Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File:                     OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier:          aKkF0ST4XizWaQDsGs0rTa/W8igLgyUzLAztvAHrdfI=
Subject key identifier:   E0:FD:F9:95:29:09:7D:D6:E2:A4:0C:29:85:D2:DE:28:38:42:D9:A1
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer:       /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial:       01901EFD5B19DABA2CE056C309FF6BD1160E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number:          0690
Signing time:             Sun 16 Jun 2024 03:00:38 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:38 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:38 +0000
Files and hashes:         1: OCUhvVCSWg3iy2uXctG-QpvDWLU.roa (hash: 0JWhHsns9mrL9PQCjHRQJX/9dYEqR6UwoR69aDrchRg=)
                          2: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: raeJKhXE9oqBVMQiCx31sGGxj4HdywYU3YBQfrj4Tcg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:5b:19:da:ba:2c:e0:56:c3:09:ff:6b:d1:16:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
        Validity
            Not Before: Jun 16 03:00:38 2024 GMT
            Not After : Jun 17 03:00:38 2024 GMT
        Subject: CN=e0fdf99529097dd6e2a40c2985d2de283842d9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:58:60:96:29:9b:c4:eb:04:72:c8:a5:db:
                    88:c7:9e:bc:f9:63:ee:75:16:d1:c1:44:8b:29:d5:
                    58:31:e5:c2:90:9c:22:24:61:a1:00:12:80:55:44:
                    bb:d1:31:11:0e:97:ca:08:22:db:6d:41:b3:23:f4:
                    92:cd:06:9f:a2:9e:4d:82:99:a1:83:4b:a3:8e:0e:
                    1d:b6:54:30:9f:5d:e9:66:f1:07:69:4f:62:3b:13:
                    02:0e:ca:ff:fe:27:67:23:a0:4e:22:82:53:f8:ca:
                    45:2f:a0:ce:15:7e:bf:40:cb:f2:59:c9:17:6f:5a:
                    a9:3c:52:29:76:57:06:fa:cf:b8:7b:54:21:39:15:
                    c6:41:fd:dd:9a:56:12:da:c8:37:6b:74:bb:ee:a6:
                    74:bf:74:16:27:a7:6f:4e:8f:6c:0e:ba:39:03:e5:
                    3e:e6:71:82:b0:5c:cd:3a:f0:90:7c:0a:7e:92:25:
                    e5:30:19:44:40:b3:a7:5e:3b:3e:54:20:85:55:6a:
                    c5:3d:2b:1c:07:a4:21:9b:ca:b0:07:ab:14:d6:d7:
                    cb:39:8e:39:79:39:03:72:88:f6:e3:c5:29:a6:a7:
                    17:ff:aa:99:0f:f3:bf:32:24:ba:ee:a2:6f:2f:df:
                    0e:5f:8b:5d:a2:93:93:d0:d1:b4:4b:66:b7:10:9c:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FD:F9:95:29:09:7D:D6:E2:A4:0C:29:85:D2:DE:28:38:42:D9:A1
            X509v3 Authority Key Identifier:
                keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:49:48:40:cf:72:98:24:63:4d:14:cf:0c:f6:cc:0f:d5:61:
         8a:94:48:cd:6f:93:bb:e2:9e:df:81:a1:85:51:4f:20:a3:48:
         44:b6:68:44:b6:82:9c:45:96:37:86:8b:93:ac:9e:38:bb:b4:
         6d:d0:49:f1:90:38:5f:1f:ec:3a:d1:81:ac:77:eb:9c:31:d3:
         d8:93:cb:83:0b:37:40:83:ba:d8:12:96:29:71:be:34:c1:a5:
         07:42:d4:56:09:6d:9e:4b:88:a6:dd:58:f9:49:e2:ea:29:2f:
         a8:a2:1c:dd:1b:dc:e1:48:4b:b2:0b:53:fc:76:27:0a:d7:d6:
         f7:98:e3:8f:33:c1:5d:1f:89:fa:9c:03:61:ca:e7:14:67:f2:
         06:27:f8:24:29:c2:be:85:08:1e:6e:70:5b:ba:8e:9c:82:04:
         e6:da:5d:27:9e:70:1d:a0:8b:73:92:15:8d:69:60:f0:91:67:
         e1:55:ab:3b:bc:d5:d8:38:fa:1e:3a:0e:cc:70:2d:8f:06:2c:
         94:d7:ad:6f:36:6c:15:1e:87:ea:25:ff:b5:c9:52:fd:11:52:
         07:13:57:f2:2d:11:00:e1:83:4a:24:f6:d3:e8:d0:6c:69:04:
         f4:eb:3d:02:46:75:ba:89:52:0e:f1:1f:8d:3e:39:a9:f2:10:
         cb:55:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:58 2024 by rpki-client on console-fra.rpki-client.org