Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft
File:                     oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft (raw, json)
Hash identifier:          SE8/I451UXyZlGcYBswLiHdomEVK1aoqKHFdJX7WtFA=
Subject key identifier:   48:BB:FA:A3:25:FA:45:52:47:57:A0:F6:7B:F3:AA:72:76:0F:5D:39
Authority key identifier: A3:12:D1:D8:7D:7D:48:F0:EF:51:FC:91:2B:96:72:C3:F7:3E:CB:E7
Certificate issuer:       /CN=a312d1d87d7d48f0ef51fc912b9672c3f73ecbe7
Certificate serial:       018F87492FE9D6816D1C645B541F7D710230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft
Manifest number:          0713
Signing time:             Fri 17 May 2024 16:01:11 +0000
Manifest this update:     Fri 17 May 2024 16:01:11 +0000
Manifest next update:     Sat 18 May 2024 16:01:11 +0000
Files and hashes:         1: ibv39Ay3PJbMdntufQht56n0Zbs.roa (hash: dro2yZ1kMlvQloAU22rhnene53Po07NmAGCSu5zovkk=)
                          2: oxLR2H19SPDvUfyRK5Zyw_c-y-c.crl (hash: KkG1/2e8jaK2wddcaKowYdTVUxs+/tdZ5IXlBO1yXh4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:2f:e9:d6:81:6d:1c:64:5b:54:1f:7d:71:02:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a312d1d87d7d48f0ef51fc912b9672c3f73ecbe7
        Validity
            Not Before: May 17 16:01:11 2024 GMT
            Not After : May 18 16:01:11 2024 GMT
        Subject: CN=48bbfaa325fa45524757a0f67bf3aa72760f5d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:f0:ba:30:4b:ec:45:5c:74:ef:ea:4f:da:
                    e6:01:54:ac:06:d6:95:7d:33:95:4a:92:ff:55:1d:
                    06:11:85:58:3f:2b:2f:a1:0f:2a:1e:99:b3:06:5c:
                    a7:2f:03:d4:3d:f4:81:c5:66:51:81:46:26:2f:04:
                    d6:7a:31:04:04:fe:5a:1f:ba:dd:a4:ac:be:cc:e9:
                    1e:58:1e:de:03:85:59:73:0e:bb:b2:7c:3b:6b:d0:
                    12:44:54:6a:cf:36:1e:ed:2a:cd:b8:e8:57:17:32:
                    b2:6e:72:0f:04:9a:c9:f4:13:f9:cc:62:1b:0d:8a:
                    f8:89:76:db:ed:13:51:4a:55:16:b5:51:6d:8d:a5:
                    77:07:42:a9:9b:c3:7a:3c:05:bd:62:ce:60:60:9a:
                    5b:4d:e6:93:b6:c8:23:d6:20:81:af:56:b6:e2:d2:
                    90:58:63:6a:e5:92:12:eb:0a:64:54:30:df:7d:4c:
                    53:d6:a9:a7:a0:cd:3d:66:fe:2e:38:08:eb:43:fd:
                    97:98:07:e0:6f:f4:ab:8c:48:be:c9:53:92:dc:7e:
                    ee:bc:c1:03:73:17:4d:a1:17:5e:b3:27:ad:b2:62:
                    01:ec:e9:ca:dd:4a:aa:a3:8c:62:49:d4:aa:49:ab:
                    19:8e:49:d2:e0:68:be:52:a6:3f:e7:a5:ab:9d:39:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:FA:A3:25:FA:45:52:47:57:A0:F6:7B:F3:AA:72:76:0F:5D:39
            X509v3 Authority Key Identifier:
                keyid:A3:12:D1:D8:7D:7D:48:F0:EF:51:FC:91:2B:96:72:C3:F7:3E:CB:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1a:b3:52:e0:8e:e8:9b:12:b9:9b:87:36:85:07:71:e5:78:
         c9:69:f8:72:20:b9:c7:04:39:85:c2:6b:01:88:04:14:83:fd:
         12:fb:c6:49:8b:9d:04:5c:ad:7a:4c:bd:0e:19:d7:16:50:dc:
         5d:60:8c:4f:32:6e:cd:9a:04:b9:4c:0d:f2:df:40:7a:1b:e9:
         0c:5d:d7:83:e4:f2:5a:58:bd:a5:9c:6d:d6:a6:f1:7f:bc:9c:
         33:ce:0d:38:af:3c:f4:81:30:f2:37:43:5e:79:a1:16:61:99:
         b5:7f:7c:3a:d5:77:df:c4:8e:dc:84:4e:fd:8d:f9:c1:c3:43:
         30:a4:60:61:3a:1f:e4:d7:aa:1c:64:3e:bc:8d:4c:49:dc:03:
         18:ff:f3:87:26:d3:d6:73:ff:70:4c:03:25:3d:10:41:0d:27:
         bd:b3:59:60:74:3c:dc:fe:fb:ac:1c:18:00:cb:23:76:90:d1:
         4b:42:c0:81:de:86:1e:9a:2c:e7:17:dc:ee:4f:91:be:a2:f3:
         e5:a0:2a:bc:67:d9:d0:fc:b1:f9:3d:84:44:d1:08:8e:7e:9a:
         10:dd:91:36:9a:92:50:44:ad:1a:eb:ce:4a:bb:92:db:d0:61:
         e0:25:a4:0f:3d:f9:c5:62:71:a3:ee:07:26:3f:59:37:00:bc:
         38:80:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:35 2024 by rpki-client on console-fra.rpki-client.org