Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
File:                     OKN8JN3KNH1xPteU0zzUqBqLSYo.mft (raw, json)
Hash identifier:          WxvMuVPTb67tCrRB+EIS/Kr9Vwu7OKZXUr7kDLthPrY=
Subject key identifier:   32:79:D7:36:9F:47:96:1C:F7:13:93:5A:8A:CF:A1:92:30:D4:31:26
Authority key identifier: 38:A3:7C:24:DD:CA:34:7D:71:3E:D7:94:D3:3C:D4:A8:1A:8B:49:8A
Certificate issuer:       /CN=38a37c24ddca347d713ed794d33cd4a81a8b498a
Certificate serial:       018F885B1B0BA3FA9ADDD3425AD8F4A4533E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
Manifest number:          1124
Signing time:             Fri 17 May 2024 21:00:22 +0000
Manifest this update:     Fri 17 May 2024 21:00:22 +0000
Manifest next update:     Sat 18 May 2024 21:00:22 +0000
Files and hashes:         1: OKN8JN3KNH1xPteU0zzUqBqLSYo.crl (hash: lsRQnxuit5sJVBEcNjvyVbwl3L7UeC0L3XccSd208Tk=)
                          2: P3HMd9nsNTIViSxOnvcRyGkC_SQ.roa (hash: 8P2fGUW6Yx3dPmcRjRk6MKSIDP+YBwW7ISEDJ33MZc8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:1b:0b:a3:fa:9a:dd:d3:42:5a:d8:f4:a4:53:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a37c24ddca347d713ed794d33cd4a81a8b498a
        Validity
            Not Before: May 17 21:00:22 2024 GMT
            Not After : May 18 21:00:22 2024 GMT
        Subject: CN=3279d7369f47961cf713935a8acfa19230d43126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2d:97:30:98:2e:3d:cc:bb:14:c2:35:aa:98:
                    90:c6:5f:c3:1d:d5:58:4f:16:4d:3a:63:70:fc:e1:
                    ed:fc:71:9b:e9:eb:f7:c3:d6:16:81:29:1e:03:03:
                    65:2d:ac:52:73:69:88:1c:76:03:40:1c:61:7b:24:
                    3e:3a:51:2e:12:b5:ca:a1:8d:56:ef:a6:a5:21:fb:
                    2f:80:f2:89:aa:46:1e:17:7b:a5:9d:fb:8c:8c:d7:
                    b4:fb:49:33:93:8b:04:56:73:70:f4:5e:f2:0c:2e:
                    a2:bb:bb:fd:29:1d:cd:66:b9:58:8b:86:ec:8e:1b:
                    30:b7:5d:38:e3:12:f1:19:6d:de:ea:95:8b:93:c2:
                    12:fc:e8:01:54:d2:e4:40:97:93:e2:7d:df:71:2f:
                    9f:6d:32:91:b5:e2:71:26:89:29:ac:5f:ed:98:14:
                    4e:b3:27:3d:d9:49:9c:09:eb:b0:b4:d7:de:f3:0e:
                    df:b2:d7:ef:99:df:0e:b6:ef:28:a0:32:3d:a6:d6:
                    8f:08:b8:08:74:33:af:0c:72:a9:6c:7d:83:18:e0:
                    67:d6:8e:e0:94:38:3e:00:67:3d:0f:5b:78:fc:ae:
                    a7:62:46:51:9a:22:6e:cc:39:aa:db:b6:fd:7b:c8:
                    14:92:99:bb:2a:de:ca:a8:89:37:5f:f4:e6:ac:1d:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:79:D7:36:9F:47:96:1C:F7:13:93:5A:8A:CF:A1:92:30:D4:31:26
            X509v3 Authority Key Identifier:
                keyid:38:A3:7C:24:DD:CA:34:7D:71:3E:D7:94:D3:3C:D4:A8:1A:8B:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:45:e3:46:05:40:e4:d5:fc:20:98:8d:96:5c:0c:83:27:7f:
         66:45:55:29:2d:30:b0:97:4e:99:5a:ce:a7:e0:9d:53:a3:a1:
         9b:2c:f3:91:f4:34:7b:c4:a3:4a:70:53:62:a6:20:f6:ec:13:
         76:9f:29:a1:e7:f4:43:d2:31:33:1f:0a:6e:cd:07:de:66:83:
         8c:1f:c1:cf:7e:36:21:10:3d:cb:4f:ed:5d:ac:6c:4c:5d:61:
         19:35:19:3b:5d:63:bb:54:c4:e5:f4:2f:8c:0c:21:5f:3a:93:
         1f:0a:58:e2:a9:f5:fe:03:3e:77:16:22:91:a9:5a:62:f5:2a:
         5b:bc:46:ed:38:22:ea:4a:ae:ce:8f:bd:fd:20:3e:bf:50:84:
         d0:16:c8:34:12:f7:36:e9:58:87:be:a3:af:1a:ee:80:8c:2a:
         3a:87:8b:84:35:49:7f:db:80:10:c9:dc:17:b0:56:bd:4b:ba:
         78:3c:c3:92:7f:18:80:b2:61:55:41:ce:8e:3f:a8:00:dd:89:
         92:c6:c7:5e:97:b8:2c:65:1f:f6:b7:64:6c:a5:02:b4:bc:b6:
         49:d7:11:1d:27:7e:41:5e:23:4b:c3:3c:4e:2d:d9:55:50:05:
         1f:79:a5:1c:97:a8:73:74:3e:fd:96:1c:0f:63:55:00:ea:8c:
         88:41:2b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:47 2024 by rpki-client on console-fra.rpki-client.org