Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File:                     oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier:          yvv4zrIFl+5+p6auqQlQ6Hh9dkVS02IEGKyB88oTuas=
Subject key identifier:   0E:B7:0C:80:F2:F3:C7:4B:C6:C6:79:A3:58:F7:36:5B:65:36:6E:0E
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer:       /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial:       019045662743596293EB671F358150536A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 14:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 14:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 14:00:40 +0000
Files and hashes:         1: 1rDJj6F-K-RX1kTkQ6a0E_zwiRo.roa (hash: 7lKsnQQvw+MIMVSXztdEghlL0g44hAPTYlZQRg8r0w8=)
                          2: gwN_qmX_SNDyl_quw7xVA8oqgWk.roa (hash: JV/BbFL+N6YrVp9W1YDf4a1LpZWPefMxgjn2pzcrrS4=)
                          3: oCMThH5lWuSWPw9EwURzDp5SGoc.roa (hash: dN3Ae2PCCrjKGgySk54rtbe2SynvdLhKBKCaGyQ+XHQ=)
                          4: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: kk9W82ZnuFB4hxRtsjl2M/jEjuYiYRjXTQh+20iYRMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:27:43:59:62:93:eb:67:1f:35:81:50:53:6a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a10c73530bb684fd569dfc432704675704183429
        Validity
            Not Before: Jun 23 14:00:40 2024 GMT
            Not After : Jun 24 14:00:40 2024 GMT
        Subject: CN=0eb70c80f2f3c74bc6c679a358f7365b65366e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2f:a6:06:bc:a0:e2:da:a2:4f:be:a3:ba:3a:
                    ce:6c:ed:1e:0d:c7:a9:17:bb:87:17:f9:aa:bf:60:
                    8a:b9:69:9c:35:0c:25:4a:1a:92:ac:54:20:5b:28:
                    00:f9:cc:a1:58:5f:e1:c4:fb:89:15:78:4b:64:04:
                    68:44:af:2b:e2:de:65:5f:f1:59:16:cb:4e:f6:12:
                    34:8e:02:61:ba:e1:52:b4:be:d5:95:ad:f8:1e:3d:
                    0b:00:d6:1f:10:32:b1:c5:38:27:f0:99:d0:84:af:
                    22:ec:e3:e2:79:4f:9a:67:cc:eb:9c:57:24:24:fd:
                    01:9e:53:b3:fa:8f:24:77:27:a6:cb:bd:17:e0:29:
                    e7:2f:fe:d9:27:15:41:8b:6a:b2:90:a8:5e:09:b3:
                    58:ff:f2:f9:dd:c1:87:5d:f7:84:06:62:83:98:18:
                    d1:25:f9:11:4c:c9:d3:50:c3:7a:20:dd:73:ce:54:
                    55:13:da:2d:57:0e:c8:69:5d:24:50:1f:b6:01:ee:
                    2a:17:f6:6e:8f:0b:ec:af:4f:d5:64:e4:4e:65:97:
                    cb:c1:f8:13:92:5b:b0:71:98:fd:0d:94:76:a9:cc:
                    7a:11:44:d9:cc:b4:22:cc:24:d8:ec:8b:ad:bb:15:
                    3f:cc:35:a5:b9:02:15:f6:a8:43:34:14:4f:a2:81:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:0C:80:F2:F3:C7:4B:C6:C6:79:A3:58:F7:36:5B:65:36:6E:0E
            X509v3 Authority Key Identifier:
                keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:83:18:78:e2:6d:5d:79:be:7e:16:05:df:23:de:e2:70:01:
         d1:87:cf:68:4a:3e:66:1e:4d:ef:63:1c:1e:59:63:94:47:72:
         65:33:46:9f:67:98:a3:32:22:82:b5:66:cd:3c:4d:e6:f9:30:
         6a:dc:05:0a:87:27:3b:63:7a:d9:41:4b:52:81:5b:f0:95:f3:
         7d:9c:6c:89:42:7e:72:32:6f:fb:cb:fc:3e:89:52:05:a7:6b:
         16:a4:49:a4:b8:b0:b9:cc:62:7b:22:02:54:29:d8:11:89:c4:
         cb:66:1d:35:9f:34:e6:08:b6:c9:a8:f5:6a:1c:d7:30:4e:82:
         d0:07:d3:0a:76:44:0e:2d:66:dd:97:15:3f:9f:fd:04:a5:52:
         cc:4f:3d:8e:d6:1b:84:f6:46:3d:a7:c7:d2:58:f6:5a:10:c9:
         c5:99:ed:42:69:96:0b:33:45:f9:2f:0a:18:31:54:22:e3:42:
         15:3f:9e:52:34:e7:25:d2:2d:01:9e:b8:5c:b0:6f:ea:70:1c:
         42:9c:5f:63:00:15:26:76:95:f7:5a:fe:69:b0:fa:6b:58:6f:
         71:e9:95:60:1a:65:b8:3a:17:18:4c:f0:db:41:91:f9:b6:dc:
         97:11:67:0a:62:33:d4:93:82:b8:a6:13:8f:cf:91:51:c8:9d:
         6d:10:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:38:52 2024 by rpki-client on console-ams.rpki-client.org