Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File:                     osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier:          sOgYxNRY/gt7pfqPE7ghofD9bNxMlDI2RMtWXPmwLdg=
Subject key identifier:   7F:A7:58:81:B1:C0:49:2D:59:D9:BD:B6:17:6B:5C:A8:34:16:D3:38
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer:       /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial:       0193587746D26D5CE686737B9A25878909F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number:          0763
Signing time:             Sat 23 Nov 2024 10:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:32 +0000
Files and hashes:         1: c6sS3FncECU14jdCS4BGN8zDE3s.roa (hash: tg4kxkmfY2vQbooDMirNRtWJGHWcfsPJREVQQNjJLA8=)
                          2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: M1QuNeI+J+0u1k7Oneegpb9RtIiOj/hsZ0HgKqn82gw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:46:d2:6d:5c:e6:86:73:7b:9a:25:87:89:09:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
        Validity
            Not Before: Nov 23 10:00:32 2024 GMT
            Not After : Nov 24 10:00:32 2024 GMT
        Subject: CN=7fa75881b1c0492d59d9bdb6176b5ca83416d338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:10:d6:de:5b:75:77:53:ea:98:a2:ca:bc:
                    be:e3:b8:38:dc:e8:8a:d2:86:bc:6c:d5:c5:40:85:
                    23:e1:73:5a:40:91:da:bb:2b:bb:12:d0:66:57:06:
                    dc:cf:03:3c:20:de:4b:b8:07:9a:90:5a:43:00:9e:
                    50:fe:8a:bf:3c:4c:2b:cc:31:94:e1:56:c2:dd:f8:
                    9f:7a:ee:e8:ed:cf:7b:5f:f6:54:bf:7c:98:e5:a1:
                    f7:54:34:c1:94:65:b9:10:75:af:f2:53:aa:8a:ca:
                    4d:3b:34:b9:b5:95:e3:2d:bc:fc:77:ca:ca:39:fd:
                    d0:58:cb:a8:4b:a6:3b:c4:8b:6e:eb:1e:27:29:0c:
                    b0:6c:eb:7b:7a:fa:32:01:c7:24:bd:19:b5:89:f9:
                    21:9c:55:6c:28:36:51:76:52:4b:38:28:1c:8d:c5:
                    0f:7e:31:82:d2:ae:e9:30:6c:47:be:f4:1f:e8:7e:
                    39:c6:ab:09:18:7c:8a:04:b8:4d:98:1e:47:61:46:
                    e7:53:50:fe:50:f1:ab:54:57:21:ba:48:42:06:e6:
                    a3:57:b3:a8:9a:8a:57:86:a0:14:69:c1:24:06:9e:
                    c3:62:34:b4:6c:eb:e0:60:bf:92:c9:6a:67:90:4b:
                    2a:1c:b7:22:0e:22:1e:4a:e9:87:c8:35:22:95:02:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:58:81:B1:C0:49:2D:59:D9:BD:B6:17:6B:5C:A8:34:16:D3:38
            X509v3 Authority Key Identifier:
                keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:4c:5b:72:48:eb:a7:13:fa:cd:06:47:77:00:84:7e:11:
         6f:8f:ad:3e:8e:93:34:d9:f2:cf:13:48:2a:4c:94:87:2f:e2:
         ce:86:18:10:30:b3:b7:8b:36:86:28:d7:5a:30:55:81:1a:c8:
         ca:ce:ba:9e:5a:b1:3d:c3:a6:a2:1f:8a:9c:ba:17:30:9d:eb:
         84:9a:ca:50:24:6b:80:10:ed:64:d9:5b:17:87:c4:45:c5:62:
         e8:9f:c2:9f:17:26:3c:45:6b:25:a5:f1:0c:b9:24:59:85:de:
         7d:d1:0c:72:a2:63:80:16:93:04:d8:1e:b2:f3:c0:7f:1e:bb:
         3b:71:85:34:73:bf:99:ef:37:29:cf:be:b3:41:d1:a1:22:8b:
         b8:b2:dc:5b:22:7f:0e:d3:8c:13:1c:c5:6f:e3:3e:3d:b3:76:
         c7:51:60:14:e6:ae:3c:41:62:c0:a0:cc:c4:4a:20:c9:a6:f8:
         d6:34:3e:ff:a4:96:dc:95:6a:ca:4e:e6:7e:59:bf:84:f8:38:
         bb:c7:2a:61:02:99:2e:c4:ec:a6:62:e4:d9:f9:7e:9a:d4:4f:
         e1:18:12:8b:ca:1d:10:83:84:c8:c7:30:a3:e4:52:5b:00:9a:
         38:cb:1d:fd:19:f9:44:2e:e0:6f:0c:c6:ba:0b:b8:38:57:19:
         b0:b9:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:57:40 2024 by rpki-client on console-fra.rpki-client.org