Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File:                     OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier:          TJFRIzmoM2NivhsHS9Z2zaQYcfbayIz2yLsqK9AbpPU=
Subject key identifier:   0A:D8:AB:A6:6D:EE:93:95:98:BA:8F:63:67:EA:16:8B:15:89:38:0D
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer:       /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial:       01905B7FDE5EBAA21BAB2B2B761AB8AAFD86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number:          11EC
Signing time:             Thu 27 Jun 2024 21:00:24 +0000
Manifest this update:     Thu 27 Jun 2024 21:00:24 +0000
Manifest next update:     Fri 28 Jun 2024 21:00:24 +0000
Files and hashes:         1: IUM674QMOxM_BRXAaj8hviGA7Mg.roa (hash: sWbMmjI9npO8CAjRiSOMuBHs3mupFuAv36Hy7Uh5yVM=)
                          2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: +5wtY7ov3ghc8mJAkB5wZlPj9sLTfmBh9DJ6bPUrj58=)
                          3: RnB3-Fef9lQHvNgNT5VkGAHomSQ.roa (hash: ++wWLgtGqdvQ+KXbTHtKiKgBzUXqz5XXigjKnOyGryk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5b:7f:de:5e:ba:a2:1b:ab:2b:2b:76:1a:b8:aa:fd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
        Validity
            Not Before: Jun 27 21:00:24 2024 GMT
            Not After : Jun 28 21:00:24 2024 GMT
        Subject: CN=0ad8aba66dee939598ba8f6367ea168b1589380d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:04:d0:19:78:23:14:01:ee:47:07:9d:27:
                    07:30:7c:08:f1:ae:4e:df:67:be:a2:8f:db:f7:3a:
                    ad:07:11:d2:88:ab:f3:0c:4c:f7:3c:96:ae:3d:64:
                    82:d6:ac:90:47:05:42:29:37:cc:f2:d1:75:f8:6f:
                    86:41:c0:75:dd:90:7f:71:98:d2:31:ea:74:4d:26:
                    c5:d8:21:37:5d:e5:d8:3d:ca:ca:e7:dc:66:4a:17:
                    81:e2:ba:e9:3e:93:2d:34:79:92:fe:16:5b:6f:36:
                    d6:7d:bb:a2:00:b8:55:73:58:d5:8e:c2:c8:38:55:
                    7f:f3:8a:79:47:8a:5c:78:c7:d9:0c:86:ae:77:5a:
                    75:84:d0:2c:ac:21:5a:79:66:b7:bf:0b:83:15:c9:
                    3f:7e:23:a9:85:b8:38:6d:2f:d9:79:34:65:0d:d6:
                    3a:79:a0:4c:4a:2e:34:f7:19:32:91:86:54:14:0c:
                    21:6b:dd:34:51:bd:7f:1a:c3:27:b7:07:d7:4a:91:
                    66:31:54:d8:be:95:b9:e4:27:da:50:aa:db:03:d8:
                    d7:6e:b4:2c:12:db:20:ff:98:9f:0c:b3:98:05:a3:
                    af:c3:15:db:5d:47:ba:51:4e:39:70:c7:69:ee:08:
                    7f:b5:f9:e4:68:7a:ce:9c:9e:03:bd:6e:f2:0b:a3:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D8:AB:A6:6D:EE:93:95:98:BA:8F:63:67:EA:16:8B:15:89:38:0D
            X509v3 Authority Key Identifier:
                keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:50:63:96:57:53:e7:a6:38:76:08:56:94:ec:f6:69:54:
         4e:0d:9d:7b:bf:29:84:38:5c:90:60:35:7f:69:51:b8:7a:43:
         cd:9e:ce:43:23:f0:48:48:eb:dd:f6:55:e3:59:e0:b1:59:bf:
         13:59:95:0c:90:b0:49:77:5d:95:5e:e9:17:7b:61:69:ff:91:
         e7:15:b1:33:85:1f:f2:a0:3a:d9:e2:94:60:f7:d1:83:92:9e:
         fc:00:64:61:c9:4d:4d:1a:50:10:c8:5d:d6:ec:cb:6d:ee:ae:
         8b:2a:c2:21:52:85:da:dc:52:02:49:e8:fe:a0:f6:bb:04:d6:
         59:5d:54:a9:06:05:54:db:0c:cc:ba:b3:c0:75:10:48:8d:46:
         cf:60:8e:22:61:f9:0c:b0:0d:5d:8b:a2:3e:0d:bc:d1:e6:c5:
         01:bd:9e:a6:31:b9:09:23:6b:35:dd:22:77:78:27:95:40:de:
         fe:6f:e4:35:9d:fe:77:09:5e:48:2b:50:c1:93:30:f3:9b:62:
         04:10:2e:dc:70:58:dc:d4:50:45:32:ba:9c:77:1b:60:0a:aa:
         96:1a:be:81:25:3e:92:d8:a8:f1:cc:8c:d2:16:b8:93:b3:97:
         9a:23:91:4d:16:00:0f:f6:d1:a5:3c:b3:7a:47:dc:98:c6:58:
         50:f6:64:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBbf95euqIbqysrdhq4qv2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGVmN2ZmNWI1NGY1M2ZjZjIzMTJhYmUyZWMzZjU5NThi
YTE0MjUwHhcNMjQwNjI3MjEwMDI0WhcNMjQwNjI4MjEwMDI0WjAzMTEwLwYDVQQD
EygwYWQ4YWJhNjZkZWU5Mzk1OThiYThmNjM2N2VhMTY4YjE1ODkzODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtncE0Bl4IxQB7kcHnScHMHwI8a5O
32e+oo/b9zqtBxHSiKvzDEz3PJauPWSC1qyQRwVCKTfM8tF1+G+GQcB13ZB/cZjS
Mep0TSbF2CE3XeXYPcrK59xmSheB4rrpPpMtNHmS/hZbbzbWfbuiALhVc1jVjsLI
OFV/84p5R4pceMfZDIaud1p1hNAsrCFaeWa3vwuDFck/fiOphbg4bS/ZeTRlDdY6
eaBMSi409xkykYZUFAwha900Ub1/GsMntwfXSpFmMVTYvpW55CfaUKrbA9jXbrQs
Etsg/5ifDLOYBaOvwxXbXUe6UU45cMdp7gh/tfnkaHrOnJ4DvW7yC6PC/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArYq6Zt7pOVmLqPY2fqFosViTgNMB8GA1UdIwQY
MBaAFDgO9/9bVPU/zyMSq+LsP1lYuhQlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEt
ZjA0Y2MxYzIzMGNmLzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEtZjA0Y2MxYzIzMGNm
LzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+FQY5ZX
U+emOHYIVpTs9mlUTg2de78phDhckGA1f2lRuHpDzZ7OQyPwSEjr3fZV41ngsVm/
E1mVDJCwSXddlV7pF3thaf+R5xWxM4Uf8qA62eKUYPfRg5Ke/ABkYclNTRpQEMhd
1uzLbe6uiyrCIVKF2txSAkno/qD2uwTWWV1UqQYFVNsMzLqzwHUQSI1Gz2COImH5
DLANXYuiPg280ebFAb2epjG5CSNrNd0id3gnlUDe/m/kNZ3+dwleSCtQwZMw85ti
BBAu3HBY3NRQRTK6nHcbYAqqlhq+gSU+ktio8cyM0ha4k7OXmiORTRYAD/bRpTyz
ekfcmMZYUPZklg==
-----END CERTIFICATE-----
Generated at Thu Jun 27 23:41:44 2024 by rpki-client on console-fra.rpki-client.org