Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
File:                     O95jhoTGRf7dYA7TxQzfMQsRbT4.mft (raw, json)
Hash identifier:          aFOOYw+cmCBhbIzKLk0jKph3tH/mYCqBbrE3Mvo4djc=
Subject key identifier:   55:DA:BE:11:1C:CF:B1:B5:E3:15:49:9E:C7:1E:2D:C7:E8:1A:5A:6D
Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
Certificate issuer:       /CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Certificate serial:       0190411BDDAF33F992C7F4A29252A30E8CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
Manifest number:          0CF4
Signing time:             Sat 22 Jun 2024 18:01:03 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:03 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:03 +0000
Files and hashes:         1: O95jhoTGRf7dYA7TxQzfMQsRbT4.crl (hash: kh+NtacwJWsziIgh87OcXKLPKFj+bO1c1lLN6ye8m5I=)
                          2: wpZiy1d1NYmS-fp8DiNPAUmOBnE.roa (hash: nhgoNF9FJfBR6Oey2dOCvegOBe4XhRyEdi9zhdXrFY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:dd:af:33:f9:92:c7:f4:a2:92:52:a3:0e:8c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e
        Validity
            Not Before: Jun 22 18:01:03 2024 GMT
            Not After : Jun 23 18:01:03 2024 GMT
        Subject: CN=55dabe111ccfb1b5e315499ec71e2dc7e81a5a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:89:95:94:88:a2:8f:94:d0:bf:24:53:79:
                    0a:7b:04:41:51:1b:bb:73:4f:13:c0:e5:28:6e:40:
                    24:ae:49:c3:11:94:6b:30:92:bf:c3:aa:b6:2c:f5:
                    1f:a2:9f:83:55:0f:02:b7:da:4b:1a:2d:b4:a5:11:
                    43:d8:a4:4b:a9:f7:ea:62:4a:6a:bf:2b:7d:f1:d3:
                    45:06:8f:4d:43:73:21:b7:9b:79:87:df:0c:6e:8a:
                    cf:16:75:d5:68:32:71:83:cc:e3:1b:1d:de:4c:77:
                    02:d8:69:17:09:aa:29:54:96:67:69:80:9a:8f:38:
                    dd:e3:b3:3e:33:f1:35:c7:a9:8a:02:5d:d1:14:f0:
                    7f:03:98:3f:cc:a0:dc:b1:5d:01:5e:a7:a0:75:ad:
                    d8:a1:f9:99:87:82:88:c5:52:7d:6d:35:a9:5e:1d:
                    f1:08:a5:3f:74:f9:00:63:ff:fe:93:e9:84:6c:08:
                    0e:e6:ef:a4:5d:60:1a:c4:69:bf:92:31:52:5c:33:
                    bc:3f:d4:30:05:ae:88:31:8d:d5:8b:c8:98:60:09:
                    63:d6:89:52:ed:b8:16:b7:67:70:5b:69:59:2a:eb:
                    38:5e:cf:9c:95:92:3b:e2:d2:30:c7:aa:47:0d:1d:
                    16:bc:7d:38:42:dc:da:aa:d3:a0:a8:f6:df:69:7e:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DA:BE:11:1C:CF:B1:B5:E3:15:49:9E:C7:1E:2D:C7:E8:1A:5A:6D
            X509v3 Authority Key Identifier:
                keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e7:4a:26:c7:b9:83:67:15:e6:32:5c:5a:25:14:50:2c:6c:
         81:dd:c1:6d:20:37:25:e6:96:ba:41:68:23:39:c1:ee:fc:33:
         69:f8:10:c5:70:04:ff:f8:43:f5:48:10:ac:38:07:88:47:86:
         77:95:1b:66:53:e8:4e:5e:c6:a8:bf:22:27:d9:75:9e:c6:fd:
         71:ca:dc:85:6b:2c:67:b5:2e:41:11:8c:f4:7a:14:dd:06:ec:
         40:ff:7d:4d:f9:98:ce:da:90:44:c4:7a:c6:d5:ca:98:c1:58:
         eb:47:c7:5f:09:ec:67:1e:73:a5:a9:fc:a5:84:55:25:65:0a:
         24:19:9a:80:a7:4e:a3:85:97:1c:61:34:d6:1d:a9:34:cf:fb:
         0f:22:db:7c:2d:d7:7d:ad:ec:d2:66:fd:e5:35:07:da:d1:c6:
         4d:c5:fc:f0:a8:f9:31:a7:0d:a3:88:11:a8:7e:38:80:b0:88:
         a6:80:d4:46:ac:bf:5b:8c:51:b3:e0:04:1e:91:a1:a4:d5:28:
         7f:bd:2e:d4:41:0b:bc:17:fc:d9:f6:29:13:b7:b1:bf:24:db:
         f2:6c:fb:a2:6b:3b:01:38:52:bd:80:47:3e:0a:dc:f7:5e:c4:
         13:f9:e9:c5:a9:ee:37:ef:f8:e5:1b:22:50:0b:60:57:62:ac:
         04:97:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:16:32 2024 by rpki-client on console-ams.rpki-client.org