Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File:                     DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier:          Su72vvjAPW34DGLl6Y/33mNa132nyOMad9bbYUbvcY0=
Subject key identifier:   F2:AE:F8:7C:96:30:15:AA:30:5E:FC:CA:B7:0C:F3:82:7C:5B:CE:CE
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer:       /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial:       018F38F72801F341970312B69B0BB59E6A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 11:01:12 +0000
Manifest this update:     Thu 02 May 2024 11:01:12 +0000
Manifest next update:     Fri 03 May 2024 11:01:12 +0000
Files and hashes:         1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: oyGrTkRUK4nvQYlBKxKmZcEuqWkxKhUKkJrcR4G3rFs=)
                          2: SAEoiBnx1yT3ztOk-5cfD2JdBuY.roa (hash: icJuTUwJbwZGlsNa6r/yMYu5GVuBkng4g+d0J39KI3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:f7:28:01:f3:41:97:03:12:b6:9b:0b:b5:9e:6a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
        Validity
            Not Before: May  2 11:01:12 2024 GMT
            Not After : May  3 11:01:12 2024 GMT
        Subject: CN=f2aef87c963015aa305efccab70cf3827c5bcece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:34:2b:1e:5f:2d:f1:09:b0:ba:ec:ce:c1:
                    7a:67:01:e9:d0:f5:d9:4a:ab:2d:c5:02:55:68:fa:
                    1e:ee:2f:72:28:60:2d:33:79:8b:1c:d1:f0:24:8a:
                    40:6c:57:8c:39:a3:76:bc:4a:aa:12:22:72:19:e2:
                    0d:53:4a:64:ca:87:1e:4b:e4:4c:7f:22:94:c6:56:
                    e3:d3:be:b4:a8:76:85:15:37:2c:e7:04:ac:54:4b:
                    fb:53:99:c6:cf:e6:35:b3:4b:09:fa:b6:cf:9f:b9:
                    36:d4:b2:d1:11:05:93:46:aa:d7:29:be:f9:a5:5e:
                    ef:ba:7c:e1:2d:9d:01:ed:5c:1d:a8:97:67:9e:e7:
                    f4:db:10:cb:0e:e2:5e:94:cf:d3:da:8f:68:16:a3:
                    73:ad:06:db:56:f1:51:43:a8:6e:ff:fd:ae:87:58:
                    24:f3:9a:6d:00:8e:77:27:69:66:26:f7:69:68:1d:
                    e2:4f:82:b0:ca:5b:b4:05:2d:93:ea:34:8a:37:f2:
                    2f:c2:08:e3:6c:45:a0:8f:d1:27:4d:96:e4:ee:8b:
                    39:81:ae:84:6b:dd:69:3d:82:be:2f:f4:67:11:f4:
                    cf:c7:05:f4:af:a5:6c:4a:bc:e2:6f:c6:42:50:77:
                    b8:74:44:b0:7b:68:20:e8:96:8c:58:7b:bd:8c:c5:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AE:F8:7C:96:30:15:AA:30:5E:FC:CA:B7:0C:F3:82:7C:5B:CE:CE
            X509v3 Authority Key Identifier:
                keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:a8:bc:a3:54:39:26:cb:80:bf:0f:c9:20:32:4e:3d:68:
         4c:76:11:ee:d4:48:74:c0:8d:2a:a2:b3:32:f5:87:94:e7:c7:
         bc:d7:d5:57:92:db:cf:ab:10:d3:8a:44:94:16:56:4a:3a:8a:
         1f:4e:52:91:1c:7a:62:f0:88:c5:66:86:08:ea:d0:bf:b0:9e:
         e6:36:45:bd:fc:e5:ff:97:7d:79:82:49:8f:e0:33:55:d6:68:
         8c:f0:80:b0:98:5b:23:f5:79:2a:06:75:44:e5:be:31:28:9b:
         76:b1:62:a7:cb:dc:f3:fa:43:53:e4:26:77:7e:e4:7c:3b:89:
         8a:2d:2a:6a:5a:fe:d4:eb:62:2f:ff:cd:be:e4:d6:f6:3c:46:
         a8:88:55:2f:d8:4e:36:d9:ee:ef:9d:b2:80:52:7f:67:d6:6d:
         a5:63:d9:7a:bb:56:6d:52:b9:11:f4:96:a0:09:a3:6e:34:bb:
         3a:f4:d9:8b:fe:ce:c0:dc:3d:a3:15:50:95:9c:60:2c:a9:24:
         1c:2c:d3:0d:20:d0:3b:fd:7f:0b:9f:ce:95:e7:2d:c2:4d:2f:
         ea:fc:9e:13:a1:f4:a5:e2:fc:85:b6:32:f3:ff:7a:cb:e1:12:
         42:86:8d:31:cb:3e:b8:8d:e4:22:d0:11:de:c4:a9:d7:e7:01:
         5b:63:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:48:19 2024 by rpki-client on console-ams.rpki-client.org