Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File:                     OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier:          Vf0pPRPJ7QZZE4JQcxq8ZqDyZRh/h9Yz4TvIDchQsqo=
Subject key identifier:   13:6D:78:23:FB:44:A0:CF:F1:B8:46:5E:91:72:B5:B4:83:DC:19:67
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer:       /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial:       018F8891ED2CFC0AFF09D6CA945856A9C152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 22:00:15 +0000
Manifest this update:     Fri 17 May 2024 22:00:15 +0000
Manifest next update:     Sat 18 May 2024 22:00:15 +0000
Files and hashes:         1: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: aTwXWGQeVfFdl1Lg55BO4doNBLmZwD+sKU2BeCH/yOA=)
                          2: XPvi2P9MeXtBI_DguEvfuyQiYyc.roa (hash: 0+i484KbqFmmb9Y4i+BZcQuXkFSR0tyc82rQaQRMqDo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:ed:2c:fc:0a:ff:09:d6:ca:94:58:56:a9:c1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
        Validity
            Not Before: May 17 22:00:15 2024 GMT
            Not After : May 18 22:00:15 2024 GMT
        Subject: CN=136d7823fb44a0cff1b8465e9172b5b483dc1967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:e2:9f:90:07:75:48:40:33:a9:34:07:3c:
                    b3:3a:79:a1:4a:43:50:41:8b:6f:b8:a6:cc:a9:cc:
                    fa:1d:a6:78:90:d9:f7:e3:9a:82:34:2b:d8:eb:08:
                    3b:fa:51:6b:99:fa:52:b7:af:ba:dd:82:f6:8f:4f:
                    f7:1e:60:6f:b5:ae:d1:ec:35:ff:e4:a4:b4:51:7f:
                    44:6b:9b:f8:d9:36:e9:40:be:eb:a4:b5:93:d1:c0:
                    60:c9:f0:55:50:f8:b9:ba:35:c8:78:ab:f9:49:77:
                    de:93:a1:6d:1e:61:64:98:fa:f1:f1:3c:c6:94:24:
                    00:88:63:bd:76:7b:bd:f5:25:b5:60:94:6b:57:5e:
                    57:ed:75:13:99:f5:b6:9e:09:a2:df:34:06:52:a5:
                    9a:8c:95:46:c2:a1:77:af:31:7e:c7:52:2b:86:d9:
                    8f:dd:c8:d4:fb:27:8a:e7:d2:65:14:a9:c1:8a:8d:
                    81:22:e7:ba:cd:29:11:e9:f6:3a:17:58:29:28:32:
                    43:b9:25:bf:14:7d:a4:be:b0:44:cf:47:66:95:72:
                    18:45:61:a3:fc:09:54:64:43:64:7b:7d:09:88:ea:
                    2b:14:4c:e9:31:55:77:1e:ea:60:58:a2:6c:59:32:
                    d8:f0:55:8d:d1:ef:8f:d4:56:79:c8:76:80:ff:16:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6D:78:23:FB:44:A0:CF:F1:B8:46:5E:91:72:B5:B4:83:DC:19:67
            X509v3 Authority Key Identifier:
                keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:9a:30:e2:ce:8e:99:8a:d1:d1:28:35:65:29:ce:59:b6:
         24:85:35:d9:3c:4f:85:94:a0:be:5e:1c:72:bc:96:b7:06:8b:
         07:cb:23:61:f0:54:45:ef:06:cc:25:cc:1b:9e:ac:d0:bc:03:
         e6:5a:3b:23:51:8e:ea:65:92:42:e7:c7:7f:06:a3:8b:de:01:
         f0:c2:5c:30:92:af:14:87:38:f8:12:3c:b4:b9:66:bb:98:ed:
         3a:f4:96:10:d1:42:b8:09:9f:c2:53:2d:1d:e7:c4:67:1c:ef:
         57:19:17:ae:c5:15:33:f8:b9:48:00:ac:14:04:56:cd:9e:5b:
         72:a4:48:a0:8e:85:49:42:8c:e6:b6:57:9b:f0:ef:72:21:51:
         b9:11:be:bf:65:01:1f:a2:78:26:55:2d:14:a7:2f:83:50:4b:
         37:1f:f4:26:54:c6:bc:7c:e0:ff:b1:47:e7:02:ac:60:f5:9c:
         d1:41:e5:d0:fb:31:32:4f:81:8d:de:fa:07:b6:37:ff:25:ce:
         91:c7:34:43:f3:9a:31:57:d7:4f:db:75:d3:86:87:10:a3:11:
         1b:0f:ad:2f:b5:c0:6f:a5:24:57:6d:1b:f2:79:52:97:9a:dd:
         29:72:ea:bd:c2:4b:be:0a:3a:e3:ee:09:83:8f:fd:69:36:4f:
         2d:0a:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:49:29 2024 by rpki-client on console-fra.rpki-client.org