Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File:                     OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier:          yvMc3jgRLWoSZ76gqgp1q15HsV6IZgsOOoStNaql+nM=
Subject key identifier:   4B:36:F7:41:A9:5C:44:EE:90:E4:81:B7:77:1C:20:28:59:83:68:71
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer:       /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial:       01901D0F34DC4D34183000BAA742073EF90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number:          02A9
Signing time:             Sat 15 Jun 2024 18:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:54 +0000
Files and hashes:         1: KCg4tnzm_WVLm3wpZhM6Hk2NHIg.roa (hash: rGlSPDdD7STCE2XA0sTBp4FksKhIpQvRJt43/JMmoMc=)
                          2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: OlVPQeYZfIle+tmwHAlPI3tU8LeMnp/w4fxIie0l0DI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:34:dc:4d:34:18:30:00:ba:a7:42:07:3e:f9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
        Validity
            Not Before: Jun 15 18:00:54 2024 GMT
            Not After : Jun 16 18:00:54 2024 GMT
        Subject: CN=4b36f741a95c44ee90e481b7771c202859836871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:85:05:fc:4e:3d:6b:e5:5e:c9:57:06:82:
                    d2:31:e3:da:c1:4a:03:67:7c:7a:29:b5:af:55:5d:
                    44:dd:ed:9b:94:a5:c3:87:ab:21:ab:22:79:5b:72:
                    14:e0:8f:a3:e3:aa:f0:35:da:82:82:0a:0a:35:21:
                    13:f8:96:6e:1a:f5:d5:ad:d1:a2:a8:99:87:b7:18:
                    22:2a:e3:5b:7b:64:38:4d:75:f2:72:60:af:eb:3b:
                    75:9f:4c:99:46:4c:99:83:a8:de:bb:22:a8:0d:99:
                    df:c9:87:fe:ef:af:32:7d:ab:a9:5a:e6:f0:1c:92:
                    75:b6:4b:c5:de:8b:0b:8b:46:58:d8:e4:a5:4a:cd:
                    21:c4:19:5d:dd:39:2d:eb:e7:6d:2f:b2:92:2a:d2:
                    90:8f:b7:5b:05:a3:66:ca:0a:19:0e:94:f9:73:ee:
                    ad:60:90:9d:05:bc:04:17:87:f3:24:46:63:34:9f:
                    ce:fb:c0:4f:51:4e:67:d8:2f:e9:72:17:f0:4d:c5:
                    b1:7b:48:bb:be:da:1c:1b:02:51:6a:94:f7:67:4e:
                    88:9a:ec:24:7c:34:7f:aa:b5:a1:47:0a:29:ee:18:
                    37:6e:e9:92:7e:0f:db:7e:d9:75:30:62:90:59:be:
                    55:f7:14:e3:57:58:be:a0:13:66:21:79:8e:2f:48:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:36:F7:41:A9:5C:44:EE:90:E4:81:B7:77:1C:20:28:59:83:68:71
            X509v3 Authority Key Identifier:
                keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1b:af:3b:2c:64:cd:0b:99:f6:7a:05:85:60:64:e8:5c:9e:
         e9:d8:e5:b0:52:47:c2:e5:85:55:97:e8:18:72:94:71:b5:5e:
         0f:fb:8b:93:e7:fb:cc:27:4f:e1:9c:f9:18:14:0f:e3:fc:d9:
         05:f5:6d:21:77:8f:1b:7d:54:6f:e3:77:25:4b:d6:d9:c6:ad:
         46:49:d0:fa:50:0d:2f:53:00:24:63:56:d1:2a:2d:5f:45:a4:
         31:08:59:c0:51:90:47:13:54:df:e7:d5:c4:90:a4:2a:aa:87:
         92:6c:d7:95:cd:4b:51:af:41:96:00:47:b1:24:1b:6e:3a:79:
         12:12:4e:15:7b:d8:15:dc:ea:6b:48:67:e7:8c:c3:ef:a3:db:
         4d:d0:d0:f9:50:1b:ce:05:69:f3:63:24:96:7a:69:3c:81:41:
         48:25:b3:78:e0:42:86:50:12:8f:27:4f:dd:24:ac:63:75:1e:
         10:e7:55:48:1f:06:50:8f:d9:23:25:6a:c2:fc:2a:39:45:af:
         0f:e1:5f:8d:6c:69:29:3f:5d:04:c9:6a:3d:bd:74:f7:2b:c5:
         1b:5e:86:5b:11:a9:27:f5:a7:4b:78:aa:43:9d:e0:db:cf:54:
         b2:b2:aa:fc:7b:6a:db:c8:55:a3:5c:de:3c:48:24:68:bd:c6:
         06:23:5f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:52:19 2024 by rpki-client on console-fra.rpki-client.org