Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File:                     ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier:          Nq0rgaEnwAnTUtOsXboczJv8wz5sZ58NvbPrUCyLzaQ=
Subject key identifier:   C7:01:62:FD:D5:68:94:A5:CB:0D:E9:23:8D:83:5B:08:73:AE:71:50
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer:       /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial:       01901F34FE595837AE83D22592AB57612DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number:          0B69
Signing time:             Sun 16 Jun 2024 04:01:24 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:24 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:24 +0000
Files and hashes:         1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: Rlr0PxXhSRVGL8mbzy3U2eH12/FvXQUpe4/XgOQZfTs=)
                          2: uKpm5yR6HAw0eVXr_rA_x8eBsWc.roa (hash: eypRa8+0zlAG7k3t6ZXH28Z/8C2IvGWJ3oMOGDL8yuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:fe:59:58:37:ae:83:d2:25:92:ab:57:61:2d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
        Validity
            Not Before: Jun 16 04:01:24 2024 GMT
            Not After : Jun 17 04:01:24 2024 GMT
        Subject: CN=c70162fdd56894a5cb0de9238d835b0873ae7150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:3c:c7:04:a8:4f:cc:3c:b3:62:a3:8b:eb:
                    18:59:ed:b4:ae:29:a3:eb:f8:50:50:0c:35:0b:62:
                    fe:72:f3:33:92:22:f6:cb:4e:30:6a:f4:df:e4:8a:
                    e1:60:9c:2b:df:56:f8:83:60:03:12:27:86:e8:89:
                    57:ca:01:34:c9:5d:f2:05:a9:ae:33:c2:ab:1e:41:
                    07:ea:8d:fe:a7:12:1c:f1:d8:e9:86:cc:5c:32:ab:
                    ad:f7:9e:59:30:47:10:b9:a0:d8:90:cd:e8:47:b5:
                    2d:9e:7c:6f:79:1e:63:e9:c3:39:c9:e8:dc:fc:91:
                    05:64:6b:75:ac:87:d2:58:ee:12:12:d2:6d:f9:9b:
                    4c:a1:7b:04:1f:fe:d3:f6:cd:79:e8:b1:ed:b8:11:
                    ea:af:e6:e8:58:5d:12:7c:46:01:f9:41:e4:e8:f2:
                    c5:34:ec:ab:5b:a0:20:f1:6a:dc:a7:fc:81:53:ed:
                    27:aa:fe:e9:e8:8c:8c:6f:12:d1:d6:a1:18:4a:8f:
                    3b:dc:2d:fb:03:5d:2c:46:09:06:14:b0:b8:c9:a1:
                    ca:ff:0c:9f:f3:08:75:b7:50:ab:f4:29:24:8d:61:
                    90:64:ed:dc:f1:df:c3:31:ca:76:c8:a1:6a:79:a8:
                    82:e0:ec:a5:11:0d:01:7d:e9:62:29:08:fd:58:ae:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:01:62:FD:D5:68:94:A5:CB:0D:E9:23:8D:83:5B:08:73:AE:71:50
            X509v3 Authority Key Identifier:
                keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:15:be:fd:9c:f9:cb:0c:71:69:a2:55:6c:b8:8f:c4:6c:
         d8:62:81:76:da:0e:45:d6:09:88:a2:71:f0:60:43:b7:e2:ec:
         43:ae:0f:80:10:4a:64:4d:2a:b0:b3:98:19:7a:23:07:98:b0:
         8d:1b:b4:3b:b1:6c:8a:81:b5:d5:0e:92:35:4d:d4:04:fc:75:
         1b:1a:28:19:2d:a6:54:c9:91:dc:72:ff:db:3c:93:be:08:4d:
         50:14:a3:20:a1:b4:5d:91:ea:74:b3:d9:8f:92:a7:93:1d:81:
         2a:9a:e2:cd:30:3f:e2:2f:62:0d:94:80:b5:4e:97:01:fb:79:
         98:7e:c4:6d:a0:f0:71:b2:67:ac:d6:82:cf:7e:96:df:3d:e8:
         ed:94:f4:27:92:ef:fe:df:49:67:ad:c9:c0:d7:d2:82:4f:aa:
         6d:f3:14:a0:b1:3d:e6:e9:b5:c2:a8:2c:4e:5e:8b:ca:08:3c:
         9c:62:9d:1d:8d:89:a1:a4:9a:ef:dc:71:bf:f7:f5:1a:51:75:
         4d:b8:4e:59:ea:2e:c6:d6:1d:4e:41:69:cf:f1:fc:10:6f:3e:
         d6:56:30:6c:48:a2:30:ce:49:e4:ba:94:cf:98:a2:1f:a5:73:
         56:c5:4b:ec:dd:7e:42:83:ee:13:46:d9:04:ea:46:12:d3:2b:
         8a:3b:d6:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNP5ZWDeug9IlkqtXYS3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTRmYWJmZWYyMDNhOGVlMDhjY2I0N2RkNjQ3M2ZjZTc5
OWEyOGYwHhcNMjQwNjE2MDQwMTI0WhcNMjQwNjE3MDQwMTI0WjAzMTEwLwYDVQQD
EyhjNzAxNjJmZGQ1Njg5NGE1Y2IwZGU5MjM4ZDgzNWIwODczYWU3MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogE8xwSoT8w8s2Kji+sYWe20rimj
6/hQUAw1C2L+cvMzkiL2y04wavTf5IrhYJwr31b4g2ADEieG6IlXygE0yV3yBamu
M8KrHkEH6o3+pxIc8djphsxcMqut955ZMEcQuaDYkM3oR7UtnnxveR5j6cM5yejc
/JEFZGt1rIfSWO4SEtJt+ZtMoXsEH/7T9s156LHtuBHqr+boWF0SfEYB+UHk6PLF
NOyrW6Ag8Wrcp/yBU+0nqv7p6IyMbxLR1qEYSo873C37A10sRgkGFLC4yaHK/wyf
8wh1t1Cr9CkkjWGQZO3c8d/DMcp2yKFqeaiC4OylEQ0BfeliKQj9WK6mRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcBYv3VaJSlyw3pI42DWwhzrnFQMB8GA1UdIwQY
MBaAFKIU+r/vIDqO4IzLR91kc/znmaKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYt
MjVjNWY3MTIzZTM1LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYtMjVjNWY3MTIzZTM1
LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsUVvv2c
+csMcWmiVWy4j8Rs2GKBdtoORdYJiKJx8GBDt+LsQ64PgBBKZE0qsLOYGXojB5iw
jRu0O7FsioG11Q6SNU3UBPx1GxooGS2mVMmR3HL/2zyTvghNUBSjIKG0XZHqdLPZ
j5Knkx2BKprizTA/4i9iDZSAtU6XAft5mH7EbaDwcbJnrNaCz36W3z3o7ZT0J5Lv
/t9JZ63JwNfSgk+qbfMUoLE95um1wqgsTl6Lygg8nGKdHY2JoaSa79xxv/f1GlF1
TbhOWeouxtYdTkFpz/H8EG8+1lYwbEiiMM5J5LqUz5iiH6VzVsVL7N1+QoPuE0bZ
BOpGEtMrijvWOw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:11 2024 by rpki-client on console-fra.rpki-client.org