Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
File:                     oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json)
Hash identifier:          gWcNRmzLeqdpm8btLaqfjhDc1XgsiYtIRmLaqkir+P8=
Subject key identifier:   8D:59:4E:F9:98:37:52:18:38:94:AA:58:09:D6:10:E5:F3:94:C4:24
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Certificate issuer:       /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial:       019062CBDB3EEB5AA36AEFE36E2C672CA65E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
Manifest number:          0173
Signing time:             Sat 29 Jun 2024 07:00:45 +0000
Manifest this update:     Sat 29 Jun 2024 07:00:45 +0000
Manifest next update:     Sun 30 Jun 2024 07:00:45 +0000
Files and hashes:         1: 3ooXVVLaxpn35kqYTkRMjEWcFK0.roa (hash: iQbFYzdFb8hAZhD2xi+7yfuSub61EWzsoHZAvPrS9YQ=)
                          2: DSBIgen22uQ1PpMOXkWnac4FsTk.roa (hash: SbumEdKt+j9WlbSBEc7DSMdycytbbvDydmsqG7jKiaY=)
                          3: Oxlwx2y-u0yEL_U1OeBQ2DdS_dQ.roa (hash: 1mUDs2Y4ocK65k0CIgWuuU/ABCa/1GZVby13GciipKs=)
                          4: oFCt0y-rBTuWQ29KQZIwXCdigx0.roa (hash: ORZEjLFO0bR3G+KvRzXLiPllNiXg/e9NclPmkO03YJY=)
                          5: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: HQjFuBPH1sqmMjyCgcFP/yEufB8u8Gz+EWek4x1bEWY=)
                          6: vtoIR7CDCtVXVw7wK96OrlbNNis.roa (hash: qT+0uKrha6zBoJqyq8roqNKesUB/TLEjJahRlCyKRFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:cb:db:3e:eb:5a:a3:6a:ef:e3:6e:2c:67:2c:a6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
        Validity
            Not Before: Jun 29 07:00:45 2024 GMT
            Not After : Jun 30 07:00:45 2024 GMT
        Subject: CN=8d594ef9983752183894aa5809d610e5f394c424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:89:f1:da:3d:2d:43:9a:f2:fa:c2:eb:45:
                    84:14:c0:fc:25:58:b3:cd:d7:e8:dc:e0:1a:15:22:
                    b1:70:2c:7f:33:9d:58:41:cc:c1:c7:e2:19:94:e2:
                    5d:40:a9:ab:c8:07:15:d1:5f:b3:99:da:c5:5b:68:
                    e6:f4:9d:6e:aa:d4:a1:06:64:af:f2:e9:4b:4e:d3:
                    c5:ea:ff:08:2e:27:b3:1a:00:04:92:7b:a7:4b:13:
                    35:f3:7e:9e:31:b2:8a:06:cc:37:d2:36:94:51:37:
                    e4:85:1d:00:7c:5c:f8:f1:71:a2:10:ad:89:cb:a9:
                    00:bc:33:8a:31:38:de:0f:6f:e6:88:c9:ce:7f:ce:
                    88:be:44:db:92:d9:e5:f2:d0:0a:a5:80:dd:15:6e:
                    65:46:7b:47:4e:7f:5f:73:fc:ee:ab:21:8e:8b:d1:
                    65:5d:a3:0a:1b:9e:ac:8b:27:da:9a:ab:43:c2:55:
                    fd:aa:70:55:a3:f2:ec:7d:4a:2a:3d:fb:87:0a:a5:
                    69:64:5a:b3:06:69:8c:f8:27:bc:cb:51:1c:73:1e:
                    39:62:fe:11:b9:4f:42:f1:a4:75:c5:99:79:6d:f9:
                    f2:dc:8c:22:f1:21:a5:cc:e0:72:7c:9e:68:76:ac:
                    ac:30:67:04:81:9b:a0:56:59:fd:21:1c:11:89:ee:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:4E:F9:98:37:52:18:38:94:AA:58:09:D6:10:E5:F3:94:C4:24
            X509v3 Authority Key Identifier:
                keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:d3:08:8e:4b:86:7e:66:21:f1:37:5b:3c:f2:48:d4:7a:
         b1:bd:a5:2e:34:ec:d3:74:56:0e:b0:a3:95:6b:67:06:a9:17:
         55:20:ea:f6:36:e6:10:86:17:ff:c0:74:92:ad:d7:97:c4:5f:
         3c:83:86:19:69:32:12:4c:9d:f7:50:34:74:0f:a9:da:35:94:
         a8:f7:4c:26:68:32:6f:86:61:53:4a:d6:b8:75:5c:bf:e8:33:
         52:02:36:9c:b0:dd:d0:75:87:ae:d7:15:4a:b9:99:cc:1b:d1:
         31:fa:7b:15:36:05:69:fe:af:40:e9:a3:57:ef:8e:cb:0c:6a:
         2a:22:7d:74:62:08:01:80:49:bb:80:e9:44:b4:cf:6e:5a:ff:
         ae:a1:d8:e3:e1:c3:49:04:f9:03:e7:f4:f5:7a:e8:6c:8a:ad:
         8b:5a:a2:06:e8:a4:26:6c:3e:35:5d:3d:4e:d9:27:78:0b:db:
         79:ad:4f:9b:5d:44:54:93:c1:ed:fc:ff:ab:e2:b8:40:f6:26:
         70:46:dc:f4:c5:e4:e1:83:72:e7:ed:1c:1c:d2:f1:0c:e8:4d:
         8a:b3:0d:df:71:0a:88:c9:df:7a:a0:0b:a0:a0:a8:2d:1f:27:
         b6:7d:2f:c4:cd:e4:de:77:bf:7f:29:f7:e7:7f:5a:67:21:6f:
         85:cf:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 10:52:44 2024 by rpki-client on console-ams.rpki-client.org