Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File:                     OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier:          kMoVXonAl1Ult4RHtmb3H+P+bgjL4KgmE1Xj+DUTdQY=
Subject key identifier:   11:D0:64:D0:6F:8D:51:71:D8:83:83:35:EA:73:F0:2D:53:EB:69:D6
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer:       /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial:       01901DECDE558D961B571F545C2AA04A44A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number:          02E1
Signing time:             Sat 15 Jun 2024 22:03:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:00 +0000
Files and hashes:         1: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: sLpmDWjTiIKyTmWngk5UhSpCiaT3Oj7tiPWcpliQSK0=)
                          2: RFcH-GTmJRB4gBjJmqhvR8UMXD8.roa (hash: H/jvYGwwwVGN3J3kDd3gVWlb3TqKBhFo+Fc9l03Lp0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:de:55:8d:96:1b:57:1f:54:5c:2a:a0:4a:44:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
        Validity
            Not Before: Jun 15 22:03:00 2024 GMT
            Not After : Jun 16 22:03:00 2024 GMT
        Subject: CN=11d064d06f8d5171d8838335ea73f02d53eb69d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:10:64:4b:7f:db:20:c5:4d:a7:c2:81:88:
                    87:b2:b7:78:ac:6b:b6:b1:80:cc:b4:e0:8a:83:90:
                    3e:39:01:94:7d:4f:b2:fd:35:fc:b5:e0:62:1f:68:
                    b9:c4:1a:e6:4e:b5:b6:37:92:ad:f5:7b:04:c7:38:
                    f8:c2:35:fb:9c:5a:b3:1c:51:c4:3b:b0:3d:ed:ec:
                    3d:01:27:6a:f3:64:71:c7:8f:e6:07:a1:81:78:d7:
                    c2:2a:e2:f2:fe:ec:82:8f:70:ab:05:07:ce:9e:7e:
                    c5:83:3d:d5:72:bd:15:d2:5d:7c:d7:08:3d:15:27:
                    33:e8:2d:b8:f9:d6:e6:80:98:6e:40:37:76:a1:e2:
                    f1:56:7e:c4:d4:b2:6e:ef:07:83:53:38:7b:23:29:
                    ba:b2:36:cd:58:d2:ac:f7:1a:09:9b:33:fd:2f:14:
                    7b:03:42:af:92:c1:1d:92:95:fb:3f:3b:fe:c1:f2:
                    a7:5f:9e:3e:81:3f:a5:58:48:70:5e:25:26:12:84:
                    ee:84:ee:b7:38:1f:f7:c9:1e:d3:f2:f2:0f:70:fe:
                    d1:7c:3a:21:62:c4:ed:3a:1a:78:7e:b9:a6:7d:b0:
                    e8:5a:32:12:c6:ec:ab:b5:6b:c4:91:9a:78:d6:d2:
                    71:c8:67:7a:93:0c:a7:66:32:c1:76:1a:f9:88:97:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:64:D0:6F:8D:51:71:D8:83:83:35:EA:73:F0:2D:53:EB:69:D6
            X509v3 Authority Key Identifier:
                keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:52:21:43:22:37:f5:33:19:b0:52:4c:96:93:b0:41:88:71:
         a0:32:bf:ef:bd:46:ee:6a:c0:ae:9b:cb:93:1a:bb:c5:bd:04:
         5d:3c:ae:d3:a7:08:0a:99:bc:86:bb:65:58:a3:f2:be:ba:84:
         58:c2:62:db:72:77:d1:d1:1c:ae:fe:c0:2a:96:14:0e:ed:3a:
         60:77:11:68:22:c8:fa:df:6f:e3:17:e9:7f:41:87:5a:06:76:
         ed:59:6b:bd:0f:67:b1:4c:53:5c:88:73:74:ba:59:cd:2e:e6:
         12:83:4c:f5:66:d3:fa:04:dc:df:d4:7b:ac:03:0a:37:da:c9:
         ec:1c:f2:6c:f5:98:76:af:05:b5:eb:63:e2:59:e4:62:82:4b:
         85:09:c8:12:79:12:c6:ef:de:03:8f:91:c6:2d:68:24:43:28:
         aa:20:d8:92:e8:95:ab:03:78:3c:fd:3b:c5:54:d0:5a:15:e5:
         be:32:0a:af:b0:67:5c:0d:1c:16:e8:fc:0d:0d:6b:f8:6e:8b:
         f7:2d:d8:14:2a:53:5b:b1:78:41:06:2e:c2:0f:69:a3:d9:da:
         6a:4b:78:a5:11:01:d9:7d:b1:36:18:f2:3e:12:8a:f3:9b:ab:
         21:30:41:95:56:cd:3e:87:9b:f5:15:16:e0:f3:d4:cc:ac:1b:
         48:a7:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:35 2024 by rpki-client on console-ams.rpki-client.org