Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File:                     OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier:          YBkMUEBSituyPJ1cYNFVHWRlwfDTmoub8sYipCkVArQ=
Subject key identifier:   ED:5C:09:1D:23:16:D6:1E:DB:C2:0C:C5:0B:F3:6E:02:20:89:58:30
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer:       /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial:       01901E90235B838F80FC6826ECD53D3CD2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number:          085B
Signing time:             Sun 16 Jun 2024 01:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:21 +0000
Files and hashes:         1: 3qlGGoCNkdp5ZwLZojGDebwbHcM.roa (hash: OFygbakWFiKAqj/cWffTnf5SCVZwfuE08URSjWM+92E=)
                          2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: MO2q2p+1OUWNlFRI2TwSXOsYzXMBPt2vZeMiYAfnM8g=)
                          3: QVpFuu8b3M3SM3tYURtLx_63KgE.roa (hash: bd1+jvX9pSmYRn5RDTWfPknY/z2r97mBhvSxIh2QIaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:23:5b:83:8f:80:fc:68:26:ec:d5:3d:3c:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389755423f832a528c93136110f0fe4b10453582
        Validity
            Not Before: Jun 16 01:01:21 2024 GMT
            Not After : Jun 17 01:01:21 2024 GMT
        Subject: CN=ed5c091d2316d61edbc20cc50bf36e0220895830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:f9:1c:da:c1:49:27:26:ea:f6:aa:62:bf:
                    79:fd:ae:a0:28:5b:1a:89:d6:c1:6f:c4:73:6b:55:
                    33:e7:4a:45:7a:ae:48:ac:3f:00:81:e2:e3:50:03:
                    56:67:04:95:f2:33:43:59:1a:cb:44:80:4c:5b:28:
                    f5:5e:3f:7e:1b:11:58:a0:5b:25:64:de:64:69:83:
                    15:49:e9:31:6e:09:37:3c:59:ea:46:ff:ce:c3:29:
                    1d:0e:bf:9f:0a:0f:ac:6f:04:6c:7d:fd:97:db:45:
                    30:4a:37:e1:c1:47:35:6c:01:9f:f0:20:24:9d:51:
                    d7:3c:82:b0:db:e1:34:0f:e3:83:03:f7:07:79:a3:
                    a6:02:11:fd:d0:45:4c:06:7c:c3:0d:b6:99:4c:d2:
                    d7:dc:8b:37:cc:97:ab:58:2b:b8:e3:16:23:7f:d5:
                    0d:1c:a1:f4:91:34:9c:4a:31:07:ff:e2:fe:b4:a4:
                    e0:a0:41:08:40:7f:35:b3:cd:71:60:6e:28:17:0d:
                    25:d2:5e:c2:a9:ed:31:00:c3:05:32:8b:b9:be:1b:
                    56:56:17:fc:2b:97:2b:8b:22:37:71:6c:63:e7:c8:
                    97:c7:c5:67:58:70:20:fa:fa:c7:f2:d7:bd:05:fa:
                    56:37:d7:11:be:de:44:9d:83:2b:e9:34:22:e6:f1:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5C:09:1D:23:16:D6:1E:DB:C2:0C:C5:0B:F3:6E:02:20:89:58:30
            X509v3 Authority Key Identifier:
                keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a4:f2:86:5f:02:52:f0:d4:5e:ed:79:70:fd:ab:72:49:8f:
         b0:12:bb:b3:ec:eb:47:54:b7:76:67:6c:a8:2c:d7:ba:cf:e5:
         d0:45:3c:06:07:2d:43:82:cc:c5:9d:8a:c7:2c:a8:8f:ed:94:
         09:75:95:1f:92:92:cb:7f:8e:9e:32:31:99:d1:63:42:0e:ab:
         01:fb:5d:d5:2f:70:86:17:a3:3a:63:26:cf:c1:b3:d3:18:f2:
         e0:bd:4d:f3:8c:7d:e7:41:34:df:e5:ae:63:51:d7:b9:c0:25:
         7e:03:37:0a:f0:10:f8:53:95:b1:15:e1:58:e0:37:5a:0e:47:
         b8:33:c1:8f:fe:45:a4:18:5a:b6:e9:d2:7d:9b:f5:fa:83:c0:
         f0:e6:23:74:52:87:0f:46:fb:b3:42:eb:e4:6c:7b:0b:9f:51:
         aa:1f:b1:9f:93:8b:dc:00:5a:3c:41:55:3b:e2:15:e9:9b:14:
         ac:1c:5b:cc:d1:44:68:bb:da:42:fa:32:ca:a5:70:2e:22:a4:
         78:f9:1b:b7:b9:c8:ea:f3:d4:58:16:2e:02:53:9d:65:df:92:
         51:09:84:ae:74:21:db:b5:57:40:b2:b6:7a:2f:77:e9:33:4f:
         75:f7:30:6b:51:cc:04:0a:7b:50:56:11:25:e3:5b:5e:1c:ba:
         5b:04:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:01:43 2024 by rpki-client on console-ams.rpki-client.org