Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
File:                     OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft (raw, json)
Hash identifier:          7EwBLTaDL/CqOheSSU5Hk6+ma7Ae0krpBQwxZ8Q5/PU=
Subject key identifier:   74:12:59:C9:3C:32:93:7A:63:66:45:7C:D4:5E:08:B8:8E:B2:07:9E
Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
Certificate issuer:       /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Certificate serial:       018F874941146CB49502A74BA0E29CF34AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
Manifest number:          10DD
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl (hash: JHlJAMR9+OcKHk58kt4mJw8hi4OUN8QxzZQPTh1Dios=)
                          2: a0SjMImekPxTMhxflVUxKkfI67U.roa (hash: KX3Evs5O+FtvHFmurNlWzhI7z5fW54IpRDhPGUSydds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:41:14:6c:b4:95:02:a7:4b:a0:e2:9c:f3:4a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=741259c93c32937a6366457cd45e08b88eb2079e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:76:e8:fd:a9:4a:4d:92:35:6b:ea:3f:f8:15:
                    c8:32:01:73:6c:c5:05:df:24:64:c3:13:33:d5:ff:
                    0d:80:91:29:f2:bb:79:8f:0a:02:34:71:79:b4:87:
                    ab:c6:14:3b:12:84:7c:09:7f:bb:82:7b:45:6c:0b:
                    dd:1c:2d:ad:fa:39:31:dd:a1:4a:b3:6c:cd:3c:ba:
                    33:c9:b8:3c:a8:b6:d7:a2:01:de:9e:31:16:39:b0:
                    55:71:8e:c8:b8:83:21:e8:5a:aa:12:76:9e:32:ad:
                    91:f8:81:d3:bc:18:ed:c5:77:ca:36:98:65:ff:ad:
                    d1:5e:93:1e:67:d6:b4:cc:9e:78:f5:77:cf:41:eb:
                    92:18:01:9c:39:e0:c3:d5:07:a3:46:2c:f9:31:0d:
                    55:5b:61:1d:af:cd:86:6c:2f:db:bb:9b:67:07:92:
                    f5:88:39:15:89:49:cc:61:87:0e:15:49:a7:98:7c:
                    95:b6:1f:cf:ba:af:e9:bd:02:6a:4f:d4:3e:43:ab:
                    51:37:41:4a:18:f2:da:c2:71:fc:cc:44:f0:79:69:
                    93:46:c0:17:53:8f:b6:0f:33:d3:63:2f:1b:79:45:
                    e3:9a:2e:4b:46:36:f3:a1:7e:69:4c:7f:22:da:d0:
                    b5:ba:6a:76:f8:f5:12:6a:cf:67:00:71:f0:26:51:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:12:59:C9:3C:32:93:7A:63:66:45:7C:D4:5E:08:B8:8E:B2:07:9E
            X509v3 Authority Key Identifier:
                keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:45:d2:87:e6:57:e5:ff:a5:07:5e:32:7b:db:98:8f:b6:
         2e:ab:75:ac:93:ab:b1:d2:77:fb:ad:8b:15:e5:2d:d7:cc:4e:
         13:8b:2f:78:7e:0a:52:f0:a0:9f:b5:e3:2e:fa:ab:57:3d:ed:
         4d:85:a7:c5:cb:c1:7f:f5:fa:d9:8d:0e:99:14:1a:c3:1d:26:
         11:7c:d6:26:ac:e7:78:9c:7a:4c:50:e3:7c:10:91:81:d9:71:
         fb:eb:e7:0a:a9:bb:d4:a7:52:d2:79:97:0d:73:82:0e:14:0d:
         b3:2a:9a:00:a9:11:86:f7:f0:5b:bb:13:4d:7f:9a:4a:32:3c:
         18:10:13:6f:6a:b7:8f:94:15:88:e2:b4:bc:78:8c:92:3b:42:
         8e:7e:2b:63:13:51:48:b8:61:31:f5:c0:a9:80:7f:d0:37:73:
         45:ba:1e:b9:9e:63:7d:d1:9c:2d:94:bf:d7:47:cc:35:64:7d:
         ef:ac:8f:06:3b:a4:68:74:0c:0f:ef:2e:2f:57:89:51:3c:94:
         86:02:9d:f9:a7:1e:8b:65:13:92:0b:2e:6e:cd:38:44:e3:eb:
         2b:1f:03:bf:10:f4:34:e1:6d:4c:18:8f:65:8c:6e:2e:76:23:
         8e:ef:ab:79:c5:d1:b1:3b:f0:66:d5:41:e2:15:20:0d:8f:8a:
         e5:70:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:57 2024 by rpki-client on console-fra.rpki-client.org