Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft
File:                     ow5KB7OUnNWacGYBZYt-PMu7qm8.mft (raw, json)
Hash identifier:          UcFFL3yu2D2bzAHs48BuNPeWpzghdDLmr1ARxnX7w+k=
Subject key identifier:   5C:00:7E:99:03:66:55:4D:9C:CD:23:42:78:32:D4:02:E1:1A:81:1A
Authority key identifier: A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
Certificate issuer:       /CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
Certificate serial:       018F8823F279A66F38BFF197ABFE07C2F7AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft
Manifest number:          0626
Signing time:             Fri 17 May 2024 20:00:08 +0000
Manifest this update:     Fri 17 May 2024 20:00:08 +0000
Manifest next update:     Sat 18 May 2024 20:00:08 +0000
Files and hashes:         1: X-z1swkjxLDzo27gAxKyUnjslVU.roa (hash: 0Y2PmFSwSDuPesd+kpUyUfj/mY+z3qaCrbfAMBrzU7w=)
                          2: ow5KB7OUnNWacGYBZYt-PMu7qm8.crl (hash: JuJPpgWacOAmjxGp3i1qwwtLwYJHfQKIG5HcAo/iGqU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f2:79:a6:6f:38:bf:f1:97:ab:fe:07:c2:f7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
        Validity
            Not Before: May 17 20:00:08 2024 GMT
            Not After : May 18 20:00:08 2024 GMT
        Subject: CN=5c007e990366554d9ccd23427832d402e11a811a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:62:04:d6:e2:ab:09:ae:24:d9:ee:e2:c7:
                    bd:01:b7:50:8a:5b:e9:ef:b1:cd:ad:47:4e:a3:b5:
                    c4:8c:6e:54:2e:6e:03:c3:72:87:a4:68:7c:33:66:
                    1e:2d:09:95:4b:e8:e0:45:12:5d:dc:bc:74:e1:24:
                    1c:37:f7:56:58:42:ce:7c:08:42:f8:60:dd:22:81:
                    c4:be:64:b9:05:07:db:77:5c:57:4f:71:95:86:7e:
                    4d:01:0f:39:4a:fa:dd:3c:a0:82:34:b4:6d:4c:1a:
                    53:d6:70:7f:f5:5c:a0:77:6a:0c:e0:b2:4d:b0:f2:
                    0e:cd:6c:38:77:9f:7c:11:76:6f:ed:93:d6:28:ec:
                    0f:57:85:5b:42:55:47:c0:f1:69:de:41:73:ef:61:
                    af:b3:43:76:dc:25:fa:70:14:69:a1:92:90:a7:7c:
                    89:87:32:a3:42:f3:6d:33:31:59:14:47:de:8d:a6:
                    7f:4f:42:ea:47:80:2a:09:72:63:4a:14:e0:85:b2:
                    ae:c6:69:1e:58:71:f3:9e:08:00:2a:6a:63:57:c1:
                    aa:e8:15:f6:b4:56:58:8e:61:de:c5:76:11:b3:cf:
                    80:a7:4d:b5:a9:bc:5c:aa:11:8e:cb:3e:2a:18:74:
                    27:57:b6:99:ad:e6:94:63:f9:78:bf:69:a7:08:03:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:00:7E:99:03:66:55:4D:9C:CD:23:42:78:32:D4:02:E1:1A:81:1A
            X509v3 Authority Key Identifier:
                keyid:A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:12:1a:5a:c9:1e:b9:39:1f:98:86:7b:a9:bd:67:62:57:e2:
         ca:f6:34:6f:a4:5f:18:8d:03:18:94:42:5d:67:bf:4d:98:f1:
         4d:ac:fe:c7:c1:c3:56:52:4c:f5:3d:4a:5a:73:37:0d:a7:eb:
         c7:fa:7d:ad:54:5d:ee:3e:3d:7f:bd:8e:45:7b:45:80:ce:1b:
         73:55:2e:57:48:3c:c3:75:e2:d9:0b:2a:83:8c:69:6a:ea:ca:
         bd:5a:aa:94:e7:63:4e:74:aa:26:8e:71:30:e7:f8:18:3a:81:
         6a:62:51:ce:9c:76:f5:b7:46:18:96:f3:ae:39:a5:52:8c:c8:
         7f:39:d4:cb:ad:0a:56:63:c5:66:90:dc:0b:40:e2:7b:51:16:
         c3:c3:2b:40:10:b2:6e:a2:bb:f5:8c:87:87:5b:2f:10:57:6a:
         a9:02:42:35:fe:9c:79:5d:7f:42:86:0e:f4:71:b2:4f:28:25:
         d3:ea:28:be:26:30:75:e7:90:66:ad:1c:f2:a8:46:ae:4a:83:
         6f:7f:c7:60:7c:de:43:71:3d:87:10:be:7e:5b:a5:45:d4:46:
         30:00:83:c0:e1:72:10:d5:bf:32:ac:70:dd:98:ef:31:57:ab:
         4f:3e:37:40:3f:38:9e:11:2f:ab:23:1c:83:aa:d3:86:91:7f:
         87:00:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:40:19 2024 by rpki-client on console-ams.rpki-client.org