Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File:                     obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier:          392vUJxpC0i31WH4egpoYrVjLVipJHoXeCYgOfMrIM4=
Subject key identifier:   B3:15:60:C7:62:2F:01:7A:17:BA:1C:92:1D:93:92:12:A4:EE:8B:E9
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer:       /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial:       01901DED9DE584359491B13372687D2E680C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number:          0C5B
Signing time:             Sat 15 Jun 2024 22:03:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:50 +0000
Files and hashes:         1: OArN07AKya15kmP2F2UHiHP_LzI.roa (hash: anZLDsFgP+zaY9qdjY4MID7XEOuCIIZGTNMZ4LEOUxA=)
                          2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: DHk01YfIsmtWsC2XoLwO5cYDgHFLslTN9yCiWdA7H0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:9d:e5:84:35:94:91:b1:33:72:68:7d:2e:68:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
        Validity
            Not Before: Jun 15 22:03:50 2024 GMT
            Not After : Jun 16 22:03:50 2024 GMT
        Subject: CN=b31560c7622f017a17ba1c921d939212a4ee8be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:d8:f6:e1:6d:68:cc:2a:ac:ee:b2:24:f9:
                    27:8f:33:5b:1a:96:bf:d9:a1:b6:88:bd:0a:db:46:
                    b1:67:21:13:00:6c:d0:e9:ce:dc:4e:21:0e:67:f8:
                    98:12:11:4d:a8:56:4d:82:f0:43:fd:ca:e5:0d:8b:
                    63:f7:f9:f4:7b:67:1b:1e:27:a5:40:60:63:a6:0c:
                    dc:e3:37:56:0c:e3:d9:fe:5e:c0:b6:40:f0:1f:0f:
                    b9:61:38:43:51:e0:ef:64:7d:79:8f:49:cc:a8:ff:
                    6f:78:cb:66:3c:4a:49:fa:a6:05:42:a9:da:06:e3:
                    12:05:9a:c9:fc:d6:df:93:e6:80:6b:e2:4b:01:b7:
                    e3:e6:00:da:38:40:8a:9c:e2:76:79:39:f9:0c:c7:
                    12:b1:48:2c:d1:64:d8:96:99:49:ca:ec:99:cf:c3:
                    fc:f5:11:1c:0e:34:ff:ac:33:81:38:e0:23:68:18:
                    4b:26:ca:c5:8b:c1:4d:19:87:42:c8:82:3c:1b:29:
                    11:3c:36:fe:dd:4e:5a:0d:67:22:89:55:17:50:6c:
                    9f:bd:d1:ff:5f:a2:b6:02:83:85:12:69:4f:23:17:
                    4b:2c:40:4d:76:05:91:7a:c2:00:cc:05:5e:cb:8f:
                    d7:a1:f6:ef:d9:8a:c8:65:5a:fa:28:78:22:b3:bd:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:15:60:C7:62:2F:01:7A:17:BA:1C:92:1D:93:92:12:A4:EE:8B:E9
            X509v3 Authority Key Identifier:
                keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:6d:61:f7:c2:40:51:e7:6b:a0:a5:04:fa:e7:43:b1:47:
         ba:a7:1f:1f:34:21:ed:88:18:4f:1c:d9:93:ef:28:3f:b7:2b:
         bb:6c:cb:f5:62:96:d3:02:ef:26:14:cb:39:a0:16:30:e7:7c:
         af:54:d3:e3:64:a0:d1:8f:4e:6e:c9:eb:a7:18:22:49:f8:40:
         af:b6:37:3d:dc:af:e4:79:a0:ac:25:ae:26:ec:c6:34:c5:8e:
         22:63:78:fa:40:f7:96:41:82:61:6b:00:a0:ec:8b:6e:be:d8:
         12:49:7c:76:b1:2e:f9:fe:d4:b0:c5:7b:31:9d:19:71:d6:5b:
         85:bf:d4:be:47:b2:61:00:74:68:49:32:67:90:9b:d7:0c:6c:
         11:4c:d8:d2:44:8f:c1:6f:1b:32:bd:79:ad:ab:20:cb:33:6d:
         16:69:7a:57:7e:f4:e2:2f:97:39:50:da:1e:8c:21:f2:a3:82:
         e5:b6:78:0b:e0:e8:ba:b7:6f:12:ad:38:b9:6e:25:1b:38:e9:
         df:17:ad:12:b6:c0:1e:4c:d4:90:3c:71:98:32:f2:a4:6a:4d:
         7a:1c:b7:8d:a5:a4:2f:f9:28:6c:32:df:15:9a:bf:08:9d:89:
         34:3d:6d:10:de:04:62:9a:52:33:55:78:5e:22:1c:a7:88:c4:
         6d:b4:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:38:00 2024 by rpki-client on console-ams.rpki-client.org