Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          9qIkI0FLuD7M5Ce77tlNzBDoF0cQSHoXms/abnT40Ao=
Subject key identifier:   89:58:AA:9C:83:A1:39:F5:19:B6:31:B5:CE:35:7F:64:7A:3F:63:68
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       018F87485E2B708DF75249CAA61DC4017DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          0EC6
Signing time:             Fri 17 May 2024 16:00:17 +0000
Manifest this update:     Fri 17 May 2024 16:00:17 +0000
Manifest next update:     Sat 18 May 2024 16:00:17 +0000
Files and hashes:         1: F1YxRyCVMISpLiGpKxId5OF3nEE.roa (hash: AUiaOIqIQESEN0D6w40A8Jc8ZlarDgse8lJcqPO0xvY=)
                          2: NDMHutY9tInbFC0wT9wSVMXPApg.roa (hash: nTs0GoauUuVTVnG3O0Awz1RlR8usQEcvjgrOtxgdFQ4=)
                          3: QsaA6w_DHvHg4FKptzoEWHdt61k.roa (hash: 3Lo4mYFrNBKFUmfbVfunPqToNhDIUSNFTj9IJgZZGRI=)
                          4: X1SNEO7Ij2hzblHWnQovo2zyNbc.roa (hash: Q4xUiQ4TvFJS/bsXEEzY9wJS4C+BNTZ5mQhVqXL5L2A=)
                          5: ldTCaFc_LTCLMygBQVpC3tFkjUw.roa (hash: BA0C+VpdQvLWhYc6OmeHA2Dkt126RFSHm99G0y0CQs8=)
                          6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: cv+0IcUW+WjwzvZyNysRZMqGAJS3osiyOUXjVUBv3CA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:5e:2b:70:8d:f7:52:49:ca:a6:1d:c4:01:7d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: May 17 16:00:17 2024 GMT
            Not After : May 18 16:00:17 2024 GMT
        Subject: CN=8958aa9c83a139f519b631b5ce357f647a3f6368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:80:06:04:3d:87:39:ba:c3:c6:97:22:06:
                    1c:e3:b9:31:22:16:e8:57:ff:05:07:29:12:6d:97:
                    1e:f5:a7:08:c2:c6:b7:86:3a:f2:42:c5:71:af:ab:
                    78:b9:d9:eb:40:80:fd:cf:aa:58:e9:ef:60:60:e5:
                    26:d4:7d:37:bc:2b:2e:0d:9e:bf:5d:b5:fe:63:c5:
                    62:ce:9e:59:91:c0:11:b3:61:f7:4a:c7:89:46:a6:
                    b5:c1:a2:50:ab:e6:48:20:49:e7:66:20:24:1f:f4:
                    e7:a7:3b:b1:8c:4e:0f:4c:80:8f:2e:71:41:30:5e:
                    6b:c5:85:a8:de:55:19:ae:1b:0a:50:6c:c8:1c:95:
                    1e:cb:57:ae:30:ab:d1:6a:4d:ee:cd:ec:f8:88:fd:
                    93:02:db:e2:50:68:ae:95:b0:5a:2e:55:cf:96:86:
                    61:53:0f:ca:1e:70:c8:33:05:c8:8a:d6:f4:b4:cf:
                    20:0c:71:18:79:34:91:e7:29:b2:fe:69:02:23:ec:
                    4d:c0:32:4d:7e:ad:ca:65:06:a0:4b:ce:6f:d0:09:
                    f1:ca:bc:80:91:41:d5:01:90:41:75:5d:b1:43:8b:
                    d0:e9:82:cb:85:61:5e:1b:d8:ae:68:4c:37:97:0b:
                    74:f9:dc:ac:e7:c6:3d:72:4f:43:44:6d:c8:7a:42:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:58:AA:9C:83:A1:39:F5:19:B6:31:B5:CE:35:7F:64:7A:3F:63:68
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:3e:f2:1e:a4:e2:15:75:45:b3:29:93:dd:35:97:b9:e2:
         61:56:ee:dc:de:a8:2f:bf:ce:b8:2e:0d:06:85:43:b2:a1:84:
         e9:43:6d:6f:fe:12:79:2f:6f:49:01:4e:71:18:d5:d3:89:a3:
         e8:82:be:59:7f:bb:2c:82:94:f6:ff:f6:93:22:69:ac:4e:5f:
         f5:23:78:2c:d1:9a:82:b2:ea:4c:b8:b8:0a:3d:75:31:59:2f:
         c2:fe:84:af:8d:a4:72:0e:f0:9f:90:4c:b5:3d:a8:b3:0e:36:
         29:ce:08:db:ad:53:fa:54:86:d0:67:75:1e:9b:c9:ec:fb:9e:
         9b:8e:d0:be:3d:49:9b:d9:9f:8f:d7:ef:2f:40:99:4a:5b:87:
         87:a5:97:bf:20:b7:58:9c:cd:de:fb:25:97:fa:5f:7d:0c:cd:
         08:39:ad:56:19:a1:30:78:a2:ca:7a:1d:6e:36:b2:06:b3:c4:
         8e:e5:ae:0b:e4:7a:34:ef:65:85:62:45:f2:4a:d9:ff:d5:36:
         86:5e:fb:6e:fc:79:cc:c4:62:03:58:5d:d0:eb:01:72:6d:3f:
         83:c7:bd:95:b6:0d:2c:d4:7a:01:10:4c:52:16:61:38:75:3a:
         6f:ef:8b:f1:a4:c1:18:05:e0:e1:cd:8d:6f:2c:c0:da:7d:83:
         a2:0b:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:32 2024 by rpki-client on console-ams.rpki-client.org