Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File:                     O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier:          t9/OPgBmOU4jiUSvFvesBbsf5PCcSRrjdkvrAbR7EsI=
Subject key identifier:   5D:CF:3B:CD:17:87:63:1D:56:96:DC:CB:20:1A:D2:FA:A4:CD:53:53
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer:       /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial:       018F8748EC3EBF754FBBAEAEF7800C955863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number:          0577
Signing time:             Fri 17 May 2024 16:00:54 +0000
Manifest this update:     Fri 17 May 2024 16:00:54 +0000
Manifest next update:     Sat 18 May 2024 16:00:54 +0000
Files and hashes:         1: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: bHRelW1k3KL4EM1+NWilw1+P5nrpKnaT2snWVRTAcUA=)
                          2: br0WCcMjdhpq773tICPNw2XaVtI.roa (hash: E65doLA3SZxv0PdSM/ibzDsKHIGbpZanKbXrSK3aL4c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ec:3e:bf:75:4f:bb:ae:ae:f7:80:0c:95:58:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
        Validity
            Not Before: May 17 16:00:54 2024 GMT
            Not After : May 18 16:00:54 2024 GMT
        Subject: CN=5dcf3bcd1787631d5696dccb201ad2faa4cd5353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:dd:59:5e:8a:5d:e9:2b:8e:7b:1d:7d:0e:
                    b8:07:89:06:72:e3:74:83:8b:f4:d4:81:41:a8:3b:
                    28:1e:c0:15:bb:38:48:11:8a:f5:20:7d:5a:91:3a:
                    06:41:dc:3b:b9:39:17:2e:05:85:cf:19:53:15:12:
                    91:54:86:4e:9a:3f:fb:31:b0:f9:af:64:d2:ff:1a:
                    4e:48:9e:89:fe:7d:1e:3d:cc:1c:aa:d0:2c:4d:d4:
                    d2:20:7d:de:ce:63:42:4f:8d:33:c0:62:e3:2c:c0:
                    1d:6f:52:bd:56:32:65:74:1d:71:c4:4e:01:4a:0c:
                    2f:d8:6c:d0:17:0c:fc:3e:6b:22:1d:f3:17:31:0d:
                    9d:f6:cb:67:86:66:86:4e:77:a5:81:7c:68:5c:27:
                    84:62:4a:22:7c:50:63:56:e0:a1:1c:fb:89:ba:f2:
                    fb:1e:7d:55:14:e8:ea:e4:2c:31:5a:23:7f:27:7b:
                    31:74:d3:cb:ae:59:86:20:61:76:d6:c7:cc:80:6a:
                    1b:7f:5f:8f:95:94:62:31:4a:a3:1c:fd:a2:2c:fc:
                    39:24:91:45:f0:bd:5d:bf:42:e9:91:e8:2d:26:4a:
                    ff:35:33:66:e3:99:f4:48:4c:82:95:ce:2b:92:28:
                    ea:6f:a0:e6:f8:8c:32:f5:4b:9d:fc:37:64:75:fc:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:3B:CD:17:87:63:1D:56:96:DC:CB:20:1A:D2:FA:A4:CD:53:53
            X509v3 Authority Key Identifier:
                keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:34:51:d2:d9:d1:03:7d:9d:1f:dd:06:08:32:83:08:7e:ce:
         06:0e:16:8c:4b:d5:62:79:af:a5:fb:fa:d9:a1:05:8f:ee:c1:
         8c:ca:b4:22:a0:1d:52:f9:46:d9:81:19:c6:bf:9f:ba:ff:60:
         15:75:0b:6a:7d:57:57:c6:6a:bf:26:1c:6b:37:ba:29:b8:3a:
         06:97:81:65:58:3e:4a:82:2c:9f:c8:60:11:46:c6:5c:99:09:
         6f:39:51:f7:88:93:3f:8d:b4:c1:27:a4:da:2f:7a:2d:f2:a5:
         01:23:df:ff:c2:0b:3b:13:62:f4:3a:0c:8d:80:84:b1:b1:a7:
         bc:66:9e:e4:3e:53:c4:a8:83:8f:ea:d8:a8:39:bb:f9:6a:66:
         53:4f:53:7a:95:b0:c8:6b:4e:7e:29:0b:bc:cf:6a:46:bb:c4:
         35:f9:ec:71:af:1a:d8:f4:48:ef:00:9e:be:82:86:a7:c6:39:
         1f:5c:de:bd:68:b8:9b:97:6b:7a:7b:f1:59:ab:29:7c:5e:18:
         63:da:94:67:2c:5e:8b:43:50:64:87:6e:e6:ad:e8:66:b6:be:
         18:68:d1:e7:8a:57:62:52:d9:af:2b:07:f9:fd:bb:6b:2c:49:
         2b:34:e8:d3:55:3b:e3:32:60:2b:45:9f:ec:2c:48:3c:49:51:
         91:a6:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:56 2024 by rpki-client on console-ams.rpki-client.org