Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
File:                     oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft (raw, json)
Hash identifier:          in6fUjyrmDA1eio7i6LVpxvNw7WqAdPALnEFwDQRGfE=
Subject key identifier:   0D:53:3A:45:FF:E8:8A:65:82:AC:95:6E:15:2D:5D:D8:70:C6:50:DB
Authority key identifier: A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
Certificate issuer:       /CN=a1208242656123c0c90b6168d09b2d8a67617bec
Certificate serial:       0190411B9C245665D382A60024715726095A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
Manifest number:          11D5
Signing time:             Sat 22 Jun 2024 18:00:46 +0000
Manifest this update:     Sat 22 Jun 2024 18:00:46 +0000
Manifest next update:     Sun 23 Jun 2024 18:00:46 +0000
Files and hashes:         1: QhB4yyO0RWLBpZw1YfcRn1UE1n0.roa (hash: KvSCLnK8xzhh++y1a/0Jltc5mXytLGkj0Y22EFZalh4=)
                          2: oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl (hash: lLVIpiEjaxNu3mcLhtlS7rER9gOpcnD6grL4PwdsFu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1b:9c:24:56:65:d3:82:a6:00:24:71:57:26:09:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1208242656123c0c90b6168d09b2d8a67617bec
        Validity
            Not Before: Jun 22 18:00:46 2024 GMT
            Not After : Jun 23 18:00:46 2024 GMT
        Subject: CN=0d533a45ffe88a6582ac956e152d5dd870c650db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:3d:6a:e9:a7:7a:2e:9b:f8:fa:17:98:13:
                    86:e9:4c:47:29:fa:96:71:69:e9:9e:0a:47:46:e8:
                    48:cd:d7:68:f4:a6:66:f8:4d:1c:ee:e6:37:dc:38:
                    35:91:c8:7c:d3:32:55:36:06:b1:44:58:9b:65:58:
                    9c:ea:28:22:7a:2f:e8:2f:cc:f2:e8:9d:8c:71:a9:
                    47:b4:6f:e1:bf:eb:ca:70:de:f1:20:c2:dd:5f:b1:
                    1a:b6:b3:80:9f:55:cc:64:32:4d:1b:25:17:2f:03:
                    d4:3b:cd:c7:3f:ea:85:55:65:6a:4d:a7:e8:82:9d:
                    c8:4b:e8:75:25:f4:3f:5d:5d:a7:64:64:37:24:e7:
                    42:59:9c:6b:78:87:ef:05:0a:37:2c:39:92:66:ad:
                    db:76:82:85:e1:09:db:30:8e:35:d4:8f:ad:14:0f:
                    43:67:41:70:d1:97:f7:f0:87:81:1d:ba:a3:0b:87:
                    33:eb:b8:08:f8:8c:ac:d7:37:11:64:fb:24:6e:cc:
                    c3:63:9e:1f:0b:82:32:d5:2f:71:d8:69:89:db:b1:
                    5e:17:15:e9:cf:14:ff:83:2d:2a:9f:e8:d7:4a:7d:
                    35:f2:38:fd:38:f4:2f:e9:d0:26:7c:75:33:f0:13:
                    5c:c7:24:e8:b9:f1:40:f1:16:41:06:81:a7:79:49:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:53:3A:45:FF:E8:8A:65:82:AC:95:6E:15:2D:5D:D8:70:C6:50:DB
            X509v3 Authority Key Identifier:
                keyid:A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:a9:dc:c4:68:a2:44:45:5f:33:d7:80:50:53:bf:7b:b5:
         6e:99:92:6b:d2:19:0c:fc:9f:eb:cb:95:6d:ec:5d:0b:b8:b7:
         d0:64:a3:89:14:e9:5e:69:80:ad:ff:24:07:b5:b9:f5:64:a8:
         64:77:4c:55:03:35:a3:a5:01:3f:1d:44:c9:7d:3e:fa:20:09:
         9d:d2:df:46:61:8f:32:66:a5:c3:86:ef:a7:61:cd:70:02:88:
         5d:e1:99:ac:35:97:0c:76:19:a2:b7:40:92:33:4f:5c:5b:ae:
         4a:e4:77:ed:e9:b0:f8:fa:9f:3f:85:b5:f5:5d:a2:11:a0:6b:
         3b:96:d3:69:fa:7e:21:53:37:34:bc:f7:22:be:23:61:a9:79:
         e4:51:df:8f:40:32:63:a8:34:31:5f:2c:26:98:6a:9b:41:e8:
         36:1b:00:75:6b:af:eb:8f:81:d1:3d:b3:da:30:a2:14:03:13:
         77:60:4d:e9:b7:a3:3b:a0:55:46:59:b9:92:90:f7:1a:ec:fa:
         11:6b:36:c6:dd:31:1f:de:3c:16:38:be:09:8c:8d:c4:be:aa:
         a0:2f:57:1e:fb:3b:0e:80:4b:4b:2f:96:df:d2:33:7f:13:3e:
         bf:42:fe:ba:17:d1:02:ac:42:bb:b4:70:11:dd:0b:be:17:96:
         93:9b:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:08:30 2024 by rpki-client on console-fra.rpki-client.org