Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File:                     ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier:          yAh8HxHBalxsIIpyrRM2VBkUcTgDy7J21JiDFy5bbWA=
Subject key identifier:   FC:82:1B:3B:21:98:C5:61:1A:28:9C:F8:BA:CE:CA:E5:20:46:AD:81
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer:       /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial:       019045D4AEDA44633138BC06F3C91B47021E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number:          0B7D
Signing time:             Sun 23 Jun 2024 16:01:24 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:24 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:24 +0000
Files and hashes:         1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: N5giIKIEo6CAiPW6HB2ZaFhhRLXdMrsPD9UvzXtSi1g=)
                          2: uKpm5yR6HAw0eVXr_rA_x8eBsWc.roa (hash: eypRa8+0zlAG7k3t6ZXH28Z/8C2IvGWJ3oMOGDL8yuk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:ae:da:44:63:31:38:bc:06:f3:c9:1b:47:02:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
        Validity
            Not Before: Jun 23 16:01:24 2024 GMT
            Not After : Jun 24 16:01:24 2024 GMT
        Subject: CN=fc821b3b2198c5611a289cf8bacecae52046ad81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:55:d2:12:78:16:23:df:e5:f6:0c:5b:68:
                    27:14:0e:4f:eb:05:8b:f2:e2:c7:3e:51:b3:cf:78:
                    8d:30:e6:a7:78:3b:1e:1a:14:18:70:6c:a1:89:2c:
                    86:2d:a9:42:56:79:da:de:5c:16:5c:d0:52:85:e0:
                    fe:cd:b3:92:9f:b5:3e:4a:4f:f7:1d:5d:c7:b1:90:
                    57:1c:d6:c1:48:ed:1c:78:ad:52:01:7b:ac:09:10:
                    f5:ed:a2:6c:5b:98:36:d7:ed:2a:49:dd:2d:fa:5b:
                    90:0f:4a:05:f2:bd:5d:a0:e2:cf:d9:3f:c1:93:e2:
                    bd:ef:04:35:c4:21:6f:4c:2f:9a:c3:d3:c8:a7:7c:
                    63:21:a1:b6:62:89:e9:86:ed:d6:56:4d:5c:67:df:
                    18:f3:f3:4a:40:a8:ce:ff:1c:ed:6f:d6:9d:01:b6:
                    8e:28:bf:a3:8b:97:f0:1f:73:4d:9f:f5:4f:05:95:
                    fe:01:ec:ee:b0:70:36:79:d5:a9:07:30:77:7e:f1:
                    9d:b9:ee:dd:20:1c:9b:50:f6:d5:80:cd:0e:f5:61:
                    27:9c:5a:8e:04:80:8a:8f:92:0e:9a:34:04:d4:1d:
                    4e:40:71:49:17:23:c3:b0:14:6d:23:49:c8:cc:ef:
                    e4:e5:4e:82:e7:d0:c3:d5:47:70:e8:c0:77:c8:c0:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:82:1B:3B:21:98:C5:61:1A:28:9C:F8:BA:CE:CA:E5:20:46:AD:81
            X509v3 Authority Key Identifier:
                keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:07:2d:b6:00:d1:cb:d2:a3:bf:8c:0d:41:f3:4e:82:57:e1:
         e6:68:48:35:d1:cd:75:5b:32:20:cb:21:9b:6a:f8:79:c3:4a:
         1b:2e:36:6f:c1:74:e1:54:85:29:8c:12:1c:73:4e:f9:ee:fb:
         fb:f0:6e:c9:7a:c1:74:29:1b:83:81:0a:9e:30:05:b2:7c:d9:
         87:63:62:0a:23:a5:ec:42:ca:b2:10:94:25:d6:0e:fe:19:a1:
         92:60:1b:b4:bd:3b:95:01:20:0a:37:67:d9:1f:0a:e8:63:bc:
         78:dc:ff:e0:58:2c:39:42:25:fb:12:6d:e1:9c:6c:b7:7d:89:
         e8:4d:d4:4f:bc:57:53:9b:f8:7a:5a:c3:96:a5:ea:fe:c0:2b:
         e9:a8:d7:10:31:50:3e:2f:01:a9:58:a9:cc:dd:a2:ab:1a:4f:
         6d:50:f5:d4:32:60:eb:ea:4a:64:fc:15:d1:3e:e4:9d:b0:33:
         51:b2:d4:30:8a:9b:ff:7e:e2:bf:c2:94:4d:f4:22:5f:cc:fa:
         f9:18:58:15:33:3c:6b:1c:5c:4c:f8:bb:b2:31:06:06:78:f4:
         bc:6e:28:42:dc:b1:ba:4a:e4:08:a5:ca:51:a2:04:35:82:9f:
         9e:b5:b7:f3:54:ad:f0:7e:d4:3e:0e:45:24:d6:52:84:fe:e4:
         30:60:c9:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBF1K7aRGMxOLwG88kbRwIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTRmYWJmZWYyMDNhOGVlMDhjY2I0N2RkNjQ3M2ZjZTc5
OWEyOGYwHhcNMjQwNjIzMTYwMTI0WhcNMjQwNjI0MTYwMTI0WjAzMTEwLwYDVQQD
EyhmYzgyMWIzYjIxOThjNTYxMWEyODljZjhiYWNlY2FlNTIwNDZhZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkhV0hJ4FiPf5fYMW2gnFA5P6wWL
8uLHPlGzz3iNMOaneDseGhQYcGyhiSyGLalCVnna3lwWXNBSheD+zbOSn7U+Sk/3
HV3HsZBXHNbBSO0ceK1SAXusCRD17aJsW5g21+0qSd0t+luQD0oF8r1doOLP2T/B
k+K97wQ1xCFvTC+aw9PIp3xjIaG2Yonphu3WVk1cZ98Y8/NKQKjO/xztb9adAbaO
KL+ji5fwH3NNn/VPBZX+AezusHA2edWpBzB3fvGdue7dIBybUPbVgM0O9WEnnFqO
BICKj5IOmjQE1B1OQHFJFyPDsBRtI0nIzO/k5U6C59DD1Udw6MB3yMCPqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyCGzshmMVhGiic+LrOyuUgRq2BMB8GA1UdIwQY
MBaAFKIU+r/vIDqO4IzLR91kc/znmaKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYt
MjVjNWY3MTIzZTM1LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lYmE0NTktMDNkMy00Y2Q1LTg2MDYtMjVjNWY3MTIzZTM1
LzEvb2hUNnYtOGdPbzdnak10SDNXUnpfT2Vab284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQcttgDR
y9Kjv4wNQfNOglfh5mhINdHNdVsyIMshm2r4ecNKGy42b8F04VSFKYwSHHNO+e77
+/BuyXrBdCkbg4EKnjAFsnzZh2NiCiOl7ELKshCUJdYO/hmhkmAbtL07lQEgCjdn
2R8K6GO8eNz/4FgsOUIl+xJt4Zxst32J6E3UT7xXU5v4elrDlqXq/sAr6ajXEDFQ
Pi8BqVipzN2iqxpPbVD11DJg6+pKZPwV0T7knbAzUbLUMIqb/37iv8KUTfQiX8z6
+RhYFTM8axxcTPi7sjEGBnj0vG4oQtyxukrkCKXKUaIENYKfnrW381St8H7UPg5F
JNZShP7kMGDJ7w==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:29:29 2024 by rpki-client on console-fra.rpki-client.org