Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
File:                     O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft (raw, json)
Hash identifier:          F3vtnCuZ9VEea9C5wAC18/pf/H4ZFLerrzwrSN9HI3s=
Subject key identifier:   7E:A3:21:07:DD:1E:6F:73:22:50:F8:DA:54:9E:3E:CD:76:47:B1:A3
Authority key identifier: 3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
Certificate issuer:       /CN=3b778c7e0e59832527347c2e211fc48c547108cf
Certificate serial:       018F8DB8704F161E847B491F2A95C040D7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
Manifest number:          015C
Signing time:             Sat 18 May 2024 22:00:25 +0000
Manifest this update:     Sat 18 May 2024 22:00:25 +0000
Manifest next update:     Sun 19 May 2024 22:00:25 +0000
Files and hashes:         1: ARYuw0x1cJCNHW8wyOE-igAolJY.roa (hash: Jp6mb3rKNXCksBORu0/A0IUKBQRF70nbGZehppr8LsA=)
                          2: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl (hash: dU7idqr95u0HmFJoR6X1+SxMVEqMSFFUQjd3vfElTqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:70:4f:16:1e:84:7b:49:1f:2a:95:c0:40:d7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b778c7e0e59832527347c2e211fc48c547108cf
        Validity
            Not Before: May 18 22:00:25 2024 GMT
            Not After : May 19 22:00:25 2024 GMT
        Subject: CN=7ea32107dd1e6f732250f8da549e3ecd7647b1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:54:e2:e6:19:7c:ad:df:44:ad:fe:fa:e1:
                    60:d0:cc:54:75:32:b2:01:ca:ce:9a:a1:23:a9:d7:
                    30:1e:54:7c:5e:58:8a:06:ab:dc:eb:49:c8:3d:bc:
                    31:02:e4:1c:38:77:9f:d9:64:69:26:c5:67:7a:b5:
                    0d:17:b4:c3:c5:b2:6e:b5:de:6d:70:d9:2f:aa:84:
                    11:4a:82:6b:d4:7d:8f:16:77:35:fc:af:c5:59:e9:
                    15:4d:69:09:72:0a:f4:b1:95:5b:e8:6c:24:0f:2c:
                    7c:02:01:fa:20:0c:bb:cb:eb:61:0f:54:45:ee:5e:
                    82:b0:e1:3f:a3:09:37:cf:93:57:b1:86:4e:0a:1d:
                    02:78:47:c6:5d:a6:aa:10:f0:24:9e:64:4a:52:cb:
                    30:20:02:e0:c0:f9:c2:aa:13:3c:74:fb:13:34:ba:
                    d7:3a:7f:30:04:bd:c4:3b:2f:d1:0d:98:09:fc:19:
                    1f:31:e1:16:22:f9:32:26:b6:1b:7a:5c:f4:17:f9:
                    86:ac:f6:3b:1c:9e:cc:25:d4:69:55:b6:15:a8:70:
                    fe:86:a3:77:24:a5:e9:c0:9f:e0:9b:b5:42:33:f2:
                    00:04:64:04:8f:fc:e4:c0:8f:9f:44:d2:b2:7d:7d:
                    d5:53:b4:b0:4b:0d:fc:5d:38:2f:84:eb:d4:a2:43:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:21:07:DD:1E:6F:73:22:50:F8:DA:54:9E:3E:CD:76:47:B1:A3
            X509v3 Authority Key Identifier:
                keyid:3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:45:d2:b1:de:4f:42:e6:aa:4b:4b:c7:62:1b:6c:da:05:82:
         d8:fe:20:ef:41:57:4e:a2:14:97:91:cb:83:8a:f3:75:cc:ec:
         c0:9c:7e:7c:3a:5d:23:05:11:89:2c:84:91:3f:95:d9:7f:e7:
         45:0c:35:63:43:f8:49:d0:6b:69:94:b5:8a:f7:49:ac:89:76:
         18:c3:48:3c:f8:d7:4f:09:cc:ef:31:2b:8e:ec:55:5d:38:0f:
         ec:8b:14:20:c1:b4:67:42:a6:70:34:37:51:bf:f5:7f:4a:2e:
         55:55:33:bc:c2:14:da:01:8c:a7:40:41:bf:cf:3a:54:34:51:
         15:af:e1:8f:02:b3:9a:bc:06:a3:c3:e9:a8:2c:0d:0b:c4:ee:
         b9:ba:e2:93:34:e2:92:44:9c:63:b1:49:cf:85:5f:e0:51:30:
         f7:a3:bf:ad:0b:e3:16:c0:17:e6:ca:c4:2c:75:e9:95:19:f1:
         ec:7e:a2:1d:48:1e:84:7f:b6:7a:15:19:f2:c3:f9:b1:44:1d:
         47:a9:86:e0:30:ae:af:6f:08:0d:83:53:25:29:f6:22:b9:d5:
         db:34:28:e9:5a:fb:1c:d3:4f:9a:5b:dd:4b:1e:eb:d0:fd:fd:
         14:d5:7f:7a:09:9b:19:97:86:2f:c3:63:2e:f4:75:ed:bf:3d:
         73:f3:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:45:54 2024 by rpki-client on console-ams.rpki-client.org