Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File:                     o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier:          8oWsmgNiwpzGdfNe06tgpPdczM4KRO+dZkxETeh4RzU=
Subject key identifier:   73:BD:BA:7B:7D:EA:1D:C4:71:CF:AF:09:B8:81:13:45:11:71:94:39
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer:       /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial:       019045D419BE9E4CEAA32EA53FA866792DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number:          03D7
Signing time:             Sun 23 Jun 2024 16:00:46 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:46 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:46 +0000
Files and hashes:         1: 7yZyDYxO3u6lz795h1rlvjWijB4.roa (hash: WtzlqWx+kXQehQ3vOYP1fj+0uQZlyOFzV4pPvfhoz6U=)
                          2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: xURPRuTggTJbVOg7jnJfcZs8s07yTJNfm+FjQjWvDU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:19:be:9e:4c:ea:a3:2e:a5:3f:a8:66:79:2d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
        Validity
            Not Before: Jun 23 16:00:46 2024 GMT
            Not After : Jun 24 16:00:46 2024 GMT
        Subject: CN=73bdba7b7dea1dc471cfaf09b881134511719439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:ab:db:32:9b:17:c1:54:ce:ea:fe:4b:eb:
                    7b:8e:4d:34:bc:ff:0f:8e:f7:2a:b7:cd:23:77:87:
                    1c:7f:0c:e5:88:af:13:af:96:33:31:89:9b:69:15:
                    9a:19:85:1d:d2:a6:3a:20:08:9f:09:ad:8f:24:50:
                    b5:2a:43:8a:ae:e6:7d:20:2e:5e:4d:b2:a0:88:9d:
                    55:15:d0:af:b5:dc:28:e0:65:20:a6:c0:b1:fe:9b:
                    b6:e7:58:23:ab:5d:04:03:a4:9d:60:ba:76:e2:a3:
                    1f:8c:30:f8:bb:a9:b8:e6:2d:ca:72:c5:f8:1e:83:
                    91:7a:99:76:56:d6:c8:aa:76:47:eb:5c:35:37:7e:
                    29:49:80:55:7b:99:1a:0d:10:2d:a2:5c:9d:c1:71:
                    ed:8f:81:5e:6e:7a:69:e7:b3:12:5c:b1:9d:87:78:
                    8a:0a:60:79:f1:7a:ac:64:8b:72:be:1e:f1:3b:ae:
                    fa:98:18:da:99:d3:54:e4:18:34:38:2b:95:69:07:
                    99:c2:b4:8f:c6:ca:37:76:09:47:8a:7b:b8:4d:6d:
                    58:de:ea:14:54:44:60:b8:d3:17:0a:78:32:56:02:
                    1c:4e:b9:45:d2:c5:9c:98:4f:b7:52:93:c7:d1:f5:
                    dc:df:51:7b:d6:3a:34:7e:8a:6f:54:a3:cb:d1:3b:
                    b7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BD:BA:7B:7D:EA:1D:C4:71:CF:AF:09:B8:81:13:45:11:71:94:39
            X509v3 Authority Key Identifier:
                keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d4:3d:45:88:67:ee:64:38:f6:2e:de:0e:c5:fa:8f:76:0b:
         62:e9:68:af:98:67:e7:1b:78:a4:43:71:80:ea:a2:bf:bc:73:
         68:9f:04:dc:5b:ab:81:3d:61:13:6b:f9:b0:10:ba:31:3d:ce:
         08:84:ab:07:ae:8f:d2:07:f9:ef:67:16:91:b7:0d:6a:d2:76:
         d5:4e:05:5c:25:84:2b:7d:a6:39:bf:19:4c:12:b4:c6:f6:52:
         fe:2c:0f:da:c1:e9:01:6f:6a:78:8f:eb:93:0f:d2:e6:55:a2:
         14:ea:59:90:66:41:f8:4a:a0:42:d7:d5:36:68:92:ef:a5:53:
         e9:17:12:96:ce:a5:d3:a1:e7:9f:6b:da:79:05:86:ad:4d:ca:
         c7:4a:24:1b:06:e9:4f:7e:d0:22:ab:41:fe:55:08:fe:84:73:
         94:a8:44:17:21:d2:c5:cb:66:c2:9b:0e:f3:f7:9d:74:95:cd:
         1f:5d:07:31:9e:42:d1:97:ac:e2:d1:b0:f7:6b:8a:dd:d9:37:
         82:c5:62:15:5c:ba:fc:48:10:3d:d0:17:d7:12:9c:06:df:3b:
         fb:b7:4b:18:12:d5:58:04:10:c8:96:b5:b2:3a:a6:03:a5:35:
         b3:db:3c:98:fd:7d:83:37:22:c9:db:77:a9:b2:3d:97:77:bf:
         9a:8d:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:08:40 2024 by rpki-client on console-fra.rpki-client.org