Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
File:                     0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft (raw, json)
Hash identifier:          uwt1b9ych1ztmpLLE805wYbuKqnXr797VHzs/VStfWE=
Subject key identifier:   40:D2:A3:28:14:AD:56:A4:65:FC:14:F3:A6:68:0F:3B:97:28:E8:4D
Authority key identifier: D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
Certificate issuer:       /CN=d0c3d358812e60b680e4e11632f139560bf525fb
Certificate serial:       01901DEBD786B133468444A3C229B1C4F504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
Manifest number:          094C
Signing time:             Sat 15 Jun 2024 22:01:53 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:53 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:53 +0000
Files and hashes:         1: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl (hash: sDpIcQ15gFUoUwPyHYxJI/2jYd9qlyl/nDQeVJW/6BY=)
                          2: VYxETRyMB_5brJe_4iKAuiQbEUI.roa (hash: dmcYzJ1f0soAolwfqw1exU9yBuWbBJ6h+v0u9bOPZQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:d7:86:b1:33:46:84:44:a3:c2:29:b1:c4:f5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c3d358812e60b680e4e11632f139560bf525fb
        Validity
            Not Before: Jun 15 22:01:53 2024 GMT
            Not After : Jun 16 22:01:53 2024 GMT
        Subject: CN=40d2a32814ad56a465fc14f3a6680f3b9728e84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:c8:a0:c1:c9:7e:7a:5f:52:0a:63:e2:1a:
                    11:ed:5d:f4:38:31:46:c7:53:64:b8:2a:12:04:39:
                    b6:96:28:34:c5:a2:0b:6f:ec:16:a1:e7:74:59:3f:
                    50:9b:54:ae:56:49:7e:2d:53:a2:00:ed:a2:78:40:
                    1a:d7:3e:de:37:62:45:bf:9c:b0:d2:50:38:72:ea:
                    25:c5:d9:d8:29:4d:b8:01:5e:73:16:9e:25:0d:6b:
                    87:66:c7:b3:0d:c7:0e:54:a1:96:6a:42:81:94:6b:
                    85:61:b7:e8:fd:1f:59:b0:2b:96:30:5d:02:bd:3c:
                    36:43:10:91:e8:52:f5:db:f4:24:44:3b:a2:94:59:
                    87:7c:ba:66:8f:05:f0:70:f2:86:79:d8:18:c5:6a:
                    38:2e:5c:ae:f8:b8:0a:04:7c:50:ce:76:ea:d2:60:
                    a3:52:92:63:db:cc:d7:ef:ce:d7:fc:32:c2:78:d3:
                    8f:ab:f6:96:7d:c1:4f:0e:f2:7d:be:83:a0:fc:91:
                    09:bf:12:a7:9c:a3:72:00:85:75:17:ed:21:f7:af:
                    f3:ea:65:ff:c3:24:c4:33:8d:ff:58:08:e8:62:50:
                    f2:37:aa:15:7f:18:84:10:ec:c3:6d:47:40:ee:aa:
                    b6:0e:dc:a9:27:a3:de:30:1d:3b:d5:cc:5e:b4:e7:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:A3:28:14:AD:56:A4:65:FC:14:F3:A6:68:0F:3B:97:28:E8:4D
            X509v3 Authority Key Identifier:
                keyid:D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:77:38:28:89:47:f7:b4:68:3d:5b:9e:a4:41:12:f1:cb:a1:
         4c:54:b1:c9:ba:d4:7d:22:e4:f7:9f:2f:50:fa:19:3f:00:6e:
         46:2f:0c:05:65:fc:4a:9b:62:ef:af:84:5c:cf:f0:09:ca:93:
         50:b6:19:18:1d:cb:3f:09:19:2f:ca:86:b4:da:a0:f2:19:9b:
         65:c4:8d:38:7b:fa:fd:c7:54:38:0c:12:15:87:0d:77:cb:ec:
         fa:89:7d:00:75:6d:03:62:e0:7d:f7:ff:bc:b6:bf:36:92:7b:
         5d:03:cb:a0:08:01:65:89:ef:d7:3f:b1:3b:99:10:37:64:27:
         a1:7a:88:d8:01:ee:17:6d:c0:b5:84:91:34:e0:00:3c:84:d5:
         ec:1c:5b:1d:01:ce:66:12:e0:98:18:49:ff:be:df:08:1f:62:
         01:d4:9b:6f:13:da:34:ca:08:dc:f3:ea:ea:0d:da:7a:01:24:
         f4:6b:46:0d:12:4a:1a:8c:21:f4:c6:39:c4:05:89:7e:3b:76:
         57:91:c7:b8:63:5d:c2:16:00:c2:9b:ae:ee:70:50:4b:4f:17:
         20:ab:bf:e7:77:40:f8:33:db:c3:27:54:d1:23:9f:db:d1:19:
         56:7e:73:14:1d:66:ee:6d:5a:d2:c2:43:47:86:fd:65:f0:28:
         b1:03:55:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:28 2024 by rpki-client on console-ams.rpki-client.org