Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File:                     OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier:          cgCYxQlMilvTuDmifwRTQU7c9kTMBHtuyOnqVG5DYdI=
Subject key identifier:   36:45:B9:0C:B2:CC:35:0B:A4:AC:AA:A1:EB:7F:C5:4C:7D:FE:9A:E4
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer:       /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial:       01904868946B81656C2E4FFE035458D0A3C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number:          11DE
Signing time:             Mon 24 Jun 2024 04:02:11 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:11 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:11 +0000
Files and hashes:         1: K5MPNM_REsrL1Gzd6Ea-dQtNmpk.roa (hash: d8UKSCVvhO3P3PhNxkyDjTr1suZiirslIHJKZEMNrgk=)
                          2: LlwRjf77hNr3O3DXi61qwgGDLfQ.roa (hash: m2PzaDWZrdO4oNu4mPH/U2kv3SSh+OsP0MHKqEfAYMw=)
                          3: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: pboR9mP83kY7xO9ozwAkgqg3xZRT5ihUQwP7eCwiOiI=)
                          4: VS-l_XfB7EQvo8I3V6K6fXm-eIU.roa (hash: kU2rVZ7mx12Ux/mRHTyd5gtKLL33qjysoKbAjkbVmT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:94:6b:81:65:6c:2e:4f:fe:03:54:58:d0:a3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
        Validity
            Not Before: Jun 24 04:02:11 2024 GMT
            Not After : Jun 25 04:02:11 2024 GMT
        Subject: CN=3645b90cb2cc350ba4acaaa1eb7fc54c7dfe9ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d6:c5:15:dd:0c:07:8c:8d:15:90:bd:6e:b8:
                    bb:24:fa:22:7e:3b:0e:d1:d0:ec:3d:7b:87:0c:e4:
                    53:f5:ad:eb:fc:ab:17:41:d4:e1:82:da:ad:0a:b8:
                    22:03:97:a9:c8:65:a9:6b:33:90:96:a9:12:0d:e9:
                    d2:23:97:0b:6a:4d:c3:c6:30:e4:39:54:94:70:b7:
                    81:60:77:7d:d7:81:f9:9b:16:9a:f4:93:12:96:1b:
                    58:67:6d:4d:a3:d2:26:ed:bb:f1:3a:2c:b6:19:a0:
                    55:77:c9:c6:2f:0c:f8:dd:6f:93:cf:2f:5a:65:be:
                    41:af:a6:fb:27:a1:45:a7:b1:e4:21:06:fe:a1:60:
                    d4:ba:c7:75:18:6b:9e:fe:3b:74:a1:4e:6a:dd:5a:
                    e9:e8:f0:1c:ec:d8:7b:d7:1d:68:b5:ae:2a:0e:78:
                    00:54:8f:34:fd:de:28:1a:79:f7:ee:8c:ea:b5:2a:
                    ec:fe:e6:c9:05:ad:08:51:56:e2:b7:7b:af:c3:38:
                    df:9e:54:a0:54:a0:49:54:a4:74:d2:10:63:0f:27:
                    d9:1c:70:1a:30:f5:02:2c:4a:68:d9:40:46:bb:b3:
                    c3:9c:c6:6c:cd:36:f6:04:d9:18:99:93:ed:11:08:
                    e0:97:57:f1:03:f0:8d:f1:26:e6:44:27:d6:ae:94:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:45:B9:0C:B2:CC:35:0B:A4:AC:AA:A1:EB:7F:C5:4C:7D:FE:9A:E4
            X509v3 Authority Key Identifier:
                keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:99:85:d9:39:2d:a8:5f:bb:dc:a6:d7:dd:37:4e:06:54:e5:
         cd:f8:c4:e6:8a:57:49:34:80:8b:3a:d2:02:48:94:9d:9c:bb:
         92:6a:17:bf:77:56:a6:5e:e2:31:55:e7:f2:ec:58:79:c6:ed:
         e1:a6:09:3a:cc:4b:0d:a1:84:5a:0e:31:84:d4:b2:92:4b:3f:
         98:fe:9f:da:26:83:86:db:e5:be:8b:8d:26:90:b6:ad:92:13:
         af:0f:aa:56:11:e0:61:57:d4:33:4c:cf:0a:47:dd:45:df:c2:
         73:b2:41:61:7b:9d:ac:4f:7a:b2:70:10:bd:cc:c3:6c:7e:9d:
         9d:aa:17:d5:7f:38:a7:6f:29:32:d5:e0:39:80:21:76:cd:f3:
         05:57:51:bf:58:26:d4:02:73:ad:9c:97:9c:9c:09:10:77:e8:
         ba:83:ab:40:fc:d7:6e:2c:59:68:e6:e1:d1:fc:ea:c2:bd:4a:
         45:61:f9:c0:fe:94:98:0c:51:7d:74:1c:0f:26:5a:47:8f:2e:
         ca:82:82:85:47:8e:b2:ed:46:53:2e:f8:eb:4b:e3:5a:46:03:
         56:43:bc:77:6b:7d:53:99:31:c0:fa:f3:fc:50:dc:df:8d:cb:
         81:59:27:b8:06:91:68:73:13:65:28:17:97:56:03:88:2c:67:
         e6:b5:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:00:47 2024 by rpki-client on console-ams.rpki-client.org