Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File:                     OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier:          wkFqDC8ZajxOlmrWbgacMZpb43mLKC+bIB7DM45adVU=
Subject key identifier:   21:E5:FE:FE:3E:A8:56:23:1F:E0:5F:CE:7B:27:75:FD:51:77:34:25
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer:       /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial:       01901D45EBCFCBF77E2429FCA82EE26FDE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number:          0A89
Signing time:             Sat 15 Jun 2024 19:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:39 +0000
Files and hashes:         1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: FHo9TW4KDRcKjn1XMMhJbia9cDAhtDO7gAqMnoIfzcw=)
                          2: rdiJXUzqNhNWOFnHydpuohkPlds.roa (hash: alz7KMxNKY4Ogql4EMIotQB4EgvwtO1HrT3Cdc88+iU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:eb:cf:cb:f7:7e:24:29:fc:a8:2e:e2:6f:de:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
        Validity
            Not Before: Jun 15 19:00:39 2024 GMT
            Not After : Jun 16 19:00:39 2024 GMT
        Subject: CN=21e5fefe3ea856231fe05fce7b2775fd51773425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:50:c7:3c:2d:8f:95:36:7e:4c:aa:9e:20:
                    af:31:94:c8:23:a6:39:a3:76:b3:32:e8:d1:5f:2b:
                    ab:7d:7b:41:77:dc:e2:9e:57:eb:46:e4:13:08:de:
                    9f:e6:f6:e7:c2:8a:ce:1c:9f:0f:86:1f:25:32:15:
                    f4:d4:3f:a2:75:2f:29:5e:5d:4c:06:e1:49:f7:1d:
                    89:f2:0e:eb:1d:1a:93:0e:cb:70:ce:c0:fb:f9:2a:
                    fd:c7:a8:b4:84:6b:37:6d:99:0e:fd:a9:2c:bb:46:
                    5a:cb:6b:f7:ec:3d:2e:85:02:a3:e7:f5:bf:3e:be:
                    06:d8:cd:91:95:44:cb:32:fd:1a:eb:bd:3b:26:5b:
                    08:2a:dd:d7:44:ad:e2:85:1f:46:f9:99:9e:5b:09:
                    19:8a:7f:67:d1:3a:0f:35:b0:10:4a:e5:51:e9:c0:
                    75:28:fa:a1:3e:22:24:3b:aa:2d:32:c4:16:0b:3c:
                    9c:51:80:15:10:21:f6:cd:9f:7c:37:80:22:3d:42:
                    1c:11:7d:24:e2:00:81:1f:ae:85:d8:f7:4f:5d:91:
                    fe:c2:78:24:22:dc:18:3b:38:1f:0d:62:f2:04:f0:
                    e3:7c:94:53:28:f8:36:0d:5c:64:f4:f1:75:07:06:
                    07:6d:24:5e:fb:a8:c7:95:16:da:4c:af:a9:f8:bf:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E5:FE:FE:3E:A8:56:23:1F:E0:5F:CE:7B:27:75:FD:51:77:34:25
            X509v3 Authority Key Identifier:
                keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:6b:51:d6:32:88:bf:ec:e5:2d:4f:8e:ef:06:34:95:40:
         5f:5a:30:e2:7a:f9:63:19:b7:93:ee:cb:10:43:9c:f4:bc:31:
         32:62:ba:15:6e:98:29:dc:3b:10:11:c8:37:8b:95:de:14:db:
         6c:43:73:36:57:e0:25:e9:d8:17:b5:14:d8:c1:47:c5:0e:68:
         9f:38:63:1f:a2:b7:b7:2e:57:8f:2d:7b:23:e5:5d:87:f6:4c:
         31:df:b1:83:12:33:61:a7:ac:2b:5c:32:45:23:63:3f:02:bd:
         09:72:31:ed:54:97:c8:71:54:fa:20:d0:9c:81:fc:b7:11:07:
         7c:13:24:39:ca:f8:b5:91:99:f4:85:c5:61:26:2f:0f:b0:2d:
         51:96:f7:47:14:28:46:32:e7:55:d1:89:a7:1c:6e:d5:36:23:
         f8:3d:94:b8:43:90:d2:57:75:72:ec:53:a0:a0:88:f0:a6:ae:
         59:0f:23:05:47:c8:9b:a1:40:d6:eb:f4:a7:16:b2:5a:1f:de:
         31:24:38:dc:12:34:d8:99:ae:b2:7f:6c:2f:69:9a:7d:2f:2c:
         cd:47:e8:ab:25:f6:e3:b0:e9:09:92:0d:7a:01:97:2e:45:73:
         18:2b:33:a6:41:44:9d:1c:0e:13:8d:be:25:87:fa:b0:53:0e:
         c0:25:43:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:50:34 2024 by rpki-client on console-ams.rpki-client.org