Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File:                     O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier:          7E7j0Zba2ZL1m4wEgrOm1xMI6hUfmifv6JFWg7CSTc8=
Subject key identifier:   08:F8:E3:D0:DE:43:16:B4:1F:37:4A:88:55:62:A5:FC:FD:AB:3B:A7
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer:       /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial:       01901CA116F4764B859B1DB8894B72383928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number:          0BFF
Signing time:             Sat 15 Jun 2024 16:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:37 +0000
Files and hashes:         1: Cszu9YwOA2k29SdB4TKWnltcP8c.roa (hash: QxzW9Z6K7yz49mSQYfp5LimBgxsKWqxFHyCeIDC9XzM=)
                          2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: yDv8pu4FwRM2E5QfoQKPWhy6HwktwvGZ1AGcGtvVFdg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:16:f4:76:4b:85:9b:1d:b8:89:4b:72:38:39:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
        Validity
            Not Before: Jun 15 16:00:37 2024 GMT
            Not After : Jun 16 16:00:37 2024 GMT
        Subject: CN=08f8e3d0de4316b41f374a885562a5fcfdab3ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dc:7c:4c:cf:a5:5f:48:67:76:53:3e:aa:11:
                    3d:38:62:bf:5c:a6:db:10:6f:04:34:42:a5:8c:10:
                    20:16:5b:e7:23:50:34:d9:4a:c5:4c:89:6c:6d:9d:
                    83:5f:a1:0c:5f:a7:74:18:bf:f4:b0:31:f6:d9:8a:
                    59:5b:12:f4:a7:54:21:12:90:c5:71:0f:ac:f1:90:
                    e3:90:30:40:7b:d8:de:ab:bd:0c:c0:d5:5f:7a:87:
                    12:d4:0a:fc:31:f3:b6:3c:a0:95:03:38:80:24:75:
                    44:be:87:56:3f:d5:ba:1b:10:30:a1:1d:95:b9:34:
                    71:c1:c3:73:28:51:ad:80:83:66:76:3f:81:f8:67:
                    70:83:98:a0:40:4c:93:30:42:df:a0:79:a5:32:c9:
                    ad:60:ad:e4:1d:78:0a:c4:1c:51:d6:4a:b7:4a:6c:
                    75:34:d1:8d:f4:4c:10:d8:a7:c3:bd:e2:5f:83:b0:
                    7f:05:49:e3:cf:8e:d5:22:6f:50:76:48:b5:f0:52:
                    2d:65:86:db:28:45:bc:d2:e7:00:89:5a:40:30:e1:
                    0a:0b:bb:d1:3e:0c:a2:31:b6:11:e7:20:b3:d0:12:
                    9d:df:1a:d4:0a:5e:bd:09:20:7a:d0:1f:f2:45:00:
                    b1:0c:c7:a4:a3:09:9b:10:e6:ce:cf:99:9b:f7:76:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F8:E3:D0:DE:43:16:B4:1F:37:4A:88:55:62:A5:FC:FD:AB:3B:A7
            X509v3 Authority Key Identifier:
                keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:44:ba:8f:97:f5:2f:97:04:a1:cd:0e:9d:cd:fe:11:4b:
         77:91:8b:63:00:f4:c2:e1:b3:2e:75:2a:a9:38:90:48:e4:c9:
         d3:09:95:8f:47:60:04:80:74:57:f0:e6:7a:25:86:f2:3c:2b:
         d5:7f:4d:75:fb:ff:f7:2b:3b:41:e4:68:dc:8b:40:32:5f:62:
         5d:d0:e5:e1:b3:61:e4:a8:a1:f6:4f:1b:24:c5:aa:4a:00:09:
         4a:da:a1:65:9a:4a:91:a2:95:9b:06:33:be:f9:e1:4d:91:4c:
         87:1d:b0:fd:08:5d:bc:20:8c:13:c5:96:b0:e5:b9:f4:74:71:
         6e:05:1f:9c:44:0b:d4:69:08:c6:f5:9f:b3:73:b5:c3:49:0d:
         27:c3:ce:c5:dc:e7:89:4f:f5:a4:37:63:39:a1:05:72:55:a1:
         52:f2:02:9b:c9:ac:f9:07:24:cc:af:d5:20:f3:30:0c:76:74:
         99:70:98:c0:c8:2c:12:ab:01:02:f2:97:f3:69:39:b5:f1:c9:
         24:bf:16:f7:07:32:61:78:b0:4e:6d:78:4d:0f:02:2b:3d:65:
         b9:0a:53:77:10:9f:4b:76:60:e7:7a:01:c0:b2:32:cf:29:a8:
         68:46:30:66:1e:14:c7:f3:06:fc:78:77:55:42:59:70:ba:fa:
         65:bd:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:44:14 2024 by rpki-client on console-fra.rpki-client.org