Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          87CIyuswVFh9EWlV0dw8JY8dp0+/aYjg2pOyYtqxlK0=
Subject key identifier:   EE:B4:57:EB:81:AE:0D:0B:29:96:9E:19:9C:24:AA:54:87:2C:9A:BB
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       01901DEBB32ED94E35ADF6C2CB9E1387E6D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          0D2B
Signing time:             Sat 15 Jun 2024 22:01:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:44 +0000
Files and hashes:         1: iaQf8vdKeavZOi3c0TzzpGZFQvM.roa (hash: +Xx1RXFK1mCEC3/pJBQOSw1KeSCUEjfLdxB/5IHzCpk=)
                          2: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: utBNfwFkWkIcVJtcS95UzjCGfxYCKWmrcdu8gq5dXAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:b3:2e:d9:4e:35:ad:f6:c2:cb:9e:13:87:e6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Jun 15 22:01:44 2024 GMT
            Not After : Jun 16 22:01:44 2024 GMT
        Subject: CN=eeb457eb81ae0d0b29969e199c24aa54872c9abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:1c:db:36:c2:eb:12:c1:23:ce:63:5b:fd:
                    4e:31:80:5f:66:25:2f:0e:8b:4a:10:72:93:14:8b:
                    e0:3e:e2:f9:a1:38:68:d8:4c:69:48:b8:96:5e:0e:
                    95:8d:d4:de:34:c3:bf:c9:c9:7b:39:a6:72:e8:93:
                    46:e1:d9:0a:17:85:a6:89:89:8b:c5:f8:dc:6c:70:
                    51:75:f3:1e:45:32:fe:00:b4:87:b8:7e:db:57:11:
                    3e:34:30:32:ae:e4:28:c5:42:c3:2b:8d:83:93:fe:
                    73:6a:d7:f6:e0:5d:20:0f:c0:d8:13:8b:94:c1:b4:
                    12:63:5f:ed:c2:26:0b:41:92:c5:f1:af:6a:ab:51:
                    ab:48:ab:b0:00:52:6b:ce:e3:fe:cd:5a:b4:73:89:
                    8a:e4:d9:e2:d1:de:bd:b3:76:54:9c:2b:08:94:c1:
                    86:c6:9d:0e:aa:db:03:0b:80:f3:0d:06:0d:ba:52:
                    e6:50:a3:98:4a:b5:1d:76:ed:eb:c3:72:7a:ca:8d:
                    a2:86:fa:23:77:9b:92:a2:94:d6:e3:68:15:84:db:
                    6d:a6:d0:f6:e7:a3:10:24:df:0c:85:4d:be:10:6e:
                    bb:43:9e:49:51:2d:54:d6:14:c9:5f:97:99:34:c8:
                    a5:70:49:1b:27:57:04:b7:80:ac:8b:12:60:77:bf:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B4:57:EB:81:AE:0D:0B:29:96:9E:19:9C:24:AA:54:87:2C:9A:BB
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:07:cd:cc:2d:52:46:9a:49:75:23:2b:e0:3b:de:5a:cf:7e:
         58:56:eb:03:38:ed:0e:62:a3:cd:51:95:22:28:f4:b7:a7:3a:
         b5:fe:ca:a4:bd:2c:d7:ca:9d:27:d4:0a:0e:07:3d:5d:0b:e8:
         27:52:d2:22:72:a4:88:ba:3b:25:11:e6:61:30:ac:a2:48:35:
         75:0a:50:76:13:26:4c:d7:57:77:8d:aa:b9:e2:fd:b6:a4:6d:
         42:82:c1:7f:e4:07:11:78:57:52:90:57:59:e7:7f:f3:23:36:
         56:bf:79:7e:a9:af:1e:0b:8e:47:e4:35:b7:7d:d3:7b:49:f6:
         a8:2e:de:00:4c:ee:3c:6e:e5:01:9a:fb:36:93:2e:93:52:87:
         8f:2a:cc:6f:f1:7c:3e:84:bc:19:95:fd:8b:6e:b9:f9:42:6e:
         b0:c2:c1:10:73:9a:9f:f7:bc:90:03:be:35:72:a2:50:ae:50:
         6d:b5:7e:8b:f7:d2:3c:5a:ee:51:52:a1:71:a6:b3:68:2d:0c:
         df:07:78:9b:f7:dd:52:ca:aa:05:47:1b:c9:25:b4:3f:1f:b2:
         db:b4:c0:7a:7a:8c:7b:4b:53:ed:22:4b:54:80:6f:65:5d:bd:
         f5:49:3e:56:f9:7e:ab:a6:88:5a:dc:24:4c:0c:54:03:f3:24:
         5f:7e:4c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:22 2024 by rpki-client on console-ams.rpki-client.org