Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          RnIqIFVg/o5X/W6Hyy0Qln7csisvlxucdBqQIaplwS4=
Subject key identifier:   BA:09:37:BE:7E:A1:37:79:0B:7E:74:56:52:BA:95:8F:55:28:10:94
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       01905245FBD4207BD3DBDD307332F1AEEB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          11E4
Signing time:             Wed 26 Jun 2024 02:00:36 +0000
Manifest this update:     Wed 26 Jun 2024 02:00:36 +0000
Manifest next update:     Thu 27 Jun 2024 02:00:36 +0000
Files and hashes:         1: 1ALR0hi1VYmVYauVmxC1s7ZSdVw.roa (hash: LQvTReE9Kilp88mvV3z0W8zBrVDVUBTkV75n7kQbexs=)
                          2: 1tAFnbECFNcjmU_vcKCN5OSZIdg.roa (hash: OYY7YzQNALMP+t5wQQjQ6QURSMNXkpc4G9N34eI3Ms0=)
                          3: 2pn02Sm_Nz9GJj1CPU2lmN1iPVg.roa (hash: duXyeqqQkFnSoOc3RYEDJ/yo7uPZwrercJ6L3+8EjPI=)
                          4: 3-7GmlQLr1rLalz6mpiWGnBdCAo.roa (hash: eSQABfJ2n7bJ+bYF8sxBKMxEF4rDSl004n3jiWGaZ8A=)
                          5: 4ZD2S_AJzN_VK_aOSxyCGJBeF2E.roa (hash: 4ncvA+i8V7w9arIq0SDF21VGk18LdSQsYmvhy+GpJ48=)
                          6: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: Odx4gTRUBmb9oqdOQLxi0jGC6X3TQOH+hp1gRt3ioDk=)
                          7: Q1TIyJpbXDc4qNPPE6NW6EFQQ1w.roa (hash: /ZxQ72JF3LrvgUS877Cb9ylOYpF8Pl/ZOWpKfZWqRFg=)
                          8: SGQ_dQP4q4E_0a7HK4STGF2zsjg.roa (hash: 8IpIukYkISbZusPEV4PYS+sTsicJHGyceiHlwXmSWoQ=)
                          9: U23lszzF8_0f1rpLPQPWIwVMMyA.roa (hash: IRKCB1fSSpvnhSR44rxP7oFgLB9f+lkN+AV0YpFskLg=)
                          10: hSFk2rjI1wkVqPD4RBTDdAmMLos.roa (hash: iojePfKpwYIaT/LmxnJlPy36VGj+1Qz5RW4P3fm1dHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:45:fb:d4:20:7b:d3:db:dd:30:73:32:f1:ae:eb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Jun 26 02:00:36 2024 GMT
            Not After : Jun 27 02:00:36 2024 GMT
        Subject: CN=ba0937be7ea137790b7e745652ba958f55281094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:66:2f:96:86:9d:8b:4e:4b:50:b1:8e:a2:97:
                    75:e5:78:b7:99:d3:2e:b7:ff:d1:a3:c2:77:b5:5b:
                    49:b4:2c:7c:e7:40:7c:ef:49:5e:5f:2f:5d:df:10:
                    54:1f:66:3d:e0:67:5c:f1:f5:e6:ab:de:09:01:6c:
                    d2:45:ee:dc:e4:d5:f4:76:d0:a4:c4:e8:85:99:24:
                    0a:bf:8f:0f:bc:cf:2f:3f:c4:16:ca:c8:92:65:84:
                    a1:52:41:fb:4c:f0:cb:6d:96:b5:8b:3b:2c:a2:99:
                    11:9c:8b:5a:a9:a5:22:8d:09:e3:a3:a0:e7:bc:f5:
                    e9:bb:04:a4:f5:21:eb:55:f5:4b:ba:f9:52:d7:23:
                    ad:6c:88:5a:a8:57:2a:ad:5d:29:87:c7:89:0b:eb:
                    48:5c:65:58:ef:2b:31:d4:bb:74:c2:f7:a7:c5:c2:
                    28:7d:bc:0f:73:02:51:05:4d:21:08:c2:b3:ef:2a:
                    18:d7:be:9b:84:d2:fd:3b:d5:1f:ef:db:ed:98:f2:
                    16:76:da:76:e0:71:89:24:21:97:58:22:e1:2a:eb:
                    74:2c:84:3b:4e:2e:de:cf:db:ac:0a:3e:19:77:59:
                    50:59:78:62:ad:cc:c8:9f:b4:16:d7:76:97:0d:db:
                    ab:ef:83:71:e0:57:d9:6b:b3:97:95:66:28:f9:b2:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:09:37:BE:7E:A1:37:79:0B:7E:74:56:52:BA:95:8F:55:28:10:94
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:43:7e:f9:44:54:19:97:84:b4:e8:1e:10:e2:02:17:e7:
         b7:21:2f:81:d0:f5:58:8d:b3:d0:e8:8a:81:92:74:5c:14:74:
         38:bf:38:4a:41:f0:ab:52:73:01:e1:26:70:05:b5:53:03:71:
         46:99:74:e8:c5:eb:79:be:cd:03:82:51:b8:4a:68:24:80:af:
         f4:f5:33:c2:df:66:f0:bb:ae:be:82:2f:06:3a:d3:3b:e9:c3:
         43:79:0c:4d:f6:20:5c:9b:35:5d:08:d9:61:55:3d:cb:e7:6a:
         61:5f:80:89:b7:78:3d:8e:ea:76:67:12:bb:9a:3b:56:fd:fb:
         9b:4e:a4:5c:bf:40:89:36:f9:65:ee:cf:eb:ea:06:9e:b0:3a:
         78:7d:9b:31:6b:d5:c9:08:3d:51:34:d2:a2:50:f1:31:86:59:
         65:eb:9e:b2:d8:b5:44:cc:25:42:08:e4:77:cf:19:2a:e5:30:
         7e:a8:b4:13:d5:7d:00:3a:49:b6:21:b3:0f:dd:1e:f1:96:ab:
         f1:95:32:1e:be:50:1a:02:c4:01:69:e0:09:a9:15:87:95:bd:
         37:5f:56:10:0b:20:a9:dd:03:ef:dd:c3:fa:91:48:e9:a3:8c:
         ec:af:9f:e0:ff:d8:26:e0:aa:52:6d:78:c0:a9:d8:7c:34:46:
         f7:33:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:35:16 2024 by rpki-client on console-ams.rpki-client.org