Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File:                     O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier:          bc7cL5GYJVsWkyV3hL/ftzhlYiAby9jsNki+3G4fneI=
Subject key identifier:   87:0F:07:BF:F7:66:13:F4:62:A4:89:0E:88:C6:E1:E0:BF:5A:6C:5E
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer:       /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial:       019044F8EFA81EC7EFB4093131C7CDCF5ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number:          04C4
Signing time:             Sun 23 Jun 2024 12:01:23 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:23 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:23 +0000
Files and hashes:         1: 9vKqG4YEZ-VzHDJKg9cCqOnDRI8.roa (hash: vDwCyz/WhhaMucNzZoBo+1SdZjkFIKgxdnF0XuA1oMo=)
                          2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: 3OX62P23KlWMhwuhTHqGzv3Gw2o3qY12opN0b+XEk8k=)
                          3: ci547t-pBxJybz21pEEwIIDQygU.roa (hash: O6pgY00hYBDKZWI485gedGvOU5DBQRfK8hwUghVHMFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:ef:a8:1e:c7:ef:b4:09:31:31:c7:cd:cf:5e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
        Validity
            Not Before: Jun 23 12:01:23 2024 GMT
            Not After : Jun 24 12:01:23 2024 GMT
        Subject: CN=870f07bff76613f462a4890e88c6e1e0bf5a6c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:fb:50:9f:6d:e5:ae:70:2f:cb:b2:9f:e5:
                    22:02:05:b8:4e:8d:47:d3:50:db:b6:4c:5a:1a:d9:
                    9d:25:b1:b4:cb:2c:1a:01:7b:bc:4e:18:0e:12:3a:
                    67:d1:e5:6f:f9:a7:9f:bf:4c:ad:06:fc:10:17:60:
                    e2:70:cc:c7:46:2f:f7:b5:5e:ca:93:94:4e:43:df:
                    d7:38:89:ff:31:c5:89:4d:59:07:6d:4c:bd:40:d1:
                    de:69:b9:2d:e8:64:41:63:9a:44:c4:5e:c1:96:86:
                    2d:fc:09:a9:66:c0:72:00:e5:c6:8d:4f:06:a7:85:
                    fc:6f:ea:9d:ba:18:a7:84:49:01:00:17:0a:e3:8a:
                    42:d7:dd:9b:6c:4a:8c:f2:28:82:d6:26:2e:e2:7e:
                    6d:3f:ed:1b:0b:78:c9:65:b9:ed:f7:d5:09:c4:67:
                    ac:48:0e:cd:d2:46:c2:14:8d:44:77:d0:cb:a2:78:
                    b1:50:ac:2e:3c:e7:6b:0a:f1:40:65:e5:d4:b0:b2:
                    79:ef:1a:ae:44:92:ff:f6:6f:24:cc:e5:b0:d7:64:
                    33:a2:15:f7:99:e1:5b:19:d8:f8:dc:ed:d5:12:ae:
                    80:56:c4:2e:6c:4f:ec:df:ab:3a:8c:3e:fc:01:31:
                    a9:16:42:b6:8c:67:d9:28:cf:e9:b9:0e:a7:9c:03:
                    af:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0F:07:BF:F7:66:13:F4:62:A4:89:0E:88:C6:E1:E0:BF:5A:6C:5E
            X509v3 Authority Key Identifier:
                keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:df:eb:b6:5c:3a:30:1f:ee:dd:fa:88:44:33:d1:3c:60:41:
         91:c4:18:a4:75:49:8d:2e:6d:12:fe:a1:27:9b:7e:36:e1:cc:
         81:9b:80:f8:e7:5c:0c:d6:3e:53:46:6a:52:a3:04:d3:52:c4:
         03:b4:71:0a:2e:f0:f2:84:21:dc:2d:8d:f8:da:33:fe:20:4d:
         3d:5b:e3:29:b6:3e:24:2c:8b:24:9a:72:f8:ef:57:c3:f4:59:
         53:60:2e:4f:41:72:62:d7:a9:93:6f:08:a5:54:10:3d:47:b3:
         40:c9:79:bf:9b:00:f3:55:aa:01:19:95:ad:df:cf:ec:23:29:
         a7:96:00:7a:96:d0:c8:8c:89:a0:b7:00:4c:c6:cd:e4:11:42:
         45:c9:97:b5:3a:ba:17:71:06:03:c6:f1:54:05:dd:8d:59:b9:
         4a:85:f2:7b:d7:21:d1:f8:a6:d9:d1:2f:2d:a7:20:a4:0e:d9:
         f4:7f:bc:df:cb:c2:48:03:19:11:ce:c5:7f:b7:f8:cf:70:98:
         61:97:56:53:56:74:1d:31:ae:a5:64:4a:26:a0:bb:a8:17:c5:
         78:3a:05:a2:81:22:a9:72:b6:e0:55:04:ff:07:16:a8:72:11:
         d3:66:a8:30:a1:a0:89:bf:9c:50:f4:a7:2d:d0:36:9e:6d:41:
         3d:3a:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:08:28 2024 by rpki-client on console-fra.rpki-client.org