Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          eIranGsdGSLYsNZsdAbJwmGr0lJQ6MMQeq85faD9+D4=
Subject key identifier:   A5:1A:BB:E2:CA:1B:30:91:AC:22:98:77:4D:D9:D8:9A:86:5F:E7:49
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       018FB2D81D3214C3FC4B4E2AC6962768072E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          0B67
Signing time:             Sun 26 May 2024 03:00:58 +0000
Manifest this update:     Sun 26 May 2024 03:00:58 +0000
Manifest next update:     Mon 27 May 2024 03:00:58 +0000
Files and hashes:         1: 1rSEcxSJI3Vqp99PWh7sJqbp0mI.roa (hash: k5gn4yfULZ2xeDivsMHe5nuaS1M7y4pXBi/lwQrW7q8=)
                          2: 7mvpuGkLGi8WH9__DZ1OymKUSWg.roa (hash: TLJouhDB2DVdMvtc6OhT5e98iU/YSIV4kP2INBciw4U=)
                          3: RzYuQpvXAjsOJtv88YkQPlLLoYw.roa (hash: YNS6rQZq5TBfSnVNVW+2kwQLqrbCihaGi/6IBnTPSlA=)
                          4: W4YKROmIUyv9v3lcCattxLaqiLM.roa (hash: BoDswYa3I6Bz9SvqC1O6QARXGCHK8pt1P1c3+nZLcL8=)
                          5: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: zTDlb0kxoBodiQSfU4tQqirpW+w/oNXir5QgskUkzYo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:d8:1d:32:14:c3:fc:4b:4e:2a:c6:96:27:68:07:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: May 26 03:00:58 2024 GMT
            Not After : May 27 03:00:58 2024 GMT
        Subject: CN=a51abbe2ca1b3091ac2298774dd9d89a865fe749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:24:52:ed:e8:fd:cf:ab:76:28:e4:90:b1:
                    bf:6e:f2:ce:d6:60:40:2e:49:2a:a2:ec:94:97:00:
                    56:a5:12:97:43:40:73:2d:11:70:79:3b:c2:c1:0b:
                    7e:86:f2:9f:5c:81:80:f1:95:23:38:ea:73:38:60:
                    cf:b2:36:d5:2b:75:a3:e6:17:96:d0:f2:4b:65:11:
                    13:f0:54:47:ac:2a:25:9c:cf:bd:32:16:11:73:97:
                    ad:57:68:f2:88:b0:df:d2:0b:91:25:23:8d:cf:d7:
                    82:62:e5:eb:51:64:76:54:d4:25:84:75:8b:4c:ff:
                    2f:da:5d:81:6f:5b:54:ca:6f:ea:6e:67:48:ce:b4:
                    a8:0d:22:a8:45:52:4a:4f:3d:fd:5f:77:62:4c:ec:
                    43:3b:04:30:23:b6:4c:7a:b5:a5:27:a9:79:14:67:
                    1e:73:e7:ef:0e:ed:67:74:c8:88:1e:58:87:43:0c:
                    5a:c3:81:41:2e:1c:23:a6:ca:ed:34:6e:40:df:f2:
                    1b:17:ed:28:72:bf:69:da:b3:b5:77:e5:d0:5b:cf:
                    4f:73:97:9c:9e:8c:99:9d:64:2c:a8:11:05:90:c2:
                    9a:ba:7f:ec:3a:79:d7:2b:10:79:59:bd:db:30:53:
                    17:56:b2:60:bb:11:ae:91:8e:1a:2c:f3:8e:70:8f:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1A:BB:E2:CA:1B:30:91:AC:22:98:77:4D:D9:D8:9A:86:5F:E7:49
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:53:f8:7e:93:aa:32:15:82:f6:5f:a4:ef:35:48:a2:b4:fd:
         0b:31:e1:02:be:4a:a7:96:90:d4:63:a9:4a:85:6f:39:4d:16:
         51:75:1a:53:b6:1d:2f:8d:e4:72:13:c5:01:8d:90:f5:9f:79:
         38:1e:a3:fa:f0:51:90:24:54:26:7f:84:a0:57:d3:e7:6f:7e:
         c7:af:39:7f:8b:94:45:02:e5:57:1a:75:12:6b:a5:df:8b:70:
         49:75:6a:da:05:e1:bd:62:eb:dc:46:fc:62:cf:a4:60:58:b8:
         20:98:75:26:cb:25:84:6b:08:da:e6:84:44:78:4a:61:0f:86:
         c5:6f:0e:f7:73:83:c6:a8:1a:b1:a4:a3:cf:1d:da:19:95:67:
         63:23:f3:e5:2e:7e:fd:0e:4e:2b:a9:2e:1f:a8:9a:36:34:0f:
         71:21:cf:4f:a5:d3:82:6d:3f:0e:8c:ba:01:2c:78:f9:04:ff:
         a2:a4:f1:a8:8a:dd:7c:00:14:bd:b3:0e:55:e1:0f:6d:cb:8c:
         ff:da:93:ed:12:62:01:42:86:b5:23:cf:d4:d0:f8:9a:2c:dd:
         18:d8:a4:8e:c3:9b:88:f2:0e:22:de:92:58:f9:6a:aa:83:37:
         86:7f:7e:bf:fe:f7:ff:9a:52:a5:2c:50:44:a5:86:1d:d9:de:
         fc:ca:e4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+y2B0yFMP8S04qxpYnaAcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjQwNTI2MDMwMDU4WhcNMjQwNTI3MDMwMDU4WjAzMTEwLwYDVQQD
EyhhNTFhYmJlMmNhMWIzMDkxYWMyMjk4Nzc0ZGQ5ZDg5YTg2NWZlNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAougkUu3o/c+rdijkkLG/bvLO1mBA
LkkqouyUlwBWpRKXQ0BzLRFweTvCwQt+hvKfXIGA8ZUjOOpzOGDPsjbVK3Wj5heW
0PJLZRET8FRHrColnM+9MhYRc5etV2jyiLDf0guRJSONz9eCYuXrUWR2VNQlhHWL
TP8v2l2Bb1tUym/qbmdIzrSoDSKoRVJKTz39X3diTOxDOwQwI7ZMerWlJ6l5FGce
c+fvDu1ndMiIHliHQwxaw4FBLhwjpsrtNG5A3/IbF+0ocr9p2rO1d+XQW89Pc5ec
noyZnWQsqBEFkMKaun/sOnnXKxB5Wb3bMFMXVrJguxGukY4aLPOOcI9UwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUau+LKGzCRrCKYd03Z2JqGX+dJMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1P4fpOq
MhWC9l+k7zVIorT9CzHhAr5Kp5aQ1GOpSoVvOU0WUXUaU7YdL43kchPFAY2Q9Z95
OB6j+vBRkCRUJn+EoFfT529+x685f4uURQLlVxp1Emul34twSXVq2gXhvWLr3Eb8
Ys+kYFi4IJh1JsslhGsI2uaERHhKYQ+GxW8O93ODxqgasaSjzx3aGZVnYyPz5S5+
/Q5OK6kuH6iaNjQPcSHPT6XTgm0/Doy6ASx4+QT/oqTxqIrdfAAUvbMOVeEPbcuM
/9qT7RJiAUKGtSPP1ND4mizdGNikjsObiPIOIt6SWPlqqoM3hn9+v/73/5pSpSxQ
RKWGHdne/MrkhA==
-----END CERTIFICATE-----
Generated at Sun May 26 10:58:49 2024 by rpki-client on console-fra.rpki-client.org