Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
File:                     oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json)
Hash identifier:          E35fMxjs2GfbjMokynU4k+gclHjbZdqeu3PWtWZPvAg=
Subject key identifier:   02:8F:6A:80:91:A4:7C:1E:37:31:76:F6:C8:D5:8B:5C:3B:BA:30:22
Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
Certificate issuer:       /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Certificate serial:       018F87498E5DBFFE3C7013B24B901E4BE7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:35 +0000
Manifest this update:     Fri 17 May 2024 16:01:35 +0000
Manifest next update:     Sat 18 May 2024 16:01:35 +0000
Files and hashes:         1: eC0n_FZCq7XnaPNxOp9QSo4OHYY.roa (hash: XyvnwHVRg8f1BBgRDhVGawv82rVlIyqImGqWZHzfGsY=)
                          2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: DCgLR9PKBncLe9N7ZGMquTZg97XdDy0QFtwIffcEaSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:8e:5d:bf:fe:3c:70:13:b2:4b:90:1e:4b:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
        Validity
            Not Before: May 17 16:01:35 2024 GMT
            Not After : May 18 16:01:35 2024 GMT
        Subject: CN=028f6a8091a47c1e373176f6c8d58b5c3bba3022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:06:ba:17:72:02:8f:4c:7d:ce:15:61:ae:
                    10:c7:f5:ca:0f:ff:e4:96:6f:13:a4:67:1a:1d:85:
                    b2:e9:5e:f1:89:db:2e:61:c9:d1:50:61:70:40:18:
                    ed:c4:33:20:0f:15:c2:86:3a:1f:99:85:50:59:bb:
                    90:e8:8a:4e:40:99:82:a2:34:68:86:5d:f0:21:b1:
                    16:88:a3:68:4d:70:ba:58:c7:99:bc:11:87:ba:c5:
                    df:c8:c7:72:b2:2a:6d:3a:78:93:54:23:27:0e:b9:
                    1c:e8:ed:5b:5d:5d:88:b1:71:7b:85:93:e6:d4:38:
                    fa:82:3e:be:67:64:a2:dc:60:6d:ed:b5:cd:cf:92:
                    a0:1e:92:dd:25:54:e4:bc:8a:3e:19:e3:b3:62:dc:
                    ff:42:55:6f:6f:bb:01:3e:95:85:b0:24:4c:f7:0d:
                    35:be:ce:29:84:17:c0:0f:19:ff:bf:19:58:e2:da:
                    f4:3d:34:93:e4:e3:a9:ce:0c:df:26:6a:8f:eb:e0:
                    81:16:6c:f4:0e:d6:41:ea:2b:2e:e1:76:14:ac:be:
                    e2:e1:e0:dc:6a:20:de:b3:31:6b:6e:a7:5c:e3:13:
                    36:7d:8e:26:f1:3c:8f:50:6c:a5:cf:23:8a:ed:e6:
                    52:74:c1:33:93:93:64:66:1a:7e:d9:37:d2:9d:3f:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8F:6A:80:91:A4:7C:1E:37:31:76:F6:C8:D5:8B:5C:3B:BA:30:22
            X509v3 Authority Key Identifier:
                keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:27:bc:44:55:1e:fb:f6:57:ef:cd:94:d6:f8:4a:c7:89:b7:
         59:6f:ed:31:7f:40:01:d4:74:e6:b8:4b:33:d9:ff:6b:e6:48:
         8c:cf:d4:8e:10:15:e4:6f:77:b5:4b:26:db:c5:1c:4f:7d:8d:
         cf:44:6a:f8:89:b9:54:72:68:da:a5:d7:35:89:73:39:06:1f:
         23:11:a7:63:0b:b1:4c:23:d5:50:5a:41:86:a4:bc:d6:ee:9a:
         92:7f:57:57:8e:e5:ce:de:83:f0:61:ec:43:e8:ba:65:6e:0a:
         10:40:f7:aa:d7:e1:c4:6e:d7:d7:83:45:3e:b6:44:9f:2d:b6:
         fc:1d:d9:e1:7a:92:bf:65:f2:aa:11:28:79:82:ad:34:4d:64:
         9b:2f:9b:c7:88:52:f1:08:c0:4f:75:3a:0e:e1:3d:b7:19:90:
         58:a2:3a:24:2a:32:fd:cc:11:f8:fc:8c:37:49:10:ee:82:b9:
         18:8e:a0:ba:33:8c:7d:0e:3a:15:bb:d5:79:25:8a:bb:59:9b:
         fc:a4:1f:91:0d:5e:bf:66:e2:46:34:1e:70:36:3d:27:f7:86:
         62:b0:2c:f2:82:42:d6:e4:b2:ca:c1:e5:bc:eb:53:d6:60:0a:
         47:70:e0:ad:4e:9e:c9:65:67:a4:fc:71:73:1c:9f:96:df:01:
         fe:6c:37:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSY5dv/48cBOyS5AeS+fAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYzhjZGE4MTRlNzc3ZDlmZTE1NGI5MmU5OTU5Y2UxMjBi
MGFkNTgwHhcNMjQwNTE3MTYwMTM1WhcNMjQwNTE4MTYwMTM1WjAzMTEwLwYDVQQD
EygwMjhmNmE4MDkxYTQ3YzFlMzczMTc2ZjZjOGQ1OGI1YzNiYmEzMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKsGuhdyAo9Mfc4VYa4Qx/XKD//k
lm8TpGcaHYWy6V7xidsuYcnRUGFwQBjtxDMgDxXChjofmYVQWbuQ6IpOQJmCojRo
hl3wIbEWiKNoTXC6WMeZvBGHusXfyMdysiptOniTVCMnDrkc6O1bXV2IsXF7hZPm
1Dj6gj6+Z2Si3GBt7bXNz5KgHpLdJVTkvIo+GeOzYtz/QlVvb7sBPpWFsCRM9w01
vs4phBfADxn/vxlY4tr0PTST5OOpzgzfJmqP6+CBFmz0DtZB6isu4XYUrL7i4eDc
aiDeszFrbqdc4xM2fY4m8TyPUGylzyOK7eZSdMEzk5NkZhp+2TfSnT9SewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKPaoCRpHweNzF29sjVi1w7ujAiMB8GA1UdIwQY
MBaAFKDIzagU53fZ/hVLkumVnOEgsK1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMt
YjczNjJlZGJkOGFjLzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMtYjczNjJlZGJkOGFj
LzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIie8RFUe
+/ZX782U1vhKx4m3WW/tMX9AAdR05rhLM9n/a+ZIjM/UjhAV5G93tUsm28UcT32N
z0Rq+Im5VHJo2qXXNYlzOQYfIxGnYwuxTCPVUFpBhqS81u6akn9XV47lzt6D8GHs
Q+i6ZW4KEED3qtfhxG7X14NFPrZEny22/B3Z4XqSv2XyqhEoeYKtNE1kmy+bx4hS
8QjAT3U6DuE9txmQWKI6JCoy/cwR+PyMN0kQ7oK5GI6gujOMfQ46FbvVeSWKu1mb
/KQfkQ1ev2biRjQecDY9J/eGYrAs8oJC1uSyysHlvOtT1mAKR3DgrU6eyWVnpPxx
cxyflt8B/mw3dQ==
-----END CERTIFICATE-----
Generated at Fri May 17 17:53:07 2024 by rpki-client on console-ams.rpki-client.org