Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
File:                     ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json)
Hash identifier:          Q1jFZfKgh9nZNlZDfgvHE/zk0Vsy78Huc6pstr0F9Yg=
Subject key identifier:   29:75:3D:DD:0B:3F:5F:E1:FD:7D:C2:CA:20:75:6A:AB:D6:B1:69:46
Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
Certificate issuer:       /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Certificate serial:       01905246071E6485B4DBFB9AA5E41EF952C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
Manifest number:          0199
Signing time:             Wed 26 Jun 2024 02:00:39 +0000
Manifest this update:     Wed 26 Jun 2024 02:00:39 +0000
Manifest next update:     Thu 27 Jun 2024 02:00:39 +0000
Files and hashes:         1: io8p0lgMaZ23vJuSVMvjlT_6gKw.roa (hash: KjZ34XK0v6Nq58muG4EGdb7yMS42OV0VYwRyzfh5L48=)
                          2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: 1Rg08cRSN9wBvn6qmsaf0wqVMUyePNqcdO75EiU3wYs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:46:07:1e:64:85:b4:db:fb:9a:a5:e4:1e:f9:52:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
        Validity
            Not Before: Jun 26 02:00:39 2024 GMT
            Not After : Jun 27 02:00:39 2024 GMT
        Subject: CN=29753ddd0b3f5fe1fd7dc2ca20756aabd6b16946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:42:09:fa:17:e5:d9:a5:c7:e1:6c:7c:56:
                    73:f4:7e:cd:f7:42:05:ee:81:06:2e:4e:f1:d8:81:
                    32:7a:c2:4b:85:83:ac:f3:ac:cd:e8:6f:79:0e:75:
                    5a:32:a1:55:ad:44:82:a4:6e:e0:20:90:6c:39:ff:
                    1b:bd:32:ec:27:4c:88:a5:05:1a:64:20:5c:98:29:
                    5b:48:54:e7:c3:35:58:2d:04:db:3f:a8:20:19:f4:
                    39:23:f4:dd:50:bb:e7:44:fa:28:e1:9e:65:70:ae:
                    71:3a:3c:18:11:83:e1:f1:2b:ac:b5:d0:64:9e:39:
                    c5:ae:f3:13:7b:ed:9e:c7:6c:cd:1a:c6:52:d4:2c:
                    5f:c6:82:fa:e0:4a:69:51:df:ac:d9:4f:8a:24:cf:
                    1b:b2:64:14:58:d5:5d:b2:79:91:cc:16:22:f3:2a:
                    65:64:1a:8b:81:06:15:5c:5a:26:3f:bb:ae:91:58:
                    4c:83:75:2a:b5:b1:82:49:20:18:12:35:1a:22:9c:
                    85:79:91:59:a9:07:70:53:04:14:26:18:9a:19:0f:
                    f7:45:86:b6:d2:74:7d:26:e8:c6:6a:75:41:0f:9a:
                    bc:06:5b:16:82:5e:92:f1:d1:68:42:fa:71:ed:c7:
                    19:94:53:4f:2e:5e:bc:e0:fc:0a:49:04:5d:43:65:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:75:3D:DD:0B:3F:5F:E1:FD:7D:C2:CA:20:75:6A:AB:D6:B1:69:46
            X509v3 Authority Key Identifier:
                keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:11:61:3b:03:fa:c8:6d:72:08:76:19:39:ad:c6:8d:36:fa:
         e5:89:19:f4:cc:d6:7c:ae:18:a8:74:5c:c8:c6:86:45:11:83:
         f8:e7:4a:6d:c9:fc:a4:a7:d8:60:83:24:f0:ac:fe:33:c5:8c:
         b8:38:93:17:42:08:dd:b0:a6:4e:7a:28:bc:14:3c:64:15:65:
         63:5b:13:43:71:0e:f4:3d:0d:d7:0e:45:ee:90:ef:43:ac:af:
         33:cf:d6:bd:ad:a6:66:bb:ce:6d:be:e7:6d:15:e8:bb:0c:09:
         85:bb:0a:a5:b0:4d:2a:bb:39:37:aa:62:0d:6f:e1:15:6e:b9:
         e4:cd:d7:84:29:ec:b1:4e:41:65:a8:f7:e7:d7:0b:67:0c:92:
         76:23:dd:ea:a3:3e:0e:26:bb:5f:7d:e3:5b:91:9c:8d:b0:bd:
         7e:1d:30:b1:9d:33:bd:44:ae:69:c5:4a:0e:58:93:95:d1:ac:
         18:4b:3c:88:eb:9f:f0:8d:3d:01:00:89:a8:41:60:4b:2a:64:
         8d:9e:99:38:3d:c6:dd:39:02:cb:ad:02:0e:cc:6e:72:b3:98:
         ce:11:1a:90:b8:69:0f:da:05:e9:b5:9c:a7:83:dd:0b:1e:06:
         69:7a:5e:a5:d8:b2:f3:c8:ce:e9:87:b0:48:93:66:19:c8:20:
         c1:50:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:50:58 2024 by rpki-client on console-ams.rpki-client.org