Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
File:                     oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft (raw, json)
Hash identifier:          OzbhXLf1i4nM1v2NFklJokSc33oxiAM5ghTsFLGyShU=
Subject key identifier:   36:34:C5:EF:8E:D9:DD:03:AE:09:95:A5:31:E6:75:02:3A:21:62:76
Authority key identifier: A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
Certificate issuer:       /CN=a0415b6357b1eb232821091fd4f26879540e6857
Certificate serial:       018F87B61DE99116933D272FEDA057A6DFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:10 +0000
Manifest this update:     Fri 17 May 2024 18:00:10 +0000
Manifest next update:     Sat 18 May 2024 18:00:10 +0000
Files and hashes:         1: VZwiBrDHZnxFeoy-6tvze3e1C3M.roa (hash: exA8ig1wNCfJbJ9F5yhtBLqOVdRKhOdknjq/kKbf4Ro=)
                          2: oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl (hash: J9aJzy2XkGQhTUncpoawxAQKcIRS7uJvNxNgcNxIRyI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:1d:e9:91:16:93:3d:27:2f:ed:a0:57:a6:df:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0415b6357b1eb232821091fd4f26879540e6857
        Validity
            Not Before: May 17 18:00:10 2024 GMT
            Not After : May 18 18:00:10 2024 GMT
        Subject: CN=3634c5ef8ed9dd03ae0995a531e675023a216276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:b0:84:d3:4d:cd:32:ea:23:cf:7e:c2:f5:
                    03:11:dc:cc:84:c5:59:f3:4c:f2:6b:64:7a:5e:23:
                    2e:04:30:84:78:ae:41:05:cf:43:36:d9:63:07:12:
                    86:db:c4:ab:35:51:12:7e:4f:e0:d6:63:cc:f9:c8:
                    f2:74:43:76:e8:c9:5d:1f:b6:33:c3:a1:0e:63:3e:
                    98:0c:ee:cb:be:3f:78:43:c3:40:0f:b7:71:a6:34:
                    5e:f3:a6:9e:f5:3a:c0:24:e1:16:17:e0:df:72:8c:
                    88:c7:a6:af:ed:34:5c:c9:e5:f8:42:70:aa:23:51:
                    66:e3:4c:94:64:95:c4:f7:1a:4d:96:37:92:ec:95:
                    3a:29:ca:74:7b:6b:30:7f:a0:4e:f6:1d:20:9a:58:
                    36:07:d4:c6:d9:42:8a:85:79:21:7c:1e:46:87:69:
                    9e:1b:4e:af:16:26:0a:85:73:e6:f0:ee:f7:f4:16:
                    8d:eb:11:cb:e8:7b:29:b8:90:5c:56:36:25:cb:f6:
                    f8:2d:aa:ad:6a:27:21:21:f1:32:57:a2:f4:35:b4:
                    17:9d:47:b5:15:c7:77:e1:1c:b1:d6:5d:cb:5b:71:
                    aa:c1:8b:da:4a:66:dd:9e:34:3a:48:63:c3:b2:63:
                    17:d6:fe:32:e9:2d:cf:58:cf:8b:2b:79:e8:8a:b0:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:34:C5:EF:8E:D9:DD:03:AE:09:95:A5:31:E6:75:02:3A:21:62:76
            X509v3 Authority Key Identifier:
                keyid:A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:b7:20:a8:f0:34:be:eb:18:8b:70:40:da:e3:b2:18:38:
         75:30:e6:e8:88:52:1e:29:06:6d:d1:a9:0c:e2:0e:91:5d:06:
         f2:7f:90:76:db:50:7c:b4:a6:ac:d9:32:cb:64:dd:08:19:bc:
         ec:22:85:1a:68:d0:a0:1d:6a:f5:c2:f0:38:b5:09:5e:0f:89:
         44:40:ca:83:40:90:a5:c4:4a:0a:05:cc:92:db:e3:e5:63:94:
         72:bb:fd:02:b6:58:18:fe:92:cf:bb:34:c6:28:0c:4f:b9:ac:
         88:31:2a:19:ea:be:36:a5:91:70:6f:cf:d7:ab:c0:79:4d:b3:
         89:27:ee:bb:20:9d:b9:c2:c9:22:83:23:d7:9d:47:09:c1:96:
         69:85:d6:c8:0a:f0:ed:f1:62:17:c0:4b:39:de:b1:c1:1f:77:
         78:8f:81:49:28:69:c5:6f:31:33:5e:21:66:13:db:a2:ba:bd:
         33:74:1f:38:1c:7d:f7:1e:9a:28:19:dc:11:bb:93:ac:3b:47:
         24:04:cd:f8:a7:1e:29:66:ff:a1:48:5f:44:bf:5f:a0:7e:88:
         30:21:58:50:d4:d1:cb:7d:bc:a6:95:0c:5b:1b:61:86:2f:6a:
         b5:e5:b2:d3:2c:f1:2b:0d:0c:34:f9:bd:62:4c:f2:7f:51:43:
         f2:1b:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:52 2024 by rpki-client on console-fra.rpki-client.org