Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File:                     ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier:          90rU0hMV/qVT7ksuXTwvaoWxEOOwWoXwJ2yv4udqFOg=
Subject key identifier:   CD:62:3B:DE:A5:8A:2B:BD:9F:E5:16:23:D0:B5:C1:A4:75:CC:9C:58
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer:       /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial:       0190373CB64EC663E7074981BD0FEE80F28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number:          11D0
Signing time:             Thu 20 Jun 2024 20:00:43 +0000
Manifest this update:     Thu 20 Jun 2024 20:00:43 +0000
Manifest next update:     Fri 21 Jun 2024 20:00:43 +0000
Files and hashes:         1: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: VMBneGfPtcJwDOERr33lvH9x4xHxcDUYUJ9J0Pwd9Kg=)
                          2: xgXUQ4jVJs4LGphNFUYmbvKPBj0.roa (hash: FGy9oNNOTLaijnQ6QPVdfRD8V9AVl7GCBbAW36NzZDg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:3c:b6:4e:c6:63:e7:07:49:81:bd:0f:ee:80:f2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
        Validity
            Not Before: Jun 20 20:00:43 2024 GMT
            Not After : Jun 21 20:00:43 2024 GMT
        Subject: CN=cd623bdea58a2bbd9fe51623d0b5c1a475cc9c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:5c:a4:27:88:b2:9b:1a:5d:52:68:34:56:
                    5c:12:a8:81:06:32:38:64:8d:fe:55:9a:97:af:59:
                    21:dc:a4:ea:40:ba:19:85:9b:88:ab:ad:fb:fe:c4:
                    13:df:8b:05:e5:17:6f:c2:49:70:d1:61:6e:91:3d:
                    94:e1:0b:ff:e1:fb:91:74:1c:cd:19:49:63:7b:a1:
                    a4:d4:43:1b:b4:07:69:60:e8:cb:f2:42:e0:68:7d:
                    5a:88:d3:de:b2:dc:f9:73:30:7a:e8:0f:86:20:32:
                    4b:21:39:44:f0:1a:b8:b2:7a:b4:89:4d:f1:bd:9c:
                    78:2c:56:f8:91:31:5e:b4:db:a2:85:2c:fa:3c:d2:
                    82:95:b2:a5:8b:f3:01:c2:4b:fe:25:65:ed:fb:bf:
                    17:78:2f:7c:83:30:b6:f3:54:b2:7f:2a:f1:6c:fe:
                    4e:a2:13:45:de:7f:8f:63:25:27:54:60:73:a1:7d:
                    45:2b:16:8a:52:b6:38:5e:66:31:53:5a:71:cd:9d:
                    e8:9a:05:b3:6a:05:c1:8e:a4:f4:b3:5c:5a:dc:f2:
                    a4:b0:20:d4:d0:ed:15:06:0a:09:83:29:03:b1:4c:
                    5b:4a:44:75:91:c3:df:7e:3a:8a:64:04:d1:ec:e4:
                    a9:c7:16:2f:8d:9b:ab:39:40:0a:6e:a6:49:6c:0d:
                    b2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:62:3B:DE:A5:8A:2B:BD:9F:E5:16:23:D0:B5:C1:A4:75:CC:9C:58
            X509v3 Authority Key Identifier:
                keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:43:46:e2:11:5e:60:c7:d0:13:f1:40:16:95:7a:cf:b8:
         ff:2d:4d:37:cf:15:66:07:99:70:4e:05:a9:6d:b6:cf:49:30:
         ec:50:2b:3b:71:54:fa:58:de:17:11:95:69:01:1a:70:0b:96:
         46:82:19:84:31:40:48:32:dc:8b:6b:1e:60:56:8c:d1:92:5d:
         91:47:bf:fb:99:28:97:5a:a5:48:06:69:4b:5a:71:42:c8:a8:
         44:46:82:f0:08:c1:91:09:e8:b1:ea:5e:c4:3d:25:90:d5:27:
         52:95:71:c0:44:f3:66:ec:22:bd:a3:db:37:89:f6:98:6b:02:
         e2:17:34:0f:50:39:11:04:af:95:bd:12:7b:f3:56:66:b3:24:
         1c:06:24:b1:f1:8b:5e:3b:92:91:2c:53:59:52:ac:84:e9:77:
         d0:0f:31:fe:14:2a:ff:70:88:e6:af:5d:0c:f4:1a:b5:84:23:
         73:48:3a:d5:a6:95:c4:6f:a5:9e:2c:c3:29:a1:34:d5:c8:e7:
         3c:9a:9e:ca:c0:84:b1:78:a8:a9:f4:ec:1f:97:93:d9:ab:67:
         be:cf:e0:b8:c0:90:8a:42:fb:4f:a6:14:00:17:f1:ba:a4:f3:
         31:55:51:4f:25:26:8e:88:08:87:64:05:e0:a2:6c:33:c8:f3:
         70:56:5e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA3PLZOxmPnB0mBvQ/ugPKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyM2I3MWJmZDc1MWMwY2YzZjcxNDM3ODZmZGE0NDMyZTdj
Y2VjMmMwHhcNMjQwNjIwMjAwMDQzWhcNMjQwNjIxMjAwMDQzWjAzMTEwLwYDVQQD
EyhjZDYyM2JkZWE1OGEyYmJkOWZlNTE2MjNkMGI1YzFhNDc1Y2M5YzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJJcpCeIspsaXVJoNFZcEqiBBjI4
ZI3+VZqXr1kh3KTqQLoZhZuIq637/sQT34sF5Rdvwklw0WFukT2U4Qv/4fuRdBzN
GUlje6Gk1EMbtAdpYOjL8kLgaH1aiNPestz5czB66A+GIDJLITlE8Bq4snq0iU3x
vZx4LFb4kTFetNuihSz6PNKClbKli/MBwkv+JWXt+78XeC98gzC281SyfyrxbP5O
ohNF3n+PYyUnVGBzoX1FKxaKUrY4XmYxU1pxzZ3omgWzagXBjqT0s1xa3PKksCDU
0O0VBgoJgykDsUxbSkR1kcPffjqKZATR7OSpxxYvjZurOUAKbqZJbA2yTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1iO96liiu9n+UWI9C1waR1zJxYMB8GA1UdIwQY
MBaAFKI7cb/XUcDPP3FDeG/aRDLnzOwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMt
MzU3MGQ5YmY1Njc5LzEvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMtMzU3MGQ5YmY1Njc5
LzEvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuVDRuIR
XmDH0BPxQBaVes+4/y1NN88VZgeZcE4FqW22z0kw7FArO3FU+ljeFxGVaQEacAuW
RoIZhDFASDLci2seYFaM0ZJdkUe/+5kol1qlSAZpS1pxQsioREaC8AjBkQnosepe
xD0lkNUnUpVxwETzZuwivaPbN4n2mGsC4hc0D1A5EQSvlb0Se/NWZrMkHAYksfGL
XjuSkSxTWVKshOl30A8x/hQq/3CI5q9dDPQatYQjc0g61aaVxG+lnizDKaE01cjn
PJqeysCEsXioqfTsH5eT2atnvs/guMCQikL7T6YUABfxuqTzMVVRTyUmjogIh2QF
4KJsM8jzcFZeTg==
-----END CERTIFICATE-----
Generated at Fri Jun 21 03:35:10 2024 by rpki-client on console-ams.rpki-client.org