Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File:                     OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier:          bOJoj+HiDF0ZcpUmM9xBJtIFsRaNbfGDB+qWqWNKykM=
Subject key identifier:   78:E1:8E:B6:65:34:27:C0:A5:C4:0C:52:D4:E3:C0:05:38:AD:3E:6C
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer:       /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial:       018F87ED3B4DF8B2DAF4230740BF2AEB0831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number:          0CF5
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: dc/FOTZjX1yfTFlrJss5gHdckXW7L3cSEX0JmBhh9Sg=)
                          2: yuLOVDiTHMRGfWiry2L0Zvy2QGg.roa (hash: skgXqwQJNVvc3+iCn+ooBtQNX1sN/WoDd3vKmGAvabI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3b:4d:f8:b2:da:f4:23:07:40:bf:2a:eb:08:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=78e18eb6653427c0a5c40c52d4e3c00538ad3e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:07:8e:bb:fb:c8:8b:3d:24:65:7c:c1:bb:
                    57:7c:4e:22:fc:a8:23:2d:3f:cc:72:1f:d7:f4:be:
                    4e:14:ee:ba:39:21:dc:83:35:20:1d:16:2f:38:7c:
                    0e:96:b6:47:d0:a5:8b:a3:51:c2:98:8f:f3:e7:6c:
                    59:aa:e0:e9:30:cf:42:a5:9d:ff:27:a2:b6:5f:37:
                    d4:b7:69:ba:17:df:16:00:e0:f6:31:f0:bf:7a:7b:
                    e3:81:3c:1a:f2:fd:d1:f3:67:c8:36:8c:ae:af:7d:
                    7d:7d:bf:cb:e8:29:84:13:04:97:28:b5:ad:db:dc:
                    b7:30:bf:88:30:a1:b5:d7:a5:85:c0:fd:93:8c:28:
                    24:be:10:80:fe:02:72:8f:6f:a8:5f:12:90:48:c5:
                    c6:9a:df:e3:41:f5:dd:32:f7:89:4a:42:e6:d4:b9:
                    f9:cc:ec:3e:8a:f8:2f:0d:db:59:2f:25:eb:61:2c:
                    a3:d8:c2:0f:a0:a9:6c:12:41:d8:f8:89:97:8e:64:
                    03:cb:c4:5b:04:64:5d:86:3d:65:66:f6:ef:95:08:
                    8f:db:79:91:b7:17:27:41:84:17:d7:73:74:09:71:
                    67:31:a6:97:ec:48:cb:74:f8:1d:19:e0:e0:cd:b6:
                    da:cd:9f:61:c9:8e:71:5a:50:9b:b9:be:7c:f6:ce:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E1:8E:B6:65:34:27:C0:A5:C4:0C:52:D4:E3:C0:05:38:AD:3E:6C
            X509v3 Authority Key Identifier:
                keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:a2:f2:0d:a0:ec:a1:19:4d:c2:f2:66:42:d6:11:64:4c:
         90:41:07:4d:ff:aa:dd:ff:f3:27:18:f0:c9:4c:75:55:98:da:
         a8:4f:86:22:57:ab:97:a6:a1:1a:83:3c:08:7b:79:13:07:35:
         26:70:8e:57:4e:22:41:9a:86:ca:2e:11:3b:c7:08:6f:26:ae:
         a4:21:e4:37:01:4e:1b:0a:88:57:2c:49:34:08:4a:17:4f:3e:
         25:97:19:4c:5a:88:1f:b5:51:2d:5c:89:70:2a:b3:ee:a0:33:
         26:de:22:33:c0:2a:70:bb:e0:62:63:28:81:36:6e:8e:58:13:
         33:8c:47:7a:30:8c:95:17:81:ea:74:25:1a:df:16:62:25:b0:
         c0:bb:91:a2:60:03:fc:31:8d:61:32:b3:cf:39:27:3f:7d:38:
         77:97:47:77:3c:7a:48:e6:19:36:45:7d:ed:23:10:da:6e:f1:
         74:3f:15:dd:0c:cc:8b:9a:ae:8b:8b:e6:c2:5e:19:91:f1:91:
         d9:2a:42:f9:c6:18:d2:22:3a:0c:e4:14:64:a2:5f:0d:63:93:
         27:fb:28:e6:6a:a4:9d:20:fb:2c:b2:4c:35:c7:17:fa:28:e2:
         64:c2:51:d9:84:a9:8b:f4:07:27:92:d2:d9:b9:4d:34:00:0a:
         64:a1:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:46 2024 by rpki-client on console-fra.rpki-client.org