Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File:                     ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier:          jryME/bAjWQtvBClkheAMawmmB4zOm6zLtTrvjj2exI=
Subject key identifier:   19:64:3C:C8:70:41:2A:22:40:E5:5D:BF:41:74:BB:9B:DC:7E:D1:DB
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer:       /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial:       018F629845417E0C0DD841CBAD360F9FE49F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number:          1165
Signing time:             Fri 10 May 2024 13:01:37 +0000
Manifest this update:     Fri 10 May 2024 13:01:37 +0000
Manifest next update:     Sat 11 May 2024 13:01:37 +0000
Files and hashes:         1: 1-mvJ93h5X0u-SK52gxs05RbODI0.roa (hash: 0MmqdgawGKXKVbzK5E2MOBi9rHaxz7B3xyzp6yR6jp0=)
                          2: BOXUEE6GTcbtxm8g6MDpiP7GAfY.roa (hash: R2mjUdQdLbrcfseEoXTMf3ecw4dFXAaLu5+lewDS50A=)
                          3: bzdvwM3zvPTlrp9p85MffVoJbdk.roa (hash: j3uF8izn7xo/mvZCdovUnP8cFSSE/YygDIJYvdB0yyw=)
                          4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: jVB58nxL+s88cx3tb/joKUSHN0Fgl4E8yL1633K1m94=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:62:98:45:41:7e:0c:0d:d8:41:cb:ad:36:0f:9f:e4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
        Validity
            Not Before: May 10 13:01:37 2024 GMT
            Not After : May 11 13:01:37 2024 GMT
        Subject: CN=19643cc870412a2240e55dbf4174bb9bdc7ed1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:2a:18:f7:32:7d:81:cb:cf:1b:81:f0:b9:
                    b0:44:bc:66:77:fc:c1:b1:44:45:44:74:4c:29:bc:
                    b3:da:d6:f1:24:d1:4c:3e:c7:00:2e:3c:9e:e3:27:
                    05:32:1c:59:6d:88:24:8e:7e:31:da:58:a3:fe:b9:
                    a8:e6:c1:7b:50:2f:4a:f7:cb:29:43:b8:c5:ab:b3:
                    c7:15:32:0b:b9:7d:02:e8:89:1c:7c:39:cb:2c:54:
                    a6:84:73:4d:80:03:5c:22:e3:32:f8:99:90:d6:a7:
                    3f:b9:af:b2:39:ad:28:d0:07:45:f3:78:e2:d8:a1:
                    64:4f:f2:c6:3e:6f:52:9a:66:d7:78:3c:9c:b5:18:
                    28:7f:79:77:97:f2:10:85:84:04:ef:3a:f7:db:35:
                    69:d0:8b:f8:65:e7:d3:66:08:3d:30:54:c7:98:21:
                    66:d3:4f:12:a5:e8:98:7d:7a:02:52:2a:0c:f5:85:
                    40:07:d8:d5:02:3d:4c:16:6b:46:60:c0:d8:92:a4:
                    47:3d:5e:f9:db:76:94:ca:e2:3c:32:20:b5:b2:17:
                    8c:59:83:89:6b:78:d6:9e:5b:15:20:d3:1a:de:c0:
                    d5:23:69:53:55:ce:92:27:00:03:ad:1b:fd:71:45:
                    d4:fe:3d:dc:d8:2e:9e:4c:62:67:79:4f:2e:e9:4e:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:3C:C8:70:41:2A:22:40:E5:5D:BF:41:74:BB:9B:DC:7E:D1:DB
            X509v3 Authority Key Identifier:
                keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:e8:bc:a7:4d:d0:ba:69:34:2e:b7:b4:cb:cc:e6:63:76:
         67:38:bd:05:a0:2d:8f:c4:db:1f:6d:38:59:20:17:3b:45:ac:
         84:c2:17:21:5f:b5:a8:a4:a8:78:c3:bc:ba:dc:5a:b7:e5:a4:
         c0:6d:ff:a6:43:fd:73:6a:ca:7a:f0:fd:b2:7a:43:b0:19:93:
         de:4b:45:9c:f7:25:b8:be:a3:22:f0:63:d1:4d:25:ee:be:e5:
         44:63:9d:76:80:5b:7c:de:a8:63:a9:f2:54:1e:80:33:3d:42:
         34:f2:27:d5:f3:50:57:4d:97:aa:95:95:52:e3:8f:75:03:14:
         51:4d:11:ab:f8:11:33:d5:26:cf:5c:3a:61:f9:6d:8c:be:1a:
         98:d5:2c:bc:19:94:15:63:b3:2e:d5:60:b4:4f:4e:9f:ec:09:
         ed:cc:d8:42:42:04:47:37:d8:d6:b9:17:68:f7:a9:b8:6c:58:
         93:22:6e:e6:98:db:8c:47:d7:13:41:2d:0b:cf:37:85:2a:35:
         a2:ab:90:1e:a7:3a:f9:a0:64:01:ae:e6:c9:41:0b:4a:05:ad:
         74:bc:0f:86:7e:d9:65:d5:96:3a:66:0a:7f:49:55:29:a9:69:
         2a:cf:8a:af:1e:63:bf:f5:f1:49:73:11:7f:be:66:6d:33:2d:
         a8:f4:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:46:57 2024 by rpki-client on console-fra.rpki-client.org