Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File:                     o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier:          28rp947aC7ElwUbqYmRn201bocJzYRLNlmnZtwAaHnE=
Subject key identifier:   0F:DC:F3:8F:B2:25:18:11:74:B0:C6:6E:10:12:40:E7:A3:82:24:CD
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer:       /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial:       018F8DB87DC5337ED240E1A7D70B315FC97F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number:          117B
Signing time:             Sat 18 May 2024 22:00:29 +0000
Manifest this update:     Sat 18 May 2024 22:00:29 +0000
Manifest next update:     Sun 19 May 2024 22:00:29 +0000
Files and hashes:         1: FYiRCugig3I9LYYUfLjUCe6N6bs.roa (hash: 6tCFQM4Eqp+nxC+kjiE4C3MiHxu6NWw1RdXM1duqFxo=)
                          2: WvUB5CS69G-AaEDOMEhnhYoxFy8.roa (hash: f0nrBauVDmFlSyvR50MrEqyeNj2Xs5A+zEYK39z1W+w=)
                          3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: 745kNcqRcWMzvGfAoThrztMfuxqbUvT82mv41cBFuac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:7d:c5:33:7e:d2:40:e1:a7:d7:0b:31:5f:c9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
        Validity
            Not Before: May 18 22:00:29 2024 GMT
            Not After : May 19 22:00:29 2024 GMT
        Subject: CN=0fdcf38fb225181174b0c66e101240e7a38224cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:10:f0:54:8c:78:ae:b7:89:64:de:0a:95:
                    90:92:1b:9f:ae:61:95:fc:1d:82:e8:c0:b5:7a:b5:
                    69:22:c4:61:34:83:2f:9d:52:5d:f0:44:ca:a5:f9:
                    08:80:d2:f5:d1:1e:ca:8c:a0:d2:be:e7:62:16:a6:
                    f1:0c:56:25:39:99:08:2e:2c:d7:88:48:bd:68:70:
                    93:ab:06:dc:d7:6c:b9:82:d7:88:89:12:2d:91:86:
                    56:1f:54:30:88:5a:f0:36:51:67:80:1b:00:5f:2c:
                    b0:cb:d0:09:02:91:5e:90:64:10:24:c1:e6:26:c3:
                    54:0d:10:77:4e:0a:80:87:1a:02:3f:c1:b0:4e:67:
                    5f:ed:f3:63:a9:5d:9f:be:63:b6:89:f8:ad:ee:e6:
                    5c:b7:c8:87:96:81:5e:b2:56:f5:0d:d7:de:96:49:
                    b6:f9:15:2a:ad:42:05:42:8c:97:13:1b:00:3f:83:
                    28:88:b1:a5:65:75:cf:13:18:e9:18:fd:99:e9:be:
                    39:25:ce:e0:73:0f:ba:10:44:d6:2e:d3:ad:50:9f:
                    c0:ba:28:c9:9e:57:cd:55:57:cd:d5:fb:90:40:28:
                    f2:9e:82:d3:f1:69:02:e2:6b:b6:3c:5b:b4:bd:65:
                    20:57:f1:0a:40:45:e3:74:4b:ec:f6:29:bc:45:e7:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DC:F3:8F:B2:25:18:11:74:B0:C6:6E:10:12:40:E7:A3:82:24:CD
            X509v3 Authority Key Identifier:
                keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:74:e8:58:39:15:a6:5e:05:2e:5a:74:6a:fb:5e:75:dd:69:
         27:2b:56:1b:dd:f5:2a:1b:80:4f:41:24:77:90:f8:41:7a:14:
         c2:8b:6c:87:67:83:54:7e:f2:68:42:d2:71:43:35:2c:33:8c:
         9d:2d:f4:5f:8d:7b:55:f5:68:09:89:af:f4:0e:b2:36:e2:9c:
         78:23:a8:08:f2:4e:12:fa:ac:33:12:83:e9:f3:f6:c1:d1:f9:
         f0:65:a3:ef:1f:55:86:f1:c7:f6:27:56:46:8d:eb:0c:ed:48:
         a3:a8:4d:54:30:d0:a0:a3:7d:b0:45:07:30:7f:3a:24:55:70:
         91:1a:25:4a:3a:5b:48:3c:ef:99:55:46:d5:db:bd:b1:7d:7a:
         18:f2:c1:9e:41:97:94:ab:20:ce:7b:cd:4e:e6:8d:ec:ea:5d:
         c7:5c:0b:ad:66:9f:71:01:c3:6f:02:c6:2c:de:bb:8b:61:a2:
         2b:cd:57:6f:46:b1:6a:04:c0:02:05:c6:1d:61:95:47:d0:80:
         ba:82:21:74:65:64:70:aa:cb:11:75:6f:04:c9:a0:1a:49:16:
         45:5c:2c:e5:dc:cc:06:65:03:5e:cd:33:a6:10:2f:e2:24:27:
         8a:5b:82:05:2e:39:20:98:d3:0e:ad:2d:73:be:1f:62:59:b8:
         0b:cc:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:24:48 2024 by rpki-client on console-fra.rpki-client.org