Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
File:                     oQIHcvYouPtR80dRNrd_60smmL4.mft (raw, json)
Hash identifier:          iu/PizWT+hb2SUc2uC/MsTxURQi/GhJ8kEpGXLVMRQQ=
Subject key identifier:   AC:FF:14:00:B2:4A:62:10:F2:F2:13:0A:75:19:2A:2C:BA:8E:98:7B
Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
Certificate issuer:       /CN=a1020772f628b8fb51f3475136b77feb4b2698be
Certificate serial:       01901D4633382E7ED06DD6CFEDEC4D20ABA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
Manifest number:          0E0D
Signing time:             Sat 15 Jun 2024 19:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:58 +0000
Files and hashes:         1: hI24mTvCMuh85081Nx1C31jyVpQ.roa (hash: DbhjSA9r60lp1mBwkfuaVXtj1kHZaBFPD9BGBSzhED8=)
                          2: oQIHcvYouPtR80dRNrd_60smmL4.crl (hash: oU2BArGQGM2rVclNZke+i5PffhNBWGJ0KcfiVdx63xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:33:38:2e:7e:d0:6d:d6:cf:ed:ec:4d:20:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be
        Validity
            Not Before: Jun 15 19:00:58 2024 GMT
            Not After : Jun 16 19:00:58 2024 GMT
        Subject: CN=acff1400b24a6210f2f2130a75192a2cba8e987b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:d1:97:32:bb:4f:e1:ab:f5:cd:af:b6:b1:
                    c2:89:37:da:ed:1e:d1:63:73:73:47:02:54:eb:9c:
                    a4:d8:e7:ca:f0:b4:ee:18:bf:43:5f:0b:db:38:e1:
                    9f:08:fd:80:2e:64:f7:6b:46:f4:28:00:6e:06:fb:
                    e0:32:dc:3f:1a:62:19:27:55:a0:c6:3a:50:d4:6a:
                    94:14:25:88:98:f4:1a:61:22:07:d9:e3:83:91:87:
                    18:9a:0c:7e:2b:cf:13:05:8a:3b:07:fd:69:7c:00:
                    bc:8f:98:58:14:c7:06:e5:48:a7:8d:bf:b7:22:12:
                    8b:42:10:f7:ef:1e:a1:db:59:df:51:e1:2b:1a:13:
                    34:d1:8b:0b:9f:a4:f1:5d:d8:bd:a1:61:53:b3:1a:
                    ba:b9:68:84:85:de:f0:23:27:a1:5f:31:56:e4:81:
                    2c:f8:86:21:d9:38:d3:4b:46:56:56:7b:40:19:38:
                    3b:a1:65:ba:cb:db:62:50:b3:ef:74:f2:d0:98:3f:
                    fd:48:51:ad:f1:5c:51:f6:26:c4:44:da:b6:18:1d:
                    57:67:92:dd:85:61:7f:f8:5f:6c:97:f7:e3:01:1f:
                    7b:c4:7f:c2:cc:c0:fe:ca:e4:9f:0d:ce:af:9e:e7:
                    c9:80:15:58:27:58:f6:7b:1c:1e:d4:e8:93:1c:40:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FF:14:00:B2:4A:62:10:F2:F2:13:0A:75:19:2A:2C:BA:8E:98:7B
            X509v3 Authority Key Identifier:
                keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:03:ce:d7:24:6f:ff:ca:cd:e9:f5:f7:f3:97:4f:ab:da:22:
         45:68:77:96:97:49:a1:eb:4a:6a:6b:f8:86:10:fa:30:d4:30:
         cd:a1:0f:b2:f3:15:cc:35:91:12:2a:8e:35:95:cb:c6:25:67:
         a4:4f:8c:00:39:cd:44:96:1d:de:e6:70:c1:41:de:ea:94:ad:
         dd:a7:74:0d:06:e0:38:30:1e:e9:2d:fc:b8:f7:2b:8d:6e:1c:
         fb:65:89:9f:a5:54:3c:c7:09:57:5f:37:d0:d9:d3:1b:73:c3:
         63:68:2f:ad:83:24:17:aa:14:d2:e2:7b:67:ca:8f:4d:a4:6a:
         a4:c7:37:80:bd:ce:2a:bb:e6:c6:8f:de:50:e7:30:da:aa:4f:
         98:29:2e:cd:89:62:f5:45:ae:11:bf:23:36:b5:f7:0d:1e:d7:
         1a:ac:19:f1:1c:d0:32:2c:e0:21:85:f8:7f:ff:81:e7:f3:53:
         68:2d:d6:d1:60:52:52:d1:f9:eb:d5:bb:47:f8:49:70:db:ba:
         ae:2b:27:bb:f0:60:5e:e2:4f:4c:92:40:83:46:20:9e:ce:7c:
         dc:97:ce:28:5d:32:6a:ed:39:6c:1f:bb:ea:26:f1:49:db:a6:
         47:27:9c:f1:42:a6:49:31:9d:0c:b8:f3:12:48:f2:b1:f8:e7:
         45:90:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:03:36 2024 by rpki-client on console-fra.rpki-client.org