Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File:                     oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier:          J91Pwh+HWlTvTXjMqHwSaCwlIWST0qf3jdHrrBTfGME=
Subject key identifier:   20:BC:BA:BA:7B:96:E7:B2:B9:44:5B:36:92:E9:58:0A:A3:E2:B2:1B
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer:       /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial:       01901CD8922FC45D78CBF5EB0A4C0441769B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 17:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:13 +0000
Files and hashes:         1: 1fDxXQZlqZpwPxusZ2EMRDhnnZM.roa (hash: hV0BNW/fhv2xYlEDXeAzT3oKF4B8LYgNMMmigLb6BYU=)
                          2: 3sv_lmPmA4Pag5r13bJWP1stdjc.roa (hash: mMaCzIdZwfFfpcg0ZTNeJQr/MGakUxEzsNQryEmVh00=)
                          3: OvOxgmhEjizqQPo5msP7199YtT4.roa (hash: mmyB33KOi/39AzA5W69nBylP1Exn4XeLm3FkIenLrzs=)
                          4: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: 8tE6dVYlvagbe+X7a3lV76dA3TptkHnc5W8ZPbgFrEg=)
                          5: tw3aHWVYqcIRF4cq1IQgnBPjQXs.roa (hash: W66oO6pASFlitq2jae9ijejKG4sLeC6bXx75fntlH2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:92:2f:c4:5d:78:cb:f5:eb:0a:4c:04:41:76:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
        Validity
            Not Before: Jun 15 17:01:13 2024 GMT
            Not After : Jun 16 17:01:13 2024 GMT
        Subject: CN=20bcbaba7b96e7b2b9445b3692e9580aa3e2b21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:79:51:48:cb:8d:63:c8:0c:82:6e:1c:41:
                    41:20:ea:68:66:4d:95:22:64:01:c1:6b:a9:16:96:
                    60:2f:ac:ed:54:5e:a0:15:82:44:1c:95:4c:7f:08:
                    95:a2:0d:86:21:b3:27:25:83:02:e2:47:72:e7:0e:
                    c8:00:67:14:85:9a:1d:7f:94:1c:d1:5f:49:87:76:
                    01:01:39:ee:04:aa:f6:a0:2b:6d:b2:62:08:e2:7b:
                    3a:b8:c3:60:13:5c:1f:cc:09:ab:38:8f:00:39:cf:
                    0b:a1:00:2f:62:a5:6c:6b:54:4f:23:04:34:ac:05:
                    5d:5e:9f:8f:39:76:19:1b:17:22:6c:5e:14:d1:67:
                    aa:9f:b2:86:35:5e:e2:a9:b3:2a:73:cb:4e:0c:b1:
                    43:ff:98:6d:be:eb:9f:21:75:92:58:e2:3d:9a:e8:
                    fd:59:41:88:4e:e3:81:64:2a:6a:90:f2:ae:6c:0d:
                    0f:e2:6d:37:85:64:48:31:ba:89:8a:91:b7:ae:ca:
                    ca:5e:2c:d3:8c:d4:6b:79:dc:79:94:4a:cc:fd:ba:
                    27:44:30:63:13:43:bc:7a:44:a3:cc:80:88:ef:6c:
                    82:f4:01:4a:69:e1:14:e8:34:d8:3e:cb:95:c7:88:
                    4d:a1:66:2d:02:1d:16:d9:1f:a2:59:01:51:39:5a:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BC:BA:BA:7B:96:E7:B2:B9:44:5B:36:92:E9:58:0A:A3:E2:B2:1B
            X509v3 Authority Key Identifier:
                keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1e:f0:07:fb:db:5a:31:d6:e0:4d:4c:ed:67:df:8f:08:77:
         4c:01:6c:bb:5c:e3:43:71:7b:0f:e5:20:f9:dd:b1:a9:dd:2b:
         26:13:3d:d2:a8:18:4f:15:43:10:d9:08:ac:24:5d:1a:85:d0:
         65:fa:20:48:cb:53:24:b1:6f:3b:2f:17:53:1c:78:20:5b:22:
         ef:48:94:02:60:70:f4:95:04:84:14:b8:95:8a:36:74:20:22:
         e4:9a:3e:a3:26:1f:69:71:f0:72:7c:65:82:23:c8:b3:87:d2:
         42:7c:6a:5a:93:f1:43:92:16:1c:cf:94:66:3c:15:ae:a4:42:
         20:68:50:3f:db:6e:64:40:9a:66:19:ee:e0:5c:f7:7a:0e:55:
         a7:04:78:5b:0a:0a:70:5e:54:15:e9:87:70:5d:10:c4:db:cf:
         2a:67:5c:5f:5a:d5:fe:6c:98:a5:d9:15:bf:f1:64:62:18:88:
         b6:c7:fd:51:29:db:4a:4f:28:28:e9:97:1e:6e:31:95:72:93:
         93:12:11:b3:68:3a:c6:98:8a:5b:cf:4f:c0:35:39:ed:af:a8:
         90:f8:1e:db:44:46:92:0a:77:ab:9e:86:e0:21:ca:d7:d9:fb:
         35:12:8a:fb:a1:25:f6:6d:1c:2d:47:16:db:f3:a0:20:20:bf:
         e7:22:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:49:44 2024 by rpki-client on console-fra.rpki-client.org