Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          jtajAjjkyfnmI87gGGE24fMEHXUXgMgAw+noncUwhKM=
Subject key identifier:   4A:9A:48:27:5D:96:E2:54:D6:D6:FB:C9:37:D3:6F:20:C0:BA:20:F2
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       018F877F33FC545CF2B39EBF72356AFC688D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          01F2
Signing time:             Fri 17 May 2024 17:00:11 +0000
Manifest this update:     Fri 17 May 2024 17:00:11 +0000
Manifest next update:     Sat 18 May 2024 17:00:11 +0000
Files and hashes:         1: 5MjDloOkMbroSjLN8OzGXX38UjE.roa (hash: L0hZ+BoOXuQp96fricRnYxcU8ZRBC0PWbP4x5O8AaUg=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: eJUgwwpF9VngYKi4AenX0EgJzKpj3Upj0gVhzhsgBaA=)
                          3: tKgmwxS7buNXlOIvK59WgqDEmoQ.roa (hash: CVZHXmtJwGTLMcjy/XTt5OPgPu3H8KI2e61uMvRBkSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:33:fc:54:5c:f2:b3:9e:bf:72:35:6a:fc:68:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: May 17 17:00:11 2024 GMT
            Not After : May 18 17:00:11 2024 GMT
        Subject: CN=4a9a48275d96e254d6d6fbc937d36f20c0ba20f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:74:81:d7:56:14:f6:f5:fb:ed:8c:99:bf:
                    37:74:08:d6:28:0f:02:0d:d8:67:e8:13:e2:d3:b9:
                    11:f2:29:22:38:ac:62:64:d0:73:d2:bd:1b:71:bf:
                    92:a6:94:0e:7c:32:16:25:c9:7a:14:07:d4:ee:db:
                    47:d5:07:45:a7:21:89:db:ee:89:3c:1d:5c:86:64:
                    4b:1d:73:e1:c5:cc:26:48:41:7f:8d:e2:1b:c4:86:
                    22:9b:7f:9c:52:3f:35:76:78:37:b7:4c:1a:c5:d6:
                    45:ee:7e:7e:7f:0d:01:65:67:e9:c9:cb:ff:f5:54:
                    60:40:f8:22:6d:a4:f2:c3:67:30:6c:3e:da:6e:32:
                    03:5d:cd:6d:9a:f6:5f:bb:0b:c3:bd:83:f1:09:c1:
                    b7:28:56:5a:82:16:c1:ad:e6:3e:47:43:18:59:12:
                    45:33:bc:af:42:c0:9e:ce:8f:86:c7:44:75:ae:96:
                    70:77:78:6b:5b:37:7d:ca:39:69:5f:d0:d0:8f:19:
                    76:e7:fe:38:94:24:e9:fd:44:2a:62:b7:63:83:a7:
                    3f:af:f9:7e:1a:ea:3e:ca:a0:4a:fc:40:84:cb:9a:
                    34:d8:96:5b:93:66:de:9d:ac:cb:e8:44:ee:04:22:
                    4a:fe:0e:3d:35:1d:06:f8:59:59:8c:d1:a5:e6:ff:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9A:48:27:5D:96:E2:54:D6:D6:FB:C9:37:D3:6F:20:C0:BA:20:F2
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:53:01:ac:30:2d:72:f3:62:f9:1a:9d:f0:70:11:b2:b7:11:
         68:25:27:4c:68:7f:d8:c2:af:bd:2c:7f:a4:42:fe:fb:d7:06:
         8a:af:2c:b5:fc:53:3d:f6:6d:3e:ad:05:39:c8:22:b7:7f:ac:
         70:40:bc:94:a2:c5:eb:59:db:93:4a:fb:69:00:af:4c:2a:b3:
         ce:cf:e3:e7:cf:84:3b:2c:bc:e8:86:66:aa:a6:62:32:e4:ca:
         b3:25:c3:b1:6f:ed:0f:cb:3c:35:86:87:83:51:ee:38:4c:ef:
         c9:0a:4a:f3:cd:86:00:83:81:66:19:c5:19:fa:66:f0:2f:85:
         1d:03:65:29:a6:0f:34:82:33:37:c8:49:94:97:36:b8:e2:c7:
         70:25:03:f2:81:d9:c1:4d:c1:6c:64:13:41:e8:64:8f:50:33:
         a7:e8:96:a6:20:3a:fd:54:f0:9a:ce:d6:13:c8:7c:1e:45:aa:
         84:b1:33:41:5d:3d:c6:bc:c6:41:60:34:2a:8c:27:dc:00:14:
         11:69:2c:b6:f7:7f:f5:de:b3:73:fd:11:7f:88:e4:5e:53:f2:
         59:f6:46:d9:f3:02:1d:18:16:60:ff:7a:73:7c:e9:f3:0b:71:
         96:7f:8a:ab:ab:99:d6:a5:67:5e:0b:78:b3:7b:a3:f3:33:20:
         f8:9c:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:44:20 2024 by rpki-client on console-ams.rpki-client.org