Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File:                     oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier:          AXEyBCXD7ANRKE9WDMQfXO4znaHzBMvJuPuAm9RS1fQ=
Subject key identifier:   A4:43:DE:F2:C1:71:22:37:E3:40:A5:16:B5:8E:0E:E8:71:39:4B:F1
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer:       /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial:       018F874AB4CDA1B265A23108E345A2C27963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number:          10DF
Signing time:             Fri 17 May 2024 16:02:51 +0000
Manifest this update:     Fri 17 May 2024 16:02:51 +0000
Manifest next update:     Sat 18 May 2024 16:02:51 +0000
Files and hashes:         1: 9BcAtSmgPT_RPHc9YnJONAohEZQ.roa (hash: 0rat6X2aRCx37aGIRfYJBlFMyIJa7kWcgHTZ+2pP0Vw=)
                          2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: sV6GyghPYNAk/ytMthnPAvBNsnNGyeXKxces3vOyISU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b4:cd:a1:b2:65:a2:31:08:e3:45:a2:c2:79:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
        Validity
            Not Before: May 17 16:02:51 2024 GMT
            Not After : May 18 16:02:51 2024 GMT
        Subject: CN=a443def2c1712237e340a516b58e0ee871394bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:22:de:db:c8:1e:48:ba:02:ad:38:bf:8c:
                    d5:e8:13:f8:2e:19:73:21:fa:82:50:e8:da:af:bc:
                    bc:78:29:2e:4e:8f:e7:98:3f:53:98:9c:89:ec:f0:
                    5b:f1:99:a9:62:d1:34:33:c6:5b:86:ea:9f:44:60:
                    41:60:82:e8:3d:8e:22:7c:3e:98:37:85:2c:f9:a3:
                    fb:b4:ca:db:f1:ba:66:48:7f:e7:c0:f5:ca:b6:84:
                    15:59:3e:82:da:62:29:0c:2b:3a:ff:e1:b8:43:bf:
                    90:91:29:2b:28:72:cd:6f:9c:6f:26:f1:55:ef:a9:
                    b3:3f:21:0e:9e:b1:5c:59:54:5e:91:fa:8c:49:d4:
                    8a:8e:2e:31:af:5b:a1:64:c6:7a:4f:36:99:62:5d:
                    af:14:92:d4:dc:6b:a4:f5:12:4a:36:fc:36:32:18:
                    a6:68:c0:99:6d:de:d4:10:e3:0c:84:df:d3:e0:39:
                    4e:e6:61:91:b4:c8:35:ac:d7:0e:ec:24:aa:30:60:
                    f4:80:e4:a4:e9:3a:f5:b6:ea:00:5e:0e:0b:fa:b3:
                    31:0e:cf:03:5d:ca:37:fb:0c:8b:32:cd:60:1e:32:
                    54:2c:30:0e:e7:a9:13:9b:ca:87:c0:79:11:7b:0c:
                    12:ce:31:d1:cf:a9:23:4d:a6:2b:7c:af:8b:b3:29:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:43:DE:F2:C1:71:22:37:E3:40:A5:16:B5:8E:0E:E8:71:39:4B:F1
            X509v3 Authority Key Identifier:
                keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:9c:fc:85:81:6d:dc:df:09:ac:e5:c1:e9:a5:30:e0:84:
         1f:b7:10:c9:03:1f:8a:7f:43:43:f8:ec:fa:b2:d6:6b:bf:90:
         43:c4:7d:96:67:e4:44:72:a7:58:5a:16:4d:3a:99:41:79:a7:
         d1:c6:3e:54:8c:65:e4:a3:f7:9b:6c:48:86:ff:01:6f:f9:e6:
         56:f7:46:5f:5b:6d:12:b8:13:7a:fe:ae:9d:db:4b:92:ac:32:
         ef:68:88:73:37:f9:48:62:39:06:b2:b2:fe:27:5c:54:2d:72:
         be:ab:f8:70:1c:1c:c0:70:46:47:c2:85:2c:37:79:d1:a7:8a:
         ae:60:2c:57:dd:04:2a:47:2e:55:13:d3:0b:34:70:b9:4f:56:
         d3:4c:f0:09:a7:c7:64:af:59:7a:ed:f6:32:4e:40:b5:8f:d9:
         55:75:c5:a8:43:3b:f7:78:71:39:f6:fb:19:6d:45:43:38:e7:
         23:58:bd:af:18:c2:06:29:22:fb:48:30:a9:7c:41:b9:2c:e9:
         24:b7:98:bd:78:d2:88:b3:93:c8:60:0b:fa:cc:e7:16:48:96:
         72:6a:b9:10:6a:e1:fe:f2:74:3b:6b:a6:ce:07:bc:1a:05:e1:
         49:0b:6a:71:06:6a:e5:df:43:05:f2:43:52:a6:76:8a:d6:52:
         e2:52:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:01:13 2024 by rpki-client on console-ams.rpki-client.org