Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File:                     oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier:          Vr7uXz+b4SNqRJeGEmSsP9Wi27traDbL+VdHMxP/TUQ=
Subject key identifier:   0E:A4:1A:8D:64:67:98:DE:12:70:43:72:2E:E6:FB:A2:79:14:64:17
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer:       /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial:       0193553F90205E4819B265124ADC727DC12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number:          030E
Signing time:             Fri 22 Nov 2024 19:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:49 +0000
Files and hashes:         1: 4CVL3cK_gP_O9HYDaI3gEWUqH44.roa (hash: 15JGgsaM9f2K1x9ilfRS8PM5sgIhp/3TPbmOSDZvUDM=)
                          2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: YJ9JiDW2mIzgBBmiwhZ/CmmXEGEyOlxYODiDvMPo488=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:90:20:5e:48:19:b2:65:12:4a:dc:72:7d:c1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
        Validity
            Not Before: Nov 22 19:00:49 2024 GMT
            Not After : Nov 23 19:00:49 2024 GMT
        Subject: CN=0ea41a8d646798de127043722ee6fba279146417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:1c:51:ad:2b:9b:25:48:16:b2:7b:d0:63:
                    43:b0:9f:5f:3b:35:29:a0:91:e9:fa:d5:0f:6c:9e:
                    9a:6d:ae:35:72:37:19:33:41:e7:ba:dd:ca:4b:6f:
                    77:b4:06:92:8e:a8:4a:62:22:5d:2a:69:de:43:7a:
                    5e:ee:1e:8d:e3:7c:29:28:35:f9:80:6a:54:39:01:
                    f5:8c:19:ff:37:2d:da:da:a6:86:de:f6:11:b3:0e:
                    56:94:cf:85:ce:00:4c:82:af:f3:80:de:00:d4:eb:
                    8a:25:ab:55:35:19:23:e9:79:8c:6a:99:36:41:a7:
                    c4:3b:dc:2b:06:51:d1:61:ef:39:a5:55:9c:64:8a:
                    1d:69:26:61:06:c6:94:1d:aa:4e:a9:00:9a:03:d2:
                    c2:4f:84:39:ea:55:44:01:63:c2:cd:d8:ac:48:e2:
                    ef:03:06:f1:cd:db:3b:23:f7:c6:28:23:7a:70:e4:
                    68:8b:d0:8e:ac:a1:65:bb:f5:09:3f:03:6d:58:40:
                    85:ae:18:81:6e:a6:47:e6:1a:e1:df:bd:c3:f7:18:
                    ae:7e:80:d2:57:95:54:42:2f:ec:96:a9:a3:44:8e:
                    2e:d1:91:66:04:d1:52:c1:e9:8a:e5:43:15:1e:bf:
                    a5:0e:16:fc:e1:9b:9c:ef:dc:57:3d:20:bc:9c:d1:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A4:1A:8D:64:67:98:DE:12:70:43:72:2E:E6:FB:A2:79:14:64:17
            X509v3 Authority Key Identifier:
                keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:da:28:e4:ba:a2:83:07:3c:b8:e2:b3:b8:7f:2d:cc:24:07:
         9b:ba:dd:72:93:30:08:28:03:a6:3c:99:e3:94:62:bf:52:a1:
         9f:a6:08:79:02:a8:2f:ea:ca:10:d3:9a:ef:36:25:af:9b:35:
         e7:c3:ca:65:7d:06:6d:90:10:fc:3f:3f:77:9a:0d:f9:64:ac:
         2f:dc:d0:04:61:6d:c6:cb:92:9f:fe:1a:dc:d8:61:09:1f:40:
         fb:2f:5c:90:ed:80:b6:e7:47:24:46:c6:73:34:fe:47:f4:f0:
         b6:4e:f5:97:a9:81:17:80:c2:b6:90:de:e7:94:9d:0e:aa:0d:
         d4:5e:bc:e1:79:11:b2:c3:fc:f3:ba:44:0f:31:53:9f:ef:42:
         96:6e:80:83:df:18:c9:fa:cd:d0:2a:bb:a2:19:a2:67:be:4f:
         e5:ba:25:e1:57:7c:ed:e7:5b:a0:32:2e:c8:2d:a2:46:f8:87:
         38:e7:5c:0b:3b:d0:9a:f8:07:ae:62:41:c8:62:1e:53:fd:d5:
         24:55:5e:1a:9b:f5:91:74:6c:38:4c:00:28:38:14:9a:d5:b2:
         1d:56:c3:58:c9:22:cd:26:5e:c0:19:96:c4:56:5a:8b:c2:04:
         4a:fa:9d:d0:22:9d:13:9e:b9:cf:bd:86:3c:a0:fc:fd:a9:19:
         8f:3d:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:57:21 2024 by rpki-client on console-ams.rpki-client.org