec:c1:ca:e3:b2:6c:82:a7:9f:a2:83:92:06:3f:db:60:30:
         fc:28:15:3a:5c:98:fd:73:aa:a7:67:32:bd:22:e7:50:07:ad:
         3a:18:4d:32:cc:8a:25:f4:d7:1c:b4:9e:de:20:10:04:87:76:
         55:f9:d2:bf:ec:0e:24:54:75:3d:5e:51:2e:c9:12:d5:0a:17:
         0e:c3:b1:eb:ea:c4:af:28:66:63:a0:57:d1:22:57:3c:4d:8a:
         c0:be:11:34:de:d7:3f:d0:68:ef:5d:d8:c0:ec:cd:22:f6:48:
         d2:1b:1a:77:3a:12:d2:26:a7:38:7a:5a:ab:97:1e:bc:bd:45:
         dc:58:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:39 2024 by rpki-client on console-fra.rpki-client.org