Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File:                     o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier:          x+izYByQDlCM4Foa8oQHZtfoE+xI7SjVWu7YrN/JOmA=
Subject key identifier:   DF:BE:82:9C:D1:14:62:6E:06:05:4C:A8:F7:63:9B:12:8A:3A:7F:C0
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer:       /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial:       018F88248FE82F79C283D69DA103C587E204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 20:00:48 +0000
Manifest this update:     Fri 17 May 2024 20:00:48 +0000
Manifest next update:     Sat 18 May 2024 20:00:48 +0000
Files and hashes:         1: BaY5J_rigNIWISyUaov34kFuYvI.roa (hash: tV3wguCsfInRkjKxiJJzV0t40djuHsJjPjiD21qbcQ8=)
                          2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: wYFFucRqgvJo+VPtuoPRwNjWbeeDOLdKe+3EaZHwPHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:8f:e8:2f:79:c2:83:d6:9d:a1:03:c5:87:e2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
        Validity
            Not Before: May 17 20:00:48 2024 GMT
            Not After : May 18 20:00:48 2024 GMT
        Subject: CN=dfbe829cd114626e06054ca8f7639b128a3a7fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:e2:e5:05:1c:32:4d:ca:d8:8f:32:d9:8c:
                    9d:ad:b0:2b:b4:b9:84:c3:21:de:38:6d:43:1f:35:
                    a3:44:4f:2d:be:fc:7f:45:19:f6:9e:10:07:10:f0:
                    cd:73:95:5a:86:d2:23:c8:a6:bd:0b:02:93:c1:70:
                    be:37:47:50:b3:cb:b6:18:19:6e:bd:7a:ad:a0:ff:
                    86:79:3b:d3:8f:24:4d:e5:3e:94:42:b7:6d:a2:ee:
                    58:27:29:94:e3:d8:fb:ad:d1:04:97:44:d0:6c:5b:
                    bf:7a:c1:f9:f0:95:f5:70:83:61:0b:1c:2e:6a:7c:
                    d4:02:a5:e9:2a:48:0e:4e:33:a4:63:2a:a0:5e:00:
                    87:46:85:a6:67:d7:d5:9b:af:5e:ac:bd:82:3c:1c:
                    20:10:cb:ba:30:32:95:89:96:78:21:67:3a:93:21:
                    36:0e:f1:48:d6:dd:a9:29:48:13:19:f2:b4:1a:67:
                    48:13:f3:2e:59:8a:e0:42:39:8c:f5:de:d1:0a:fb:
                    a9:08:f5:9f:01:69:fa:3d:1c:b1:47:25:b6:92:76:
                    7c:a9:dd:31:6c:77:6a:27:18:61:35:2d:b5:3b:03:
                    17:e4:6a:5a:41:af:81:98:68:ea:c2:13:bd:35:db:
                    d1:9e:84:e2:dd:b6:1e:20:f2:44:bd:0b:05:81:47:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BE:82:9C:D1:14:62:6E:06:05:4C:A8:F7:63:9B:12:8A:3A:7F:C0
            X509v3 Authority Key Identifier:
                keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:16:4e:ef:72:8b:83:b4:49:b4:89:d6:9b:af:d2:72:dc:ee:
         85:af:a9:92:eb:ff:f9:da:56:77:f9:8e:0a:1c:58:77:92:9e:
         0c:68:fd:1a:63:ac:f9:10:8f:99:93:0d:46:bd:c0:0d:31:75:
         c6:b1:cf:dc:20:de:7a:8b:27:45:95:f3:71:23:f0:bb:cb:cc:
         f2:f7:5b:32:0a:27:b7:55:f1:59:9b:a2:7b:07:01:40:f8:6b:
         57:1b:ec:3e:ce:1c:3f:6c:44:73:d2:b3:01:15:22:18:5a:12:
         c0:85:60:20:99:3e:54:76:5f:80:e5:0d:76:af:d5:f0:ee:1b:
         22:73:14:9e:51:24:1a:96:58:43:45:9f:60:7e:97:fe:81:22:
         72:14:05:91:55:e2:b2:ab:67:a6:c4:f3:8c:4a:98:06:81:ca:
         da:c6:b6:bb:95:c4:00:2a:06:f4:30:f2:4b:f7:8d:c2:2a:e6:
         c5:45:24:a2:d9:7e:f2:71:18:10:47:98:e2:56:7c:22:00:43:
         8e:91:56:26:fa:10:de:77:26:25:b3:c0:fb:6a:d1:86:3c:a7:
         13:45:01:fd:df:de:f5:c1:94:98:0e:fd:8f:d8:fc:9e:ef:21:
         3b:47:e7:7e:2a:e9:2f:7a:62:41:5c:fd:9f:95:b5:9d:0e:50:
         ec:96:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:11:44 2024 by rpki-client on console-ams.rpki-client.org