Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
File:                     OuEFRh8GXOSxt7YPYU4-K__j__M.mft (raw, json)
Hash identifier:          q8AnBcDPjfP1shERO5MkNmB+bWAGoDlckm6+hgUv1Es=
Subject key identifier:   CB:AE:7C:EA:08:5F:E7:28:A0:A3:2B:70:CB:5C:92:1C:8E:B0:50:B9
Authority key identifier: 3A:E1:05:46:1F:06:5C:E4:B1:B7:B6:0F:61:4E:3E:2B:FF:E3:FF:F3
Certificate issuer:       /CN=3ae105461f065ce4b1b7b60f614e3e2bffe3fff3
Certificate serial:       018F8749A7D2BC4136127A9EA7C08A2F585C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuEFRh8GXOSxt7YPYU4-K__j__M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
Manifest number:          08F9
Signing time:             Fri 17 May 2024 16:01:42 +0000
Manifest this update:     Fri 17 May 2024 16:01:42 +0000
Manifest next update:     Sat 18 May 2024 16:01:42 +0000
Files and hashes:         1: OuEFRh8GXOSxt7YPYU4-K__j__M.crl (hash: M4HUf+KR1y1huNM+YnMnIaprYLzAc0fosiUtfPoJNSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuEFRh8GXOSxt7YPYU4-K__j__M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a7:d2:bc:41:36:12:7a:9e:a7:c0:8a:2f:58:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae105461f065ce4b1b7b60f614e3e2bffe3fff3
        Validity
            Not Before: May 17 16:01:42 2024 GMT
            Not After : May 18 16:01:42 2024 GMT
        Subject: CN=cbae7cea085fe728a0a32b70cb5c921c8eb050b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:36:bd:d3:c2:54:4b:af:bf:80:df:40:72:
                    11:35:1e:27:e3:d1:6b:0c:87:6b:0b:e8:99:2a:a9:
                    3e:6a:ae:0a:ea:b7:81:9c:58:36:9a:49:de:e4:8c:
                    83:c8:ee:21:51:25:86:ee:7b:25:33:b1:3f:0b:5d:
                    53:c6:5b:17:b1:3a:af:01:e3:6f:cf:b6:0f:c7:f3:
                    b2:6e:03:fb:03:6f:da:65:9d:4a:30:cb:9a:66:6f:
                    d5:a2:d4:ce:87:3d:ba:66:c5:6a:6a:e5:12:d3:f4:
                    e5:80:0c:f3:37:41:af:4a:7b:95:ed:66:f8:92:7f:
                    e8:a7:01:94:d0:26:15:fe:67:58:3e:30:f1:b6:61:
                    d6:fa:4d:12:ee:d4:92:c2:b8:96:e9:60:f8:6c:d5:
                    14:89:d4:ca:3c:57:c2:67:1c:73:8d:76:8f:4d:8a:
                    ea:2a:1c:32:a0:f3:77:17:f6:44:40:db:8e:d3:7e:
                    40:3d:c4:e6:84:d3:bd:af:db:f5:63:3a:dd:0c:dc:
                    6b:d9:85:fc:6e:18:17:73:69:b3:e0:7c:77:c3:c3:
                    79:d4:d8:ec:62:41:76:ff:f6:30:22:d3:c0:86:81:
                    91:81:60:6f:c2:62:47:61:9b:83:58:b8:3c:0e:53:
                    8c:5a:5d:f1:1c:08:23:58:ec:46:57:59:d7:3a:c2:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AE:7C:EA:08:5F:E7:28:A0:A3:2B:70:CB:5C:92:1C:8E:B0:50:B9
            X509v3 Authority Key Identifier:
                keyid:3A:E1:05:46:1F:06:5C:E4:B1:B7:B6:0F:61:4E:3E:2B:FF:E3:FF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuEFRh8GXOSxt7YPYU4-K__j__M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:5b:07:1d:11:9f:7c:37:56:41:b4:f9:52:9d:76:da:ca:
         54:63:ab:86:a6:7f:37:93:a5:b6:6e:17:34:60:a5:cc:d0:b8:
         bf:a5:3f:0b:7a:1a:b7:e5:bb:19:29:6c:a0:13:66:81:52:3a:
         da:10:fa:2a:c0:f7:78:27:f4:25:72:67:32:42:b4:96:51:a3:
         15:b2:48:0c:28:25:03:39:76:02:20:13:d4:63:62:6b:c9:a8:
         bb:38:7c:be:f0:de:9a:1e:ab:57:ea:ee:3b:24:6c:8a:61:34:
         f2:bd:81:bf:b8:3a:d6:ec:8c:0e:15:f9:bc:61:6b:ea:4e:ba:
         e3:05:26:2a:c8:22:bf:08:25:3b:42:17:6b:9c:c1:5e:d6:f0:
         f3:39:fe:39:8e:2c:03:c1:88:b5:e4:4e:93:20:5e:1c:a6:05:
         6a:26:77:68:57:ee:1e:9b:6c:68:98:ff:a6:5d:f6:9a:33:eb:
         be:a9:b6:bf:56:23:ac:bc:9d:61:40:5d:a8:85:09:32:3c:0f:
         cb:e2:0b:f8:be:6a:c5:2f:4f:a4:d9:99:26:fb:0b:01:28:d3:
         7d:98:d4:4c:ab:15:2d:91:25:e6:92:65:30:62:bd:5e:e2:c9:
         70:56:cd:e8:bf:4b:e5:9c:80:61:0f:c4:c9:b5:64:f2:ab:3a:
         e4:bf:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:15 2024 by rpki-client on console-fra.rpki-client.org