Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File:                     OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier:          XpkWA43u2ELFeCPu5JO7vbqZAGcjrpaKha/l1FJ4Cdw=
Subject key identifier:   17:D3:B8:58:CE:6C:07:E8:3D:26:EF:82:A1:C8:F4:45:4E:1C:C3:58
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer:       /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial:       01964FDAE31B2AFA89B876C841F31ED5F2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 21:01:06 +0000
Manifest this update:     Sat 19 Apr 2025 21:01:06 +0000
Manifest next update:     Sun 20 Apr 2025 21:01:06 +0000
Files and hashes:         1: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: Z0llP03J3ELbffP7KK5X6JkI3Fl3MPTuE0ukl6lRXVk=)
                          2: ctA-0p3K0spN-aqa_vSCSuEPIl8.roa (hash: 9zjfwehArRYt152AyBxRUd+hpMMW5KWg3wsX7MAnHPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:e3:1b:2a:fa:89:b8:76:c8:41:f3:1e:d5:f2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
        Validity
            Not Before: Apr 19 21:01:06 2025 GMT
            Not After : Apr 20 21:01:06 2025 GMT
        Subject: CN=17d3b858ce6c07e83d26ef82a1c8f4454e1cc358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:22:a4:3e:9e:5c:d2:f2:92:69:ed:23:11:
                    51:9a:d9:63:8c:6b:6e:15:ff:9a:8d:43:25:3b:95:
                    c0:23:95:0b:0e:f7:c9:bd:09:a6:ce:bf:5c:94:e0:
                    12:9e:f6:7b:96:88:6a:70:80:67:ac:31:2f:1d:fe:
                    14:d1:d5:05:36:4c:66:d3:d8:45:63:e9:7a:9e:79:
                    e4:91:da:70:bc:9c:2d:8c:2a:df:53:bd:5d:63:5b:
                    c9:9a:04:7a:93:7e:37:e7:35:ec:f4:bf:1a:6f:a4:
                    b3:97:49:ae:9d:9d:e7:8d:e5:93:89:3f:50:6f:a7:
                    e6:d9:ef:72:02:f6:46:43:fc:89:56:41:cd:9d:c7:
                    fc:a0:f9:ad:37:a4:90:85:76:72:83:46:a1:96:70:
                    87:4e:aa:ee:74:e4:fe:5b:e2:57:3a:e5:10:a9:7c:
                    79:73:5b:ca:9b:a1:76:11:1e:9f:73:d5:5d:cc:37:
                    e5:45:ee:6c:98:c8:d7:db:92:b0:93:54:62:72:1c:
                    06:9b:b0:c2:86:ea:22:05:bb:77:af:9f:8f:7a:d6:
                    13:ca:b1:58:a6:97:21:e5:93:16:6b:8f:31:20:4a:
                    0e:9d:0c:94:17:fc:f7:0a:77:99:f1:b6:19:e1:3b:
                    39:09:a8:e8:d0:00:64:1c:a4:44:ee:58:8a:6b:d9:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D3:B8:58:CE:6C:07:E8:3D:26:EF:82:A1:C8:F4:45:4E:1C:C3:58
            X509v3 Authority Key Identifier:
                keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:3e:fd:a9:96:35:e3:b9:12:3e:a3:80:e9:23:c3:af:dd:
         5b:bc:0a:34:e9:93:d1:bf:5b:97:3e:39:6c:9a:36:62:2b:d0:
         8d:b1:f6:8a:09:61:e7:74:e8:4e:80:8c:b2:5c:62:80:71:32:
         d8:a3:b4:f0:d4:09:fe:dc:a9:73:ec:6c:42:62:a7:0a:75:39:
         99:a1:82:ab:c1:6d:97:77:4a:e4:8c:2d:8d:a5:64:e6:35:2c:
         4e:73:5b:dc:ef:8f:d6:57:12:b6:ba:f8:7e:52:db:89:c2:96:
         07:f0:ab:13:ed:5f:9c:17:94:9a:16:98:8b:6a:a9:36:15:b9:
         35:f5:87:7a:7e:34:5f:bb:8d:28:00:65:83:09:2e:86:57:7c:
         cd:21:f0:a0:48:cb:10:35:bf:3b:94:8d:c8:15:a5:df:92:13:
         9a:4e:dd:e9:a3:f1:e4:13:08:99:df:22:5d:4c:53:ee:51:20:
         aa:a9:d9:33:9e:e1:1c:06:f6:a3:46:3c:b5:fe:47:ee:14:45:
         0f:77:27:a4:4b:b1:ff:4f:e2:f3:b7:a0:0a:76:d9:a5:53:38:
         8d:b7:70:b6:80:4a:25:72:b7:6b:4f:21:38:5b:78:4a:d5:fd:
         15:6b:c7:1b:71:c8:94:b4:1c:1c:15:c2:b9:da:5e:df:b3:7c:
         d9:25:73:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2uMbKvqJuHbIQfMe1fKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NGM2ZjczYjNjODM4ODFmZmM4ZTY2MDNhNmI2NGY0NTM2
NWFjZjEwHhcNMjUwNDE5MjEwMTA2WhcNMjUwNDIwMjEwMTA2WjAzMTEwLwYDVQQD
EygxN2QzYjg1OGNlNmMwN2U4M2QyNmVmODJhMWM4ZjQ0NTRlMWNjMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsUipD6eXNLykmntIxFRmtljjGtu
Ff+ajUMlO5XAI5ULDvfJvQmmzr9clOASnvZ7lohqcIBnrDEvHf4U0dUFNkxm09hF
Y+l6nnnkkdpwvJwtjCrfU71dY1vJmgR6k3435zXs9L8ab6Szl0munZ3njeWTiT9Q
b6fm2e9yAvZGQ/yJVkHNncf8oPmtN6SQhXZyg0ahlnCHTqrudOT+W+JXOuUQqXx5
c1vKm6F2ER6fc9VdzDflRe5smMjX25Kwk1RichwGm7DChuoiBbt3r5+PetYTyrFY
ppch5ZMWa48xIEoOnQyUF/z3CneZ8bYZ4Ts5Cajo0ABkHKRE7liKa9kaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfTuFjObAfoPSbvgqHI9EVOHMNYMB8GA1UdIwQY
MBaAFDlMb3OzyDiB/8jmYDprZPRTZazxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEt
Njk2OGUyZDgxODI2LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wYzNkMmEtYWRiNy00OWU5LWFkZmEtNjk2OGUyZDgxODI2
LzEvT1V4dmM3UElPSUhfeU9aZ09tdGs5Rk5sclBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi0+/amW
NeO5Ej6jgOkjw6/dW7wKNOmT0b9blz45bJo2YivQjbH2iglh53ToToCMslxigHEy
2KO08NQJ/typc+xsQmKnCnU5maGCq8Ftl3dK5IwtjaVk5jUsTnNb3O+P1lcStrr4
flLbicKWB/CrE+1fnBeUmhaYi2qpNhW5NfWHen40X7uNKABlgwkuhld8zSHwoEjL
EDW/O5SNyBWl35ITmk7d6aPx5BMImd8iXUxT7lEgqqnZM57hHAb2o0Y8tf5H7hRF
D3cnpEux/0/i87egCnbZpVM4jbdwtoBKJXK3a08hOFt4StX9FWvHG3HIlLQcHBXC
udpe37N82SVzUA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:22 2025 by rpki-client