Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File:                     oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier:          2/2maDICBmTSo61DdOrI8Ln3nGQjqzuwoRrnxayakJ0=
Subject key identifier:   19:EF:40:45:DF:69:74:49:23:7C:CB:B9:9B:A7:69:78:2C:AE:91:6E
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer:       /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial:       018F8D143C695D5A375373F198687BB17ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number:          01AF
Signing time:             Sat 18 May 2024 19:01:04 +0000
Manifest this update:     Sat 18 May 2024 19:01:04 +0000
Manifest next update:     Sun 19 May 2024 19:01:04 +0000
Files and hashes:         1: nfD4CHbsdQSSMHEkUqh35-afONk.roa (hash: Gja2FusDFqIkZdfFBnSoYdYimR7YjidJpIOTlJImmzA=)
                          2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: EMpsNIQvAZ94Q0hOjhZwh8J3mJwH3o4uSXUpo8jnhb0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:3c:69:5d:5a:37:53:73:f1:98:68:7b:b1:7a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
        Validity
            Not Before: May 18 19:01:04 2024 GMT
            Not After : May 19 19:01:04 2024 GMT
        Subject: CN=19ef4045df697449237ccbb99ba769782cae916e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:56:85:a8:7c:c8:6b:01:3d:5b:8d:68:59:
                    5c:31:63:02:98:f0:c8:39:ac:c5:fb:34:82:5c:bd:
                    87:75:4a:50:50:7e:2c:fc:43:62:8f:5b:51:cc:ce:
                    90:d1:8b:9d:c7:5b:eb:ef:f3:ed:86:5a:03:92:dd:
                    d5:95:5a:3d:39:c5:31:13:cd:d2:14:03:c5:b1:de:
                    e9:3b:80:7e:4c:d9:10:b1:c0:19:b1:9d:ce:56:8c:
                    96:ed:a8:0d:9d:76:9c:9d:55:59:05:a2:0f:b9:fa:
                    9e:43:9b:e6:f0:00:8f:c3:9a:b7:1a:c7:ef:71:57:
                    d5:ca:63:39:3e:ef:72:8a:56:83:37:cc:b8:88:87:
                    fc:cd:ed:04:98:12:a0:ce:13:8c:ea:f9:d5:45:c0:
                    fa:86:ba:c6:e5:ef:35:87:86:0f:c7:a0:2a:90:7c:
                    c7:7b:65:c8:63:5f:5b:59:a4:26:00:34:f8:8f:66:
                    62:a1:0e:e6:fc:dc:0c:f1:9f:7f:4d:78:9a:bd:50:
                    16:cd:73:5f:65:26:6f:3b:d6:2a:0c:e1:a2:ac:a7:
                    68:c3:dc:80:a1:1a:ba:57:f8:07:75:d5:1a:02:02:
                    32:f9:37:8a:27:44:ff:43:be:d0:d2:82:0f:79:db:
                    85:22:e9:af:ed:6e:ce:8c:df:ee:41:af:24:ec:b0:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EF:40:45:DF:69:74:49:23:7C:CB:B9:9B:A7:69:78:2C:AE:91:6E
            X509v3 Authority Key Identifier:
                keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:55:59:98:82:ea:69:94:3c:fd:16:25:cd:2f:1c:7e:60:
         29:46:b6:95:68:68:cb:34:b2:c7:09:60:71:1b:36:dc:99:39:
         ba:5c:c4:fa:d8:08:51:67:ce:57:a1:b9:77:6b:85:a6:1d:ad:
         84:a8:63:c5:a4:a9:a1:e0:3a:86:37:e3:83:90:05:6c:e9:80:
         df:db:f0:06:05:e7:ff:5c:c7:70:f7:4f:f4:eb:c2:b2:23:54:
         c7:02:08:e9:0e:35:d4:17:bd:a7:1b:9c:20:36:64:3e:0e:22:
         94:7d:d7:41:c7:3c:45:c6:b1:9b:bf:fd:50:56:10:74:4d:72:
         1d:9c:79:0a:35:a3:86:62:9e:e1:6f:c8:ca:c7:5a:96:ba:7d:
         d0:66:75:1e:b4:9c:22:b1:ea:4b:c3:aa:56:db:d5:11:78:cf:
         9b:d4:f0:86:be:92:4a:ee:bc:e8:be:3a:1a:e5:09:87:43:8c:
         fc:75:f8:bc:04:38:6f:8f:d3:d6:87:eb:15:81:57:25:43:d8:
         db:2e:77:89:c2:f7:2e:eb:0e:e0:01:7d:e6:c4:ed:3f:89:12:
         28:c0:f0:18:b6:be:74:15:bc:06:ec:96:c2:d7:af:1c:74:70:
         a4:e4:16:a4:ea:dc:13:40:69:92:5a:83:26:7f:ec:67:9c:1c:
         ee:21:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:34:06 2024 by rpki-client on console-ams.rpki-client.org