Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File:                     O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier:          XUjU13fPNh6twSJNmMxRbpslGuStoCtW5UZGhPQdkRI=
Subject key identifier:   23:91:F4:20:9F:FF:BB:50:FA:5B:71:E6:1A:7F:B8:1B:D8:FA:C0:A3
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer:       /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial:       01901E5930393A827EE9DD30265BCD47B05D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number:          04B0
Signing time:             Sun 16 Jun 2024 00:01:19 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:19 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:19 +0000
Files and hashes:         1: 9vKqG4YEZ-VzHDJKg9cCqOnDRI8.roa (hash: vDwCyz/WhhaMucNzZoBo+1SdZjkFIKgxdnF0XuA1oMo=)
                          2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: QC72lWk+I/YeftXVRuYYyNjfqDm0GWQQe0lYehFDtZc=)
                          3: ci547t-pBxJybz21pEEwIIDQygU.roa (hash: O6pgY00hYBDKZWI485gedGvOU5DBQRfK8hwUghVHMFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:30:39:3a:82:7e:e9:dd:30:26:5b:cd:47:b0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
        Validity
            Not Before: Jun 16 00:01:19 2024 GMT
            Not After : Jun 17 00:01:19 2024 GMT
        Subject: CN=2391f4209fffbb50fa5b71e61a7fb81bd8fac0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:48:ca:87:5e:47:f8:51:c8:bb:ee:e8:bf:
                    f3:2d:55:75:87:17:80:bb:aa:33:51:cc:f7:ba:e0:
                    2f:79:5d:4f:0b:2b:ff:c1:21:f8:9e:af:53:d3:f2:
                    69:93:f7:7b:c0:65:c1:38:5b:c1:d6:34:f1:f5:24:
                    55:f9:57:d9:06:c6:9a:7f:c2:2d:36:b4:95:af:7a:
                    e8:36:90:5f:06:36:82:68:51:f5:ac:17:19:17:02:
                    d1:2a:f7:ed:28:3a:52:1a:36:6a:50:ff:c4:ce:7d:
                    6a:2d:12:df:1d:0c:8f:41:1d:59:6b:8d:22:2c:c4:
                    b7:67:99:2b:f4:f6:ee:35:db:49:04:b6:8e:44:ce:
                    22:38:fa:96:70:6c:f6:27:f3:ae:fd:bd:05:b5:c6:
                    28:bf:95:c0:94:c5:52:cb:00:f1:fd:42:58:78:fe:
                    43:f4:d9:04:6e:5d:81:b8:b1:ef:9e:6f:0e:f6:8a:
                    4d:c7:04:ba:df:cc:2c:82:e2:4d:88:7a:ce:e2:0e:
                    52:b0:28:55:0f:1d:27:e6:e6:03:c0:2f:17:dc:cb:
                    36:41:1c:9a:e5:e9:29:fd:8a:09:c1:da:e0:05:2a:
                    96:9e:61:b1:6b:e1:95:e8:46:dc:cd:d4:89:12:3b:
                    3e:9c:df:82:9b:d8:00:30:d7:81:ab:96:98:42:db:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:F4:20:9F:FF:BB:50:FA:5B:71:E6:1A:7F:B8:1B:D8:FA:C0:A3
            X509v3 Authority Key Identifier:
                keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f7:83:21:c2:e7:ba:54:b6:4a:a4:de:4f:12:38:be:0d:9c:
         d4:ce:0f:b2:56:45:3f:37:eb:49:72:6d:82:53:c7:9b:f1:7f:
         28:0a:5b:ac:16:c6:3f:65:b4:e9:77:02:1f:9a:d7:a9:2b:e4:
         2f:e1:96:14:41:d6:e9:80:67:0d:39:56:51:3f:3a:1e:69:b1:
         a2:52:00:34:8c:cd:59:ce:9c:0f:9f:96:25:46:d4:59:be:16:
         31:d9:5c:46:92:c7:db:64:7b:fc:08:39:c7:74:7f:4b:5d:69:
         14:6a:3f:2b:8e:9a:d2:13:ef:8a:b7:34:52:47:d5:9f:29:04:
         ef:ec:cf:56:c7:50:55:be:a9:68:ea:9c:0f:d1:58:25:5b:cc:
         84:da:05:bb:83:0d:e0:dc:cc:3e:bd:b3:cc:69:3c:c9:ee:3e:
         9f:31:cc:25:a0:05:a5:e1:c2:3c:ad:98:69:24:c3:61:b1:59:
         90:86:01:0e:0f:80:f2:47:d1:82:61:aa:d7:ca:72:3b:f4:5b:
         64:05:e9:70:e0:c6:fc:62:52:33:2e:5d:27:2d:72:bd:4b:d9:
         07:5b:0d:06:17:29:8a:88:ef:27:7d:72:59:74:c0:6b:33:34:
         25:c8:9c:9b:07:bc:c6:99:34:bd:a3:42:41:67:b8:b5:b2:da:
         f6:d9:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:08:57 2024 by rpki-client on console-ams.rpki-client.org