Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
File:                     O37JQjv5DIHSLZSEHBA1elQmA3k.mft (raw, json)
Hash identifier:          AxuaqnQxqq2G940x/1Gvcc+O/KU4Le9cBwsJmC+o1o4=
Subject key identifier:   C6:92:9A:CC:19:0D:2C:D8:29:21:12:42:83:F5:4B:71:EB:FD:C9:DC
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Certificate issuer:       /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial:       018F70F8C05A8E584D12AE8294137C1EADC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
Manifest number:          11AE
Signing time:             Mon 13 May 2024 08:01:41 +0000
Manifest this update:     Mon 13 May 2024 08:01:41 +0000
Manifest next update:     Tue 14 May 2024 08:01:41 +0000
Files and hashes:         1: 8vDELfKPcvzvV3RNJWMSHDMVxSU.roa (hash: sRHvCOhQKEWWdeJEjT/wzddRUrkbbjBWUo+xrYJeHEA=)
                          2: KU64UFfMvr7hELtznW1kd3Jgx0g.roa (hash: IreqOrqzILh2oR2ldJiQhRHfJ01koP4D4FLp7x9G4/4=)
                          3: LQCCtVc6ZxcR2ZmmWPNDc4pIa_Y.roa (hash: c0fge8C7CIKoSd4Qv86++FBUG992VBIIU7eCsCNcDhg=)
                          4: NanHEWkVUEVIFMXgkf7VjzJv3EI.roa (hash: BpNAL/7v/9r0wilOFqCRlV3KJaojWEMjlLM2Wri0rMI=)
                          5: O37JQjv5DIHSLZSEHBA1elQmA3k.crl (hash: khJXb2M5X/XOtHneXxat9lEWYtlKQlPHySMiE+Xknrw=)
                          6: WPscA-L06bAA9F5ooBe7Pf2sOZE.roa (hash: NNFx9yaQDJ0RagbXJX6TLI9ki3s7UWcjfjrthKBCj+k=)
                          7: bRXAhBvcPUvJCX7qdUqTFZFHFj8.roa (hash: VmGWtFULEN8fSC5hsMHlw3+Up5FvQ1DatG9ZPrcOhCs=)
                          8: ikjOg3DuV3dG0XMGGKFbvmv93U0.roa (hash: 0zoiK/IqK/ToLPo7OA7ij/m06EFT/E55yXhhbtK4O4w=)
                          9: jaDaGycFgZ1pZNnwn6ei8LOm3DQ.roa (hash: fzKmWx5CbS4BzYCpG5vV5O44t9nhGCLZgJyKnLKcw2E=)
                          10: oP490aCHyPb1ky13XTWCEqlywec.roa (hash: MVQEEHGjTpLySUvylzsYOV2e6bAi7DuNaJRzh58XHpc=)
                          11: p06i0La7cqcu57vOBbdjswK08Rk.roa (hash: ihemQCValfrhIjCTAHxxeLK0FMyQ77/Y6cQwrdSowx4=)
                          12: pcxM9ngALshNICd8yYlBeG930vM.roa (hash: kZJWMJBNT5Am972w+GACObZdvdg7Kbw5bRphm+R5UVY=)
                          13: rLJvZxJ0aSyYN6-Q5Bw4kmxWFHU.roa (hash: U2r+gCiYsLemL0/mWy+RfQ59RnUuIGLS/QczZmHDy38=)
                          14: uDF7cF0FKP8Pq_OVmSawioGZVSM.roa (hash: oo6Q1df3OkUdxk2nXw6XvwREhhLeWN/c8RFmvIUKpLI=)
                          15: yMT7x9AsANmP0xlV_lSouz93PLI.roa (hash: csQViFaKwWAFWqdPWAfxCWFUj6PmwmMXl4V2W8j8YRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:f8:c0:5a:8e:58:4d:12:ae:82:94:13:7c:1e:ad:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
        Validity
            Not Before: May 13 08:01:41 2024 GMT
            Not After : May 14 08:01:41 2024 GMT
        Subject: CN=c6929acc190d2cd82921124283f54b71ebfdc9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:ff:d8:ae:74:7c:82:17:59:00:f8:ac:a1:
                    3b:5d:2a:b2:b0:c1:39:4e:b5:40:7d:93:cd:18:ec:
                    56:6b:c6:73:8f:c4:dc:75:ce:20:04:1a:61:56:f5:
                    67:20:95:bf:0f:3f:59:65:16:5c:d2:1d:19:5b:fc:
                    9b:1c:2d:ef:67:19:84:18:66:e1:1d:eb:ad:e0:2d:
                    fe:ad:62:ee:6d:8c:f6:10:cb:6f:e1:cd:c8:40:b9:
                    15:1e:38:a4:3f:5e:26:d5:ca:41:63:4e:62:c5:67:
                    ff:28:6e:d1:e7:65:a3:80:51:63:39:f2:51:de:b2:
                    a2:97:ef:91:1e:4e:f7:bd:de:39:5c:56:42:71:ca:
                    e9:79:fb:7c:74:48:45:44:78:74:f3:9a:a0:89:67:
                    e9:ac:5d:9b:77:fb:62:91:89:e3:03:c3:62:91:fe:
                    85:fe:3f:b9:2a:dc:1c:ee:c6:9f:70:ad:15:48:1e:
                    14:89:d6:8f:3f:38:a2:a5:7a:c7:ec:24:76:d9:cf:
                    9e:c7:55:3c:48:d2:3c:7a:ea:86:84:c7:79:42:b3:
                    66:59:86:82:fb:95:6e:82:ac:8e:1f:4d:3d:94:c0:
                    6f:5a:8a:ec:06:09:b4:8e:05:1b:47:f0:91:1b:de:
                    bc:e2:cf:b0:c4:34:20:34:ad:6e:37:0f:5d:f4:27:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:92:9A:CC:19:0D:2C:D8:29:21:12:42:83:F5:4B:71:EB:FD:C9:DC
            X509v3 Authority Key Identifier:
                keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:8a:4c:78:bd:53:0b:c3:f3:d9:11:1f:43:db:7d:ec:25:
         25:85:08:72:7a:0b:ea:99:31:3f:c3:d3:c5:a8:04:38:36:4a:
         98:db:27:08:c7:46:2f:14:62:49:13:a3:fa:22:e8:8f:34:90:
         f3:4e:21:f1:c5:25:fd:20:ac:ef:d1:0f:f9:66:f0:9a:cb:fe:
         d5:60:12:e0:72:25:2c:3f:32:53:81:1c:33:0d:bf:ca:89:75:
         10:9f:d2:14:d0:da:a8:a2:70:8c:1b:89:2c:54:ed:7f:00:99:
         96:a9:c5:b5:f6:36:c7:cf:4f:c7:48:7b:8a:40:06:19:eb:cc:
         b9:c1:ba:43:0a:14:9f:78:a2:9f:8d:3f:7d:07:fc:56:16:9a:
         14:83:2f:bc:c5:e5:b1:12:4c:ad:24:8e:6d:2e:b5:9f:a1:62:
         81:44:c6:67:94:54:05:3b:d0:1c:88:5f:d3:ad:b4:ea:ae:0a:
         1a:9a:19:e0:c8:40:d0:53:8d:9c:4d:49:c8:1d:9c:dc:da:f8:
         44:b1:e9:fa:5a:ed:9f:2a:b6:04:b1:c4:45:9e:aa:4e:b3:3a:
         4f:ee:2a:80:65:35:ec:9d:db:3b:07:9f:81:57:b2:aa:0b:f2:
         9a:a3:fa:0c:02:37:66:6a:a9:f4:6a:35:fb:44:b5:04:0a:83:
         e3:45:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 11:48:33 2024 by rpki-client on console-fra.rpki-client.org