Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File:                     oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier:          pTq2ZuCdvPKcMWQJIlTk/kqdiZ+8eCmDBNFBUIqBjUs=
Subject key identifier:   75:20:CE:A5:3B:A5:D9:12:B9:DF:FF:1B:F4:54:0A:00:6B:CD:FC:29
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer:       /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial:       01906294D77FFA6C24076E74FA4B961BA0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number:          11E8
Signing time:             Sat 29 Jun 2024 06:00:39 +0000
Manifest this update:     Sat 29 Jun 2024 06:00:39 +0000
Manifest next update:     Sun 30 Jun 2024 06:00:39 +0000
Files and hashes:         1: UMOQuIGusgPOcSZTIJpaYcujt7w.roa (hash: xXR2qEbEe9YAAmg2G/R2jD3Fa4ao1nRUHX1ujejqxek=)
                          2: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: CUNCh8eyrP+c6JSpUZzsamHGMd9CReFr5qKKYOfy1Vg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:94:d7:7f:fa:6c:24:07:6e:74:fa:4b:96:1b:a0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
        Validity
            Not Before: Jun 29 06:00:39 2024 GMT
            Not After : Jun 30 06:00:39 2024 GMT
        Subject: CN=7520cea53ba5d912b9dfff1bf4540a006bcdfc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:0e:d2:95:04:89:61:1c:56:4d:ba:1e:93:
                    49:f1:df:5e:36:35:ac:8c:12:67:20:05:fc:03:e0:
                    85:bd:67:31:ed:e9:0b:25:70:f2:36:80:f3:0d:57:
                    02:62:b7:6e:e1:76:71:75:a9:6d:28:b8:21:10:0c:
                    48:7c:34:a0:fc:74:a5:3c:c6:28:e5:4c:bb:85:0d:
                    8d:f7:fe:c5:e5:ec:6a:0e:89:92:fd:2f:fa:6b:75:
                    c9:25:af:74:cc:81:2b:c8:20:95:d6:16:7e:be:ec:
                    22:d6:41:f5:58:43:50:10:26:bc:ad:96:a3:0d:d9:
                    1b:4b:23:c5:74:fd:d3:42:1b:cb:da:ea:6c:8c:75:
                    0c:4e:10:a8:3e:97:e0:94:f5:68:9b:11:70:90:1b:
                    45:4e:80:6d:93:35:ec:ff:9d:9c:f1:1c:34:ca:4c:
                    a5:99:79:4e:76:fd:4a:af:58:29:96:80:d2:37:7d:
                    7e:10:ac:7a:80:e7:0d:d4:49:b2:ef:30:2a:86:34:
                    80:73:6c:76:be:85:f1:8d:f4:fb:40:04:89:c9:0b:
                    5a:d9:89:eb:92:eb:e4:67:d4:c8:10:d6:63:21:86:
                    2c:ef:b5:9a:01:da:4b:a3:f2:8d:e9:83:74:8b:20:
                    37:88:4e:3c:c3:6f:07:c6:92:17:8d:47:48:1f:5a:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:20:CE:A5:3B:A5:D9:12:B9:DF:FF:1B:F4:54:0A:00:6B:CD:FC:29
            X509v3 Authority Key Identifier:
                keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d9:24:a4:12:21:bd:70:57:ff:07:ae:6b:2d:f2:71:0b:55:
         98:39:9a:20:51:2a:e5:ca:c6:10:76:37:50:11:40:b9:cf:46:
         2f:9d:11:81:36:c5:ee:4d:d7:7d:c0:4a:74:2a:43:d6:37:2e:
         74:3b:43:99:82:91:04:79:3a:6f:20:c3:62:1b:c9:6b:c2:c5:
         07:a2:c3:4d:4b:9d:73:4e:18:d8:15:47:8d:01:a7:a4:46:5b:
         c9:61:32:e3:97:d4:51:5f:5d:8a:63:02:f8:bb:99:43:63:4d:
         79:f9:15:85:d0:0e:19:c1:29:0c:2b:64:34:d0:12:bb:d3:a4:
         8e:dd:5e:6d:8a:73:70:79:b7:44:ad:f1:56:a7:d2:a4:c0:d0:
         67:8a:a7:fe:7c:0f:51:a5:a6:1f:bf:7d:96:81:5b:7d:78:71:
         22:ca:4c:a2:bd:ea:8c:71:57:ce:3e:e6:14:59:9f:d9:80:87:
         81:45:5f:90:1f:6d:02:b4:bb:bc:35:c1:d4:c3:18:ae:ca:22:
         f6:cc:88:da:ef:9f:91:02:61:73:a7:8c:18:11:17:80:25:9d:
         43:59:7a:4e:0d:1b:f5:21:9d:fa:4d:48:44:86:67:77:39:28:
         8c:4f:87:d3:d9:ce:74:ec:be:36:a6:6c:cf:14:7e:da:15:d7:
         7c:1b:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:52:51 2024 by rpki-client on console-fra.rpki-client.org