Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File:                     OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier:          L/p5Am6IxXFSyolq3QnJ/6k9M3SgCxYM+0Hz3GR3izg=
Subject key identifier:   36:D2:B1:7C:AA:DE:B6:1E:5C:80:49:CB:4C:6E:87:53:9C:2A:08:AF
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer:       /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial:       018F88240E940D297CC1B0D4BD0BF1D0C66B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number:          025D
Signing time:             Fri 17 May 2024 20:00:15 +0000
Manifest this update:     Fri 17 May 2024 20:00:15 +0000
Manifest next update:     Sat 18 May 2024 20:00:15 +0000
Files and hashes:         1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: pAKRoypCk9I87/n2KmoStBIO0CYHt4N1MuD2puJsxE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0e:94:0d:29:7c:c1:b0:d4:bd:0b:f1:d0:c6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
        Validity
            Not Before: May 17 20:00:15 2024 GMT
            Not After : May 18 20:00:15 2024 GMT
        Subject: CN=36d2b17caadeb61e5c8049cb4c6e87539c2a08af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:24:49:67:e4:f0:cb:60:ae:47:37:26:4c:
                    28:a3:df:65:dd:65:5f:86:b3:6e:a8:99:1c:03:74:
                    53:63:e8:47:46:c5:b5:db:54:b4:85:be:36:4a:d8:
                    6b:f1:05:5b:60:a9:f2:1e:27:49:b3:05:13:c1:8c:
                    a8:30:16:b8:d9:97:22:82:87:19:c2:b0:39:4e:d0:
                    95:77:b1:14:53:2b:63:17:67:39:4f:50:5e:13:1e:
                    a0:70:d7:f2:96:4b:59:c3:46:60:7c:b9:cd:f3:17:
                    23:6c:21:c2:12:26:25:4e:ef:5f:ad:b8:5a:46:92:
                    8c:08:5f:8d:cc:b0:5f:52:d5:e2:64:fc:b7:88:10:
                    e9:7c:99:4f:aa:bf:b1:df:e0:03:ce:a8:50:29:41:
                    2b:f8:ce:13:b0:09:f0:eb:95:d8:15:d6:34:19:52:
                    0d:6d:c2:15:c9:b9:2f:21:f7:ca:18:fd:6e:b4:31:
                    bb:da:4f:3f:62:bb:0f:28:36:65:ee:97:52:9a:31:
                    33:9e:93:9c:c4:ab:20:e6:de:0d:e3:b0:6a:a6:c6:
                    26:b6:61:cd:98:8c:54:49:1c:6d:48:ec:f9:21:d6:
                    a7:9b:90:40:43:c4:50:f5:1f:fd:1a:e2:0c:e6:e8:
                    73:cd:22:c7:e3:a4:cb:27:83:20:eb:c7:36:0a:17:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D2:B1:7C:AA:DE:B6:1E:5C:80:49:CB:4C:6E:87:53:9C:2A:08:AF
            X509v3 Authority Key Identifier:
                keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:36:ca:f8:5b:b5:b9:ac:0f:8c:05:68:75:a8:bd:33:7a:
         54:e5:97:b5:2c:93:14:7c:f7:5d:eb:0a:d8:01:32:02:ae:62:
         87:da:5b:5c:0a:76:e4:95:ef:8a:f9:f9:03:6c:f4:37:19:64:
         56:cc:eb:2c:51:90:b4:24:0b:33:fa:40:dd:26:70:7f:7d:d0:
         ec:03:cc:9c:9c:a3:ed:ef:5a:fa:81:da:90:b4:3b:ce:fe:a3:
         7e:7b:6f:97:e2:a2:c0:06:d7:55:a1:ca:f8:c0:3b:06:31:4b:
         92:29:33:c6:de:39:d2:42:48:54:87:2d:fb:11:d1:6a:93:d9:
         7c:6e:7c:90:36:84:61:a4:8e:05:23:d0:db:fa:53:73:ad:28:
         a7:2d:b8:20:63:d5:a3:d7:af:b8:a4:28:5e:ff:e0:c2:ae:5b:
         50:b8:6d:51:14:f8:dc:ad:77:99:d9:0f:f9:3f:ea:e9:b1:c8:
         90:b1:58:8d:23:a4:59:d9:78:4b:28:95:e5:86:d0:0f:85:33:
         9c:a5:20:90:5f:5d:ad:b7:af:4c:96:c6:fe:bd:92:b1:1a:11:
         6b:d9:58:84:75:98:e8:9a:dd:2e:85:1f:fe:7b:29:f9:5e:64:
         d0:a0:68:af:ea:4b:6e:5c:ac:78:d0:95:45:da:51:57:88:01:
         fd:25:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:11 2024 by rpki-client on console-ams.rpki-client.org