Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File:                     oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier:          w5LcDl9wkpCKG5FxFxqeIlTSOnPWwyFuKUeue1ju4/Y=
Subject key identifier:   0D:37:B4:D7:89:E5:04:21:61:0C:46:ED:C8:B8:AD:D6:1D:BA:22:51
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer:       /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial:       018F87ED9F4E0FAEDA9F886F1D1B9ECB6CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number:          0A11
Signing time:             Fri 17 May 2024 19:00:47 +0000
Manifest this update:     Fri 17 May 2024 19:00:47 +0000
Manifest next update:     Sat 18 May 2024 19:00:47 +0000
Files and hashes:         1: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: nOGVHhS4SjWE99w/s3hIw4kvAnnzQNkVGzZ0fD3wUMg=)
                          2: vdykUT2Eb7H-Pn-y2d--5H9xQJA.roa (hash: Zn8jP8rAzlL5vJpbJmV1PQmHmSMel8iWoQyhOpfNlwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:9f:4e:0f:ae:da:9f:88:6f:1d:1b:9e:cb:6c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
        Validity
            Not Before: May 17 19:00:47 2024 GMT
            Not After : May 18 19:00:47 2024 GMT
        Subject: CN=0d37b4d789e50421610c46edc8b8add61dba2251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:92:ec:44:3e:b2:0d:6c:30:54:05:58:0b:
                    9e:48:c4:12:be:4f:f0:4b:ad:11:93:4c:bf:91:de:
                    29:7c:cd:c8:99:89:6d:8a:bb:fc:fc:5d:5a:b0:ed:
                    ad:bc:4b:a8:c6:0e:ca:51:b2:d9:4b:65:43:3c:4a:
                    95:71:02:d4:4e:b3:69:21:8e:3b:6b:12:ab:f3:6c:
                    7f:bf:d8:a6:f1:6f:a9:39:21:cf:5d:a8:b3:d0:80:
                    fc:f2:1b:75:a7:79:73:4d:ec:68:78:55:0b:ad:6a:
                    8a:f4:28:26:89:84:77:0c:ab:bf:d2:6b:2b:99:71:
                    e1:fe:e5:73:4f:5f:c5:d2:25:1e:6a:2f:b3:fc:b9:
                    f3:80:10:f1:1a:9d:77:4c:9f:36:20:91:0a:c4:97:
                    7b:38:26:58:e2:a9:83:50:32:d9:4b:a5:9b:7c:b5:
                    fa:8e:7f:89:db:23:4f:ff:5e:1b:0f:90:0c:14:9e:
                    18:7f:07:00:86:c6:58:6d:8f:e7:d7:a2:64:3d:03:
                    dd:34:fc:53:1b:0e:ed:c7:e3:38:d6:f2:4a:08:57:
                    06:76:a3:71:c7:4a:c0:c4:5a:b0:81:02:c7:6a:31:
                    39:c7:2d:b9:5d:40:3f:06:41:e4:8c:09:ee:17:0e:
                    f8:3e:38:c0:63:b4:eb:d9:4f:68:2e:7a:78:96:62:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:37:B4:D7:89:E5:04:21:61:0C:46:ED:C8:B8:AD:D6:1D:BA:22:51
            X509v3 Authority Key Identifier:
                keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b2:38:40:40:5c:6c:a0:25:12:da:a8:17:b2:d9:b9:69:07:
         68:2c:25:d0:58:83:a7:83:56:d3:cd:51:d6:ab:2e:28:a4:cf:
         ff:9d:fe:b3:52:33:8d:53:0b:93:70:ad:67:fb:83:f9:8e:1f:
         01:ec:e8:ee:48:02:97:ad:59:3a:76:d0:55:c7:67:56:13:0a:
         f0:35:27:86:3e:42:24:ee:89:c7:07:8b:e5:53:94:1d:ff:8a:
         7f:26:9e:4a:e6:a3:ad:0f:79:44:d8:cf:3b:03:16:5d:d8:04:
         1b:ac:ac:94:28:9e:4b:5c:08:c4:a5:b9:ba:c5:7a:88:c4:1f:
         5e:0b:cc:fa:55:a0:3c:16:21:9a:0f:8c:8e:eb:35:d8:6a:49:
         3b:c7:17:92:a6:c3:c3:a6:f4:41:21:a7:cc:00:57:b7:10:c1:
         66:7f:07:67:46:e5:f7:76:d5:53:bc:0e:71:20:d0:e6:b2:7a:
         09:a1:b0:85:b1:07:bf:a2:d0:1d:17:d5:78:99:f3:0e:6c:55:
         6b:6f:94:a3:e6:6a:2c:a0:7f:71:18:d3:cc:5e:26:f9:19:b3:
         3d:66:08:3f:ab:0c:1c:20:04:e2:32:81:4b:9e:e0:63:4d:1d:
         dd:02:f1:c1:d6:ed:d9:5b:dc:5d:28:81:76:d8:6c:a8:20:ca:
         4f:be:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:23 2024 by rpki-client on console-fra.rpki-client.org