Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File:                     0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier:          ZGJyTy5RSQmrFMoFo8/fX/6YbjRW805uvaGZgtdlbIk=
Subject key identifier:   73:54:42:89:08:4A:AA:38:53:A2:B4:43:59:10:50:37:E0:8B:58:3B
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer:       /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial:       01902311C907DBB1A8F44D612E00C8333477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number:          0B39
Signing time:             Sun 16 Jun 2024 22:01:26 +0000
Manifest this update:     Sun 16 Jun 2024 22:01:26 +0000
Manifest next update:     Mon 17 Jun 2024 22:01:26 +0000
Files and hashes:         1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: Y18l+ObofHpChbmoUi1LfepHqPGt03/6cHcAEeXooEU=)
                          2: Pfd9uLKOETdr6YTqfKMplIWUh4k.roa (hash: zXc7hMC0z3vNfPZLo7csYBHZ/ASJRgX7VOGpIsNiQ58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 22:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:23:11:c9:07:db:b1:a8:f4:4d:61:2e:00:c8:33:34:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
        Validity
            Not Before: Jun 16 22:01:26 2024 GMT
            Not After : Jun 17 22:01:26 2024 GMT
        Subject: CN=73544289084aaa3853a2b44359105037e08b583b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:54:86:cc:d6:ff:76:93:3b:12:95:54:24:
                    08:ac:e2:2f:0c:f3:5b:7f:90:71:51:f6:0c:fd:2c:
                    02:c7:0d:e3:a9:92:2e:e6:bd:c4:91:00:0c:16:11:
                    f2:9d:cf:36:e0:59:38:44:59:5d:08:f3:10:88:f5:
                    f7:51:8c:10:10:5b:a7:8a:61:3a:c0:6c:1f:55:9c:
                    95:5d:24:28:02:02:75:ae:34:6a:ba:02:d9:b9:24:
                    e2:1c:1b:9e:3d:0f:7b:5e:13:77:78:1c:8f:d4:7d:
                    2b:c0:0f:47:1c:15:db:22:fe:4e:b0:cc:a5:8c:a2:
                    f3:6c:5f:bd:5b:17:6d:48:08:ce:f9:4f:06:44:da:
                    90:92:2b:13:e9:4c:8d:13:f5:2f:9e:ce:21:62:97:
                    6c:02:ce:86:10:5c:d5:2d:84:fe:0b:70:7b:b0:d8:
                    bd:7c:be:c2:cc:b8:0d:84:05:51:c1:67:7b:1e:2b:
                    86:99:5a:c9:98:fe:b0:1a:1c:d3:6d:40:54:74:8b:
                    3b:b4:fd:3d:b0:98:b6:8f:15:83:d5:d1:08:2f:cf:
                    63:53:14:1c:13:87:7e:dc:82:bf:cc:08:1d:c2:59:
                    bd:dd:f7:c7:c3:7a:0e:0c:0e:67:e7:91:eb:f1:59:
                    ac:e2:d0:cc:b9:b7:21:95:b9:b2:86:a8:ac:0d:0a:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:42:89:08:4A:AA:38:53:A2:B4:43:59:10:50:37:E0:8B:58:3B
            X509v3 Authority Key Identifier:
                keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:21:20:88:e2:40:86:54:02:d5:49:3f:a5:1c:e5:90:b2:88:
         a2:a8:7f:0a:2e:46:3f:c6:ef:34:04:96:57:b3:47:7b:ed:c4:
         f9:f6:80:34:a3:41:7c:18:28:4c:a3:0a:e0:fc:85:9e:8e:dc:
         55:30:d1:62:6f:ba:60:d0:93:a2:c8:1a:a6:59:db:15:d4:c4:
         c5:6e:60:a0:04:fb:28:7e:5b:a5:53:bf:39:60:91:39:50:57:
         83:f8:a2:05:34:a3:d9:92:17:8c:64:6e:ba:b5:ea:dd:33:83:
         24:e5:74:29:17:1f:02:b5:ef:9e:42:e2:1a:3e:eb:7c:98:e1:
         8d:2b:12:f2:d2:07:4b:11:19:7f:6a:8d:f9:be:27:3a:cc:53:
         15:d8:1c:30:3d:1c:6d:ed:82:78:c7:30:ac:10:4e:a0:e8:a8:
         f8:0e:35:2e:a8:90:69:94:a0:1e:4e:ea:a5:d1:c9:6a:20:a0:
         74:bc:50:14:ce:f4:e4:f2:23:8f:95:1a:90:11:c5:e5:3e:57:
         4e:ba:68:a7:f7:55:76:73:1a:59:47:f1:51:e0:f6:54:31:9e:
         f9:bc:61:cb:82:94:87:1b:9a:e2:84:c3:c1:5d:cd:fc:53:44:
         e8:9b:90:c8:8f:bb:70:3a:9f:69:e5:25:cb:6b:44:8b:8b:d6:
         60:5f:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 06:18:22 2024 by rpki-client on console-ams.rpki-client.org