Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File:                     o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier:          OXXbUW7HoJQKgFEnd3D0unrEYqslwWyXM1pj72BlDXA=
Subject key identifier:   E8:BD:0D:50:3A:B2:D0:11:D3:CE:A5:5B:A3:0B:72:F3:72:55:5C:4A
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer:       /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial:       01901E8FE14DC45A81F6CD4705F30B80765C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number:          0CC6
Signing time:             Sun 16 Jun 2024 01:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:04 +0000
Files and hashes:         1: 5moilq68YyhVvpINDafhO1iNgjI.roa (hash: hgBpUc3X2nXbJWuS/4CCTU48SggS4X4jrGcYNxqiqac=)
                          2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: 6qW0X3RvpTrYQH/+uQhahaN628179mDBr+RAqBKgrHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e1:4d:c4:5a:81:f6:cd:47:05:f3:0b:80:76:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
        Validity
            Not Before: Jun 16 01:01:04 2024 GMT
            Not After : Jun 17 01:01:04 2024 GMT
        Subject: CN=e8bd0d503ab2d011d3cea55ba30b72f372555c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:02:5a:fc:1a:e5:58:e0:5b:cc:fc:f2:86:
                    99:b6:80:aa:5f:24:1c:d4:9d:d8:cb:63:4c:02:c2:
                    3d:66:56:ae:18:73:f5:0c:94:c4:60:39:c5:43:31:
                    14:3c:16:69:87:e1:02:0f:b5:50:83:30:a1:00:92:
                    f9:0b:61:f4:96:92:4a:84:a6:0e:90:7f:af:08:ba:
                    15:a9:c0:45:fa:4b:7e:2e:15:36:d8:f5:ec:7a:e2:
                    d7:dc:99:f7:bc:da:1d:7d:69:47:26:43:3b:29:63:
                    c0:25:97:8a:1f:25:ac:0e:73:45:32:69:12:91:30:
                    0c:bb:1d:00:4f:0d:57:5e:90:0e:5b:cc:b3:17:30:
                    f6:ec:c5:71:fa:77:48:10:6a:c4:44:c3:32:64:a3:
                    d5:d6:81:58:ab:57:d7:cb:fc:82:fe:c4:90:db:bc:
                    0f:05:19:0a:1b:55:ce:ff:48:84:07:42:68:d6:9e:
                    79:13:d2:2b:c2:c9:2b:c3:4a:4a:3e:4a:1b:7a:8d:
                    dc:d9:f3:9e:a1:e6:ab:f1:cd:92:27:d1:22:c1:83:
                    b1:ae:df:86:15:5b:4a:0f:86:81:4f:c5:63:c0:df:
                    9c:1d:50:98:04:57:28:93:45:09:6a:49:0b:ca:59:
                    93:d6:cb:a6:e8:f6:96:c7:6f:44:c1:69:3a:0a:d1:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:0D:50:3A:B2:D0:11:D3:CE:A5:5B:A3:0B:72:F3:72:55:5C:4A
            X509v3 Authority Key Identifier:
                keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:f6:9e:35:af:9b:3f:6d:7a:f6:27:57:d2:75:62:1c:d5:
         20:14:a0:da:79:10:2e:c7:28:58:3c:69:07:e5:3d:9e:6e:01:
         33:3a:84:03:12:d1:8e:05:bf:b9:26:86:09:43:3c:d6:8d:e3:
         0f:da:17:0e:18:53:d0:f7:e0:69:2f:8c:97:ec:d3:95:27:04:
         48:cf:56:cb:2a:19:45:23:ca:a2:6a:4b:88:22:e8:2d:45:35:
         20:e3:a8:49:60:32:80:4a:ea:5e:8a:cb:4f:b3:7d:fe:62:64:
         c0:08:26:43:bd:ea:93:cb:f8:ac:05:fc:cd:6f:3a:36:7e:b6:
         02:f7:f4:c2:f6:33:7c:30:a7:d5:af:fc:f2:22:95:80:52:70:
         fe:90:43:cb:9a:9e:e5:39:50:fd:6e:bd:0b:6f:34:35:29:0c:
         0c:3d:73:8d:7f:d8:a1:e3:dc:d5:30:ac:0e:af:60:9b:8a:17:
         2e:88:29:96:75:ee:47:c2:c0:0e:3a:ca:95:b4:e0:a6:55:b8:
         0b:c2:ea:68:69:fa:6f:3f:79:25:bb:88:53:99:42:c0:2e:d0:
         30:03:3f:b7:43:df:67:68:00:5c:a8:be:a8:31:05:fc:c7:8e:
         8c:3d:bf:41:48:f1:0d:db:2f:e7:7c:7f:b4:94:78:26:33:e4:
         87:2b:3d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:09 2024 by rpki-client on console-fra.rpki-client.org