Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File:                     0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier:          X1oKPAnknz3tbp5mkxiMxMPPhZ6SU5iKJXIvwkleiDM=
Subject key identifier:   CE:80:0E:10:8B:3B:CC:A5:19:F0:D7:E3:54:BF:CD:46:62:24:59:AE
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer:       /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial:       019405A18418FC449F08950F37E85F94130D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number:          059F
Signing time:             Fri 27 Dec 2024 01:00:58 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:58 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:58 +0000
Files and hashes:         1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: n5n/KatcxqJFLBYmBK9XvBoL7OMji6WmR74kHtrTyeU=)
                          2: dflsI3HmsO72JTCoopziGqfz-XM.roa (hash: 1UAPn2WAYLEMOXKbNtVotnaz5u12wG6tiSjNpCpXUQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:84:18:fc:44:9f:08:95:0f:37:e8:5f:94:13:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
        Validity
            Not Before: Dec 27 01:00:58 2024 GMT
            Not After : Dec 28 01:00:58 2024 GMT
        Subject: CN=ce800e108b3bcca519f0d7e354bfcd46622459ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:42:29:50:12:be:e2:ec:dc:1d:cf:e4:d3:
                    35:f7:c5:26:da:64:17:ab:3d:fe:d1:76:01:cc:72:
                    48:ac:d8:76:49:32:18:98:82:99:e4:97:79:fe:56:
                    b8:a1:9e:78:b0:94:12:4e:ab:61:63:42:8e:6c:32:
                    33:62:e2:43:74:e9:2e:65:81:2d:13:ea:65:0d:78:
                    02:8d:1f:94:7f:9b:73:01:9e:be:ff:5e:47:fe:f8:
                    94:b2:5a:f9:a2:d0:68:d0:d6:44:b9:83:e0:48:86:
                    af:d6:4c:84:a8:5d:f7:bd:4e:10:66:e6:3b:77:5d:
                    03:bb:cd:6e:0d:04:8e:cd:4a:8b:da:3b:9a:6a:2a:
                    20:00:ee:ab:ce:d5:ef:70:cb:5e:d6:93:7e:d1:ea:
                    88:b9:f2:54:e0:d6:23:6e:b7:69:00:9f:27:c0:30:
                    e5:e3:19:da:d7:c6:27:23:4d:89:4e:26:ea:92:a7:
                    84:b9:d1:53:92:c0:41:36:d6:20:2a:57:8b:82:8f:
                    6f:12:df:c0:30:81:87:1d:30:ce:80:4a:06:83:a0:
                    dc:b0:46:2b:4a:d7:83:7e:99:96:f4:39:7e:e7:0a:
                    b3:01:1b:1e:5f:29:77:c4:63:2e:76:2e:23:45:56:
                    70:04:07:88:9c:47:6e:95:4c:c5:02:66:07:06:47:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:80:0E:10:8B:3B:CC:A5:19:F0:D7:E3:54:BF:CD:46:62:24:59:AE
            X509v3 Authority Key Identifier:
                keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:76:ed:aa:02:e4:63:62:93:14:d3:aa:ed:93:67:9d:2e:22:
         b4:e4:50:a2:dc:2d:71:3c:79:d9:e9:83:39:7f:85:7e:44:95:
         a6:c4:37:65:60:93:a5:2c:4c:17:c5:bb:5f:3b:03:6a:7e:3d:
         e4:f4:eb:1b:b5:ba:ee:c0:dc:84:4d:f8:7a:ef:cd:a6:6d:a4:
         91:c1:53:14:21:67:10:cf:93:90:f1:61:29:c5:67:3f:68:1a:
         2f:56:b9:51:a7:3a:a5:32:68:b4:9c:91:28:c8:f3:e0:44:ae:
         99:56:1c:b3:29:23:83:82:97:88:48:fb:ac:8f:36:51:09:bb:
         54:bf:c5:19:2f:f3:3f:8e:96:ce:04:3b:48:bc:30:a3:1d:92:
         f0:71:2c:6f:9b:07:93:4d:4f:38:b2:8a:36:7c:69:eb:64:b4:
         04:6e:dc:36:08:48:34:77:be:1c:f9:7c:db:5a:f9:0c:33:cd:
         f0:65:e5:82:9b:59:5c:66:91:0b:e2:60:5a:41:1b:58:68:4b:
         d4:34:d4:d8:7d:35:e2:4c:d8:6c:12:72:b5:0e:f6:6e:b6:4c:
         5e:d8:3b:a9:96:16:c3:71:fc:cf:cf:59:e4:fd:75:5c:d0:0d:
         60:0f:01:22:49:7b:10:97:1a:20:ac:1e:d4:ff:4e:07:c1:07:
         d7:21:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:53:38 2024 by rpki-client on console-fra.rpki-client.org