Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
File:                     oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json)
Hash identifier:          SDU7kmRindscvLuqYT6Qcr/HYveJItLiFSQgseDjWcs=
Subject key identifier:   5C:AB:5D:C3:4D:E3:09:28:43:DC:22:1E:51:02:D9:9D:5C:BD:F8:8B
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Certificate issuer:       /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial:       018F874A58736FF295889CE7DDED7E78C8C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
Manifest number:          0DC3
Signing time:             Fri 17 May 2024 16:02:27 +0000
Manifest this update:     Fri 17 May 2024 16:02:27 +0000
Manifest next update:     Sat 18 May 2024 16:02:27 +0000
Files and hashes:         1: DCuTdt8A1mHBSNMOfGk8mRw-xEk.roa (hash: 0QXIcMu0NZhOofzv9xedwHxaqo5AzoGlMsFOPCSu890=)
                          2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: ebABdPeNolMkA8ezsMSOEiIOWPjpl0Gp9RlwrMFmXtg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:58:73:6f:f2:95:88:9c:e7:dd:ed:7e:78:c8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
        Validity
            Not Before: May 17 16:02:27 2024 GMT
            Not After : May 18 16:02:27 2024 GMT
        Subject: CN=5cab5dc34de3092843dc221e5102d99d5cbdf88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:08:f8:0b:c2:36:a2:1f:68:c7:60:49:45:
                    ce:f6:5f:12:ea:ee:52:3b:2a:2e:4b:38:82:65:29:
                    7a:ea:35:6b:eb:56:88:98:db:62:fc:53:98:7f:86:
                    44:ac:35:28:e2:1c:68:b5:47:20:91:de:86:f1:43:
                    55:58:71:5a:5c:cb:4d:1e:97:37:77:de:d2:05:6a:
                    5e:66:8f:3c:0f:80:05:6c:f8:a1:82:a0:24:f8:65:
                    18:5c:70:49:6e:b5:94:ea:f0:d5:ef:39:33:e6:93:
                    2f:95:41:f1:fc:22:31:9c:a6:8a:ae:fa:7a:6e:97:
                    6d:bf:e6:b1:4c:43:68:d9:2f:00:39:a9:ab:7a:e6:
                    d4:35:3d:23:16:6c:f9:56:b6:30:17:68:38:1f:01:
                    ad:9e:f2:a3:93:22:f3:2b:bf:81:02:98:49:3e:60:
                    bd:c1:5d:73:cf:3a:29:94:a9:ec:22:43:7b:74:4e:
                    31:00:90:28:8a:e8:26:46:16:e8:4b:50:38:c0:5e:
                    e8:ea:7e:ad:79:60:ff:9b:39:37:81:1b:19:c3:db:
                    42:d5:48:cf:2e:13:83:6e:f2:0a:c6:43:c4:ec:e0:
                    fe:14:92:9f:a6:a6:c9:18:b9:29:e2:c6:a8:45:ed:
                    7f:0e:58:b2:1a:b0:7f:37:b4:d8:7b:61:11:9a:b5:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AB:5D:C3:4D:E3:09:28:43:DC:22:1E:51:02:D9:9D:5C:BD:F8:8B
            X509v3 Authority Key Identifier:
                keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:01:36:af:a1:6e:af:58:79:4e:88:dc:5c:83:ff:e5:47:1b:
         01:11:96:a7:02:27:67:d7:14:56:e8:db:5e:84:e8:62:c5:7f:
         7a:b3:26:63:45:69:4c:ae:38:91:56:cf:72:60:82:2f:f2:35:
         31:cf:81:af:c6:13:a1:52:10:8f:7f:37:08:8d:25:0f:de:a0:
         02:c7:3b:98:99:b3:05:f7:5e:f1:29:23:78:63:cf:8d:1d:68:
         dd:aa:cd:1c:2d:12:92:42:cc:cc:23:84:75:22:2e:92:e2:c2:
         a8:25:91:f5:ab:64:59:ca:81:76:e4:61:b7:2e:eb:58:be:4e:
         f1:26:53:86:21:7f:0c:66:78:49:2d:1a:4e:dc:f9:1d:f5:c2:
         84:4d:c6:58:45:a6:6e:e1:8a:c6:8b:dd:a1:92:71:d0:45:45:
         2a:af:24:49:4f:ba:b2:5c:2d:77:6c:ab:90:14:58:e6:05:7d:
         67:6a:f8:9f:5a:21:d9:5f:28:9e:c3:88:25:8f:9f:08:75:52:
         db:1c:da:75:d5:4f:62:40:1c:25:00:4b:7b:95:25:5f:39:7c:
         ca:16:7b:a2:38:19:9b:f6:4c:3d:1b:49:3c:70:68:89:1c:48:
         76:1c:ef:d0:86:56:15:54:7a:1c:d2:eb:4e:33:98:0c:9c:66:
         90:10:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:55:20 2024 by rpki-client on console-fra.rpki-client.org