Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File:                     OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier:          kAGDxKg4+C0LkO4F6Yf/hOFTWLp4Nja6FXJk7gM5Vs8=
Subject key identifier:   A1:36:AE:89:A9:9E:B1:30:73:F9:0A:CC:06:73:6B:43:2D:56:30:3E
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer:       /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial:       01901EC6C29C987697B9362F1B33F739EC72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 02:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:00 +0000
Files and hashes:         1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: aoyp/W0ViK2ThhNihu93uOQYjL9Rm/MbSPgEWvI7H+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c2:9c:98:76:97:b9:36:2f:1b:33:f7:39:ec:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
        Validity
            Not Before: Jun 16 02:01:00 2024 GMT
            Not After : Jun 17 02:01:00 2024 GMT
        Subject: CN=a136ae89a99eb13073f90acc06736b432d56303e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:73:49:d3:d1:1d:1b:d6:4a:2b:d5:7e:32:
                    a7:ff:a3:6d:1d:06:47:83:e7:08:33:aa:99:43:1b:
                    ad:14:28:e5:c3:a6:74:94:09:88:c5:ae:6d:f9:d2:
                    3e:89:a0:ca:f2:35:a8:2b:f2:10:cd:25:6c:b1:62:
                    db:e1:11:78:6f:da:31:df:c6:fd:40:bc:05:ca:6e:
                    6b:a7:84:d6:b9:9d:78:51:b5:2c:01:c8:3d:e8:a8:
                    ac:ef:33:1e:1f:66:5b:21:11:a4:34:0a:a9:1a:f2:
                    7c:33:60:56:b4:29:4c:0c:7b:09:73:62:e1:4b:2a:
                    e5:69:ef:77:7b:6f:89:9c:8b:3d:af:7c:a4:67:a0:
                    ef:e8:df:60:59:a3:27:ce:cd:2e:7a:3f:c2:7c:00:
                    a7:fc:d5:5a:17:80:e2:31:b2:e6:db:85:ec:1b:de:
                    5e:fc:c9:14:b0:c6:3f:dc:ae:cf:75:d4:b3:1c:bf:
                    37:cf:7d:df:a4:31:4f:7e:fd:85:a4:e7:a1:90:a0:
                    60:16:b2:0b:19:8b:ff:99:1f:b5:06:fa:fb:81:d5:
                    17:0d:33:9b:81:ce:0a:91:04:9f:7a:3f:e8:a3:14:
                    70:fe:e8:0d:14:41:7f:4d:da:6a:b3:5b:60:dc:47:
                    d3:3f:49:87:78:ba:bc:1f:20:e8:4a:2d:c7:dc:97:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:AE:89:A9:9E:B1:30:73:F9:0A:CC:06:73:6B:43:2D:56:30:3E
            X509v3 Authority Key Identifier:
                keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:26:be:79:6f:ac:b7:f3:38:c8:e7:00:99:26:1e:e4:7c:6e:
         bc:a9:5c:39:0e:6a:1f:92:5d:bd:ec:12:2a:7e:ba:ba:cf:66:
         8d:4e:f8:9a:53:ba:c8:28:06:81:c2:39:f0:72:a8:17:07:87:
         29:3a:5a:cf:40:b2:66:1d:cd:95:27:06:e9:3e:54:f8:e9:4f:
         9a:b0:33:64:2a:24:f6:5e:a3:8a:c2:cb:28:a5:1f:2d:62:6a:
         58:ad:7d:a8:40:0e:e7:3f:0e:4c:98:48:d1:23:38:8a:cc:75:
         12:f9:96:a9:27:a6:2c:7d:0f:aa:a6:51:ce:20:a4:c1:dc:61:
         f2:ee:d7:75:7b:ce:0e:ce:bc:37:50:d1:84:66:c5:15:91:e8:
         e4:69:5e:d8:fc:63:af:8f:84:0f:72:a8:ec:cf:4b:4a:58:a2:
         ee:db:bd:d9:46:46:95:d3:c2:44:1a:f1:78:85:4b:06:96:3b:
         51:a6:36:2c:b9:45:d4:47:cd:9a:09:13:00:8c:ee:f0:09:80:
         b2:be:8e:91:c0:02:64:aa:6c:49:d0:75:9a:0f:2c:a4:45:b9:
         70:9c:b6:e3:17:30:e7:c0:58:8a:50:34:45:60:c9:ca:3b:f4:
         38:82:a6:da:c9:76:c1:95:57:03:d1:51:48:f5:a1:12:a0:7a:
         69:46:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:02 2024 by rpki-client on console-ams.rpki-client.org