Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File:                     OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier:          CS7W5twcFkWZ1Hlmmj1Ta4HSGdhWCdg77EFL5420WSI=
Subject key identifier:   45:E6:FB:AC:EF:9B:5A:6E:85:5B:1F:29:CD:02:98:4B:2C:C6:D5:43
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer:       /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial:       01901E21A7C531B1EAD8A46BDE5B85F11C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number:          0A2F
Signing time:             Sat 15 Jun 2024 23:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:40 +0000
Files and hashes:         1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: 0b04a6TLTnMuPJnamZzHsx88FHkkkhv6tHzgqCkkJpI=)
                          2: nvpNsvltSqi6Zm8eXhD9dSJHmwA.roa (hash: gs+PLESzai2U2W6ZDE49VnPaW5csNqg1h21RMdl78Fk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:a7:c5:31:b1:ea:d8:a4:6b:de:5b:85:f1:1c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
        Validity
            Not Before: Jun 15 23:00:40 2024 GMT
            Not After : Jun 16 23:00:40 2024 GMT
        Subject: CN=45e6fbacef9b5a6e855b1f29cd02984b2cc6d543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:ee:21:3c:c0:ca:a5:3a:3a:46:43:5a:44:
                    d5:6e:a7:fd:ef:6f:98:2e:0c:8c:27:1f:9e:15:09:
                    1d:3d:a3:60:96:0b:58:fc:45:85:54:71:04:c3:a8:
                    39:bf:89:6c:5f:94:93:36:f6:7c:16:cc:a6:13:b9:
                    96:22:8e:5e:f3:2f:c0:5d:61:05:71:ec:e0:21:36:
                    16:40:b6:54:88:6c:7f:1e:87:38:6f:30:85:9e:8a:
                    26:e9:08:13:58:84:06:59:80:94:c0:30:53:ef:68:
                    6c:7f:a4:9a:4e:d5:82:7a:9b:13:11:f2:7b:d9:b8:
                    5f:18:5d:59:cf:e6:25:0a:a8:6f:35:24:b2:be:9b:
                    3d:3f:35:41:fa:23:89:12:6e:04:aa:eb:3c:10:b8:
                    b2:83:b2:2d:e5:a1:49:a5:09:fd:9a:4e:76:fe:5b:
                    21:bc:d3:27:fa:d1:f4:d8:3c:4b:d2:91:58:f3:17:
                    e9:cb:88:cb:48:aa:ab:8c:91:77:e6:da:1a:ce:25:
                    2e:76:af:fa:41:82:c8:64:7f:f0:c1:24:08:92:cc:
                    86:48:db:2f:fb:4b:8b:7d:99:46:22:ff:8b:95:c2:
                    f2:8e:9c:44:04:4e:2e:1a:46:16:df:3e:43:ec:77:
                    c6:51:1d:96:9f:5f:83:5e:00:d3:73:66:a8:1e:b7:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E6:FB:AC:EF:9B:5A:6E:85:5B:1F:29:CD:02:98:4B:2C:C6:D5:43
            X509v3 Authority Key Identifier:
                keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:6e:10:88:57:9b:c4:e7:77:b3:b6:07:a4:0a:2c:90:15:
         58:80:45:b5:e5:73:c1:0f:5c:02:ab:4f:1f:f7:86:6a:2f:6d:
         d8:e7:1c:db:ac:1a:58:ae:55:f6:0c:47:df:97:bc:9d:25:a0:
         fe:bb:03:c5:9a:1c:1a:a5:73:17:f5:0c:08:8f:2e:c7:e3:7f:
         be:ab:e4:76:38:ff:b9:fc:65:20:18:3c:ec:c0:bc:c7:b7:d4:
         36:a6:3e:31:aa:8f:88:6c:b8:4e:53:b7:a8:21:5c:c2:b6:9f:
         15:19:0a:c3:e7:1f:22:30:92:45:4c:fc:89:b3:c5:70:e3:e3:
         2d:a6:a5:ac:a9:1a:f6:f3:9f:c6:d0:c4:46:3a:88:24:b2:e5:
         34:08:a9:48:69:2a:66:38:90:67:49:ec:c5:2d:30:b5:ac:dc:
         ef:b3:d1:47:52:21:f0:12:19:28:80:49:74:7f:72:be:09:14:
         22:aa:98:d6:d5:60:4c:68:94:ec:3a:48:28:c4:90:88:72:ec:
         3b:21:31:b4:bd:ff:da:bc:3a:23:7a:bb:5c:f6:fc:54:29:df:
         5b:f5:cb:dc:ea:8e:71:85:5d:0e:d9:94:b0:0c:c2:52:e8:e9:
         3d:21:cd:8d:66:91:d5:8d:69:08:14:ae:32:ba:ba:81:25:ee:
         a2:df:99:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeIafFMbHq2KRr3luF8RxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1
ZDBhNTEwHhcNMjQwNjE1MjMwMDQwWhcNMjQwNjE2MjMwMDQwWjAzMTEwLwYDVQQD
Eyg0NWU2ZmJhY2VmOWI1YTZlODU1YjFmMjljZDAyOTg0YjJjYzZkNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNDuITzAyqU6OkZDWkTVbqf972+Y
LgyMJx+eFQkdPaNglgtY/EWFVHEEw6g5v4lsX5STNvZ8FsymE7mWIo5e8y/AXWEF
cezgITYWQLZUiGx/Hoc4bzCFnoom6QgTWIQGWYCUwDBT72hsf6SaTtWCepsTEfJ7
2bhfGF1Zz+YlCqhvNSSyvps9PzVB+iOJEm4Equs8ELiyg7It5aFJpQn9mk52/lsh
vNMn+tH02DxL0pFY8xfpy4jLSKqrjJF35toaziUudq/6QYLIZH/wwSQIksyGSNsv
+0uLfZlGIv+LlcLyjpxEBE4uGkYW3z5D7HfGUR2Wn1+DXgDTc2aoHreQMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXm+6zvm1puhVsfKc0CmEssxtVDMB8GA1UdIwQY
MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt
Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1
LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlNuEIhX
m8Tnd7O2B6QKLJAVWIBFteVzwQ9cAqtPH/eGai9t2Occ26waWK5V9gxH35e8nSWg
/rsDxZocGqVzF/UMCI8ux+N/vqvkdjj/ufxlIBg87MC8x7fUNqY+MaqPiGy4TlO3
qCFcwrafFRkKw+cfIjCSRUz8ibPFcOPjLaalrKka9vOfxtDERjqIJLLlNAipSGkq
ZjiQZ0nsxS0wtazc77PRR1Ih8BIZKIBJdH9yvgkUIqqY1tVgTGiU7DpIKMSQiHLs
OyExtL3/2rw6I3q7XPb8VCnfW/XL3OqOcYVdDtmUsAzCUujpPSHNjWaR1Y1pCBSu
Mrq6gSXuot+ZDw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:37:29 2024 by rpki-client on console-fra.rpki-client.org