Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File:                     DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier:          vUCfC93O8j6VMv+3fwkhcwMYwdFaB1aM0gIJmcdXYwk=
Subject key identifier:   0A:BB:DE:28:B8:E9:7D:AA:CE:94:39:0E:53:69:00:AE:79:98:5D:0A
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer:       /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial:       0193572DCC4F657D08FC33DB2869D5F56519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number:          05FF
Signing time:             Sat 23 Nov 2024 04:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:39 +0000
Files and hashes:         1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: vOJHnQFUrT2gisYqEUhSkajpGuNsKBBHg2TpkG72VMM=)
                          2: I50yJMmujcvyUcNjdw5Zu2sBYcQ.roa (hash: djbq/Nyrc27MmDQ5s4HWqjan48sjl1k4hdk9Nzc9RaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:cc:4f:65:7d:08:fc:33:db:28:69:d5:f5:65:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
        Validity
            Not Before: Nov 23 04:00:39 2024 GMT
            Not After : Nov 24 04:00:39 2024 GMT
        Subject: CN=0abbde28b8e97daace94390e536900ae79985d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:d6:a3:6a:2e:ba:6e:00:02:e3:1f:b6:67:
                    1c:62:7c:96:58:d5:5c:84:7c:4e:1a:0b:78:48:47:
                    0c:d3:50:05:4f:48:49:be:28:2b:6d:fe:ae:76:0f:
                    2e:0f:28:a8:b4:46:5b:d7:b8:20:4f:2f:55:f5:d8:
                    f1:ae:53:31:c5:df:3d:8b:82:dc:2c:ea:e0:01:40:
                    bd:e5:ad:10:82:19:b5:d9:63:ae:91:8d:be:c3:2a:
                    71:47:a7:76:b9:9e:9b:86:fb:c6:15:dd:4d:cb:03:
                    12:2f:12:83:e2:16:4e:08:7c:65:c7:ec:bd:79:8c:
                    cb:dc:1a:d2:f0:90:c8:f5:76:d0:7e:02:64:6d:d4:
                    ed:1d:b5:c3:fa:3b:96:42:d0:cd:b2:24:83:fb:12:
                    cc:20:ee:f2:29:e4:26:7d:e0:d0:e8:2b:a7:34:93:
                    c0:94:6e:f5:db:34:5a:cd:f4:a1:d1:24:d4:f7:9c:
                    74:41:b6:75:8e:82:99:82:62:70:24:46:35:31:f2:
                    39:37:49:79:08:9a:0f:a7:b9:e2:11:f3:b7:5c:77:
                    a2:9f:75:29:d8:41:68:1e:9d:3c:e8:81:ec:5d:70:
                    30:f5:95:99:52:af:31:0c:bf:41:e0:7a:cf:ad:7e:
                    56:56:38:eb:7f:d3:17:1d:6e:f5:eb:59:86:f2:5b:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:DE:28:B8:E9:7D:AA:CE:94:39:0E:53:69:00:AE:79:98:5D:0A
            X509v3 Authority Key Identifier:
                keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:61:9f:66:3c:89:7f:b8:4b:6b:07:c6:87:35:ad:ec:d3:
         11:f8:94:d5:03:94:d2:d7:48:31:22:ac:5f:82:c8:ee:f2:36:
         b8:23:5a:05:93:a8:f6:ad:0d:0e:53:ad:b5:c3:ca:e7:3c:14:
         9f:5f:52:99:96:5b:43:ce:62:1b:72:6b:59:4c:e3:80:b1:bc:
         f8:e7:ae:6b:a0:9f:a0:a3:4f:06:4d:d6:81:b7:8e:7f:cf:38:
         d5:36:28:84:30:7f:cd:55:1f:5e:e3:81:1c:8d:d1:cb:61:19:
         8b:00:1e:b0:9c:b4:e3:15:3b:6c:93:b9:2a:71:a7:3e:4b:47:
         5d:db:ca:b7:a5:85:4f:a2:7f:b0:ef:51:5e:e5:90:e2:ff:2a:
         e0:60:45:11:3f:36:e5:28:8a:54:fb:52:3f:11:f6:25:2d:bf:
         af:11:ae:53:4b:73:c4:cb:3b:27:9e:d9:0e:88:21:99:a2:8c:
         ac:a5:61:2d:d4:18:48:37:2e:b0:7d:5b:98:f9:b3:ac:2b:9f:
         84:ec:97:fd:c5:e6:d6:72:31:66:52:9d:94:26:f4:c6:2e:7a:
         11:1b:a6:6d:0a:68:a3:f0:ef:4f:b5:a1:87:d9:0c:d8:a9:ea:
         9b:1e:25:45:00:df:3b:9e:84:1a:40:75:69:70:d8:d1:3c:25:
         77:96:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:03 2024 by rpki-client on console-fra.rpki-client.org