Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File:                     aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier:          yAsBgvZ3CHDmPeTLHMwlD2at55zT5tpAMXWq00yRiCs=
Subject key identifier:   7D:5E:4A:92:81:35:7B:46:70:9F:A1:B7:49:36:81:EC:90:36:B3:AD
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer:       /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial:       018F874994386D5D25C16D447669CE2773AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number:          0BE5
Signing time:             Fri 17 May 2024 16:01:37 +0000
Manifest this update:     Fri 17 May 2024 16:01:37 +0000
Manifest next update:     Sat 18 May 2024 16:01:37 +0000
Files and hashes:         1: 3LLeyspx8PktuJaU52lr2bT2Of4.roa (hash: GiDi7xQVJqU15izBUUZWpU+8GgvIMeQWy1gjIQy+ASw=)
                          2: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: IQMKgAwVhheOoZATvnar+2jORyU3/9YagovbliUVkUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:94:38:6d:5d:25:c1:6d:44:76:69:ce:27:73:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
        Validity
            Not Before: May 17 16:01:37 2024 GMT
            Not After : May 18 16:01:37 2024 GMT
        Subject: CN=7d5e4a9281357b46709fa1b7493681ec9036b3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:31:46:54:52:e8:06:bb:3d:e1:9a:83:bb:
                    14:b2:0e:c2:0e:ab:02:bc:34:88:c8:d3:ad:af:28:
                    79:e4:76:98:72:1a:f8:32:9c:7e:ac:e1:c2:cb:60:
                    ff:5c:f6:6f:db:02:42:b5:d4:28:c1:c2:6f:14:f3:
                    fa:e6:4f:3e:03:a3:12:43:70:8c:da:eb:c0:4d:80:
                    f5:70:b1:b5:58:ee:71:b3:3c:8c:a4:c7:02:c1:73:
                    90:59:e2:4b:fd:a6:c4:40:74:03:e9:b0:55:45:a6:
                    3e:aa:d5:18:55:5c:6f:a5:8f:fd:39:30:91:f5:2b:
                    c1:2b:4c:70:ae:9d:cd:b7:4a:ed:0a:cd:3d:8a:7b:
                    52:21:df:bf:f0:f4:0f:25:69:20:3f:c5:b6:63:3c:
                    ab:bb:07:4b:ce:b5:9f:80:87:5f:da:57:a6:45:a2:
                    4d:08:8a:8e:11:27:9e:e9:89:20:7b:7b:99:83:7f:
                    e3:d1:21:ac:9b:0b:e0:05:fc:7e:0a:f9:9e:1a:28:
                    05:75:0b:2f:03:d6:ff:3c:a0:8c:13:03:36:e8:55:
                    26:6f:0d:a5:d5:d4:b1:84:7c:7a:3b:06:ec:b2:ca:
                    57:7f:5c:87:11:07:37:96:bd:49:9d:29:1c:de:98:
                    eb:e9:31:21:08:57:4e:0a:40:43:af:cb:15:fc:bf:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5E:4A:92:81:35:7B:46:70:9F:A1:B7:49:36:81:EC:90:36:B3:AD
            X509v3 Authority Key Identifier:
                keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:26:73:6d:3d:3c:5c:6d:9e:90:b0:f8:4f:79:de:48:5d:c7:
         88:c5:01:44:89:a2:4a:ac:17:41:15:86:3b:97:66:7d:ef:b6:
         18:61:a1:6f:30:f2:43:2f:84:2c:9f:d5:24:b8:7b:83:b0:38:
         e9:04:1c:fd:da:33:0c:02:fa:41:c4:b1:fa:fd:99:27:50:9d:
         04:af:63:ff:a6:94:ff:60:a6:06:05:18:8c:99:1a:df:30:71:
         b0:67:f7:e6:b6:24:7b:11:b7:1a:76:f9:45:a9:5a:a2:da:60:
         de:05:32:47:89:54:27:6b:23:fb:2e:57:9e:d1:a7:0b:7a:04:
         c3:1b:e4:ee:44:6b:1c:60:74:31:ef:97:7d:16:b9:e0:c9:29:
         08:5c:91:80:76:15:46:88:b8:84:5e:df:e2:a1:d5:f5:7c:04:
         71:e2:52:84:b7:d4:f4:20:0f:1c:6b:3a:9e:82:09:8e:e9:4e:
         c1:16:10:c6:2d:e1:9f:0e:b6:5b:37:0c:b5:4d:96:e3:e3:2d:
         d4:d2:5b:88:17:7c:9a:b3:c5:cb:d6:d3:ae:c7:4b:8f:b4:96:
         c2:17:2f:71:71:c1:83:e6:9c:6d:d8:5a:f7:bb:29:1d:0b:67:
         1e:a4:25:6e:65:f8:ce:ba:e8:d9:26:b5:b4:83:8b:ec:b2:59:
         15:a6:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:27:24 2024 by rpki-client on console-fra.rpki-client.org