Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File:                     O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier:          GiqcnmPwo3zql/IkwUlEeZ84X/NEZGCpoI+u756d+Bs=
Subject key identifier:   0F:37:BF:5B:02:9C:05:7F:4D:FB:AA:BB:4A:B6:AA:EE:71:83:FF:4D
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer:       /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial:       018F88243E76A34389293562541580F496E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number:          0F5E
Signing time:             Fri 17 May 2024 20:00:27 +0000
Manifest this update:     Fri 17 May 2024 20:00:27 +0000
Manifest next update:     Sat 18 May 2024 20:00:27 +0000
Files and hashes:         1: M-eiQjoFScbReLrC6j2XeZYgXsk.roa (hash: u16I0u6i4/naMLPUcSnWlHe56J1IG2FxqRdk7W8fzDI=)
                          2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: 6feI2w59iRE0Q2AlBvPaRB4DsLRbrpi7bR7MJ0e6/eE=)
                          3: bwb9jRAH_vNTj6akO56_XErv36E.roa (hash: PDAHtNuDBiP/zsKE6LpwC5t3+TYEuoLGpqaadqOPBPw=)
                          4: xyeI3V7x98BOyj_KcwS3IZ4CXKI.roa (hash: NibHHhmPeD8GVP/Lp8gwnWFEbw/BwPzfjpDRDzws5UE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:3e:76:a3:43:89:29:35:62:54:15:80:f4:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
        Validity
            Not Before: May 17 20:00:27 2024 GMT
            Not After : May 18 20:00:27 2024 GMT
        Subject: CN=0f37bf5b029c057f4dfbaabb4ab6aaee7183ff4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:a8:53:28:80:ba:bb:88:09:83:84:90:67:
                    1f:b5:c7:45:c4:58:72:a8:aa:15:c7:ea:18:35:6c:
                    89:aa:b9:70:83:c6:76:b4:bd:cf:57:c2:ff:26:35:
                    d5:63:02:36:fd:bb:25:05:b4:3a:68:d0:14:61:1f:
                    ef:57:0b:f0:be:19:e2:35:fe:a9:3d:0a:9a:60:4e:
                    b1:bb:e9:d8:24:0e:7a:11:19:22:e2:b0:f1:9b:74:
                    2f:0c:e5:69:fe:37:7a:db:e6:dd:a1:83:0e:ff:3a:
                    e4:03:ab:38:56:ac:3b:7b:67:a5:d0:b5:7e:15:58:
                    fb:a6:2e:cc:b7:6c:03:b5:2d:19:5b:1f:ea:99:32:
                    ed:53:70:88:9b:db:04:60:73:c6:83:06:07:5e:92:
                    a9:44:62:b1:cc:38:47:d0:2d:00:bd:58:2a:78:62:
                    18:cd:e0:38:91:aa:93:95:c0:8c:88:a6:dc:f2:19:
                    22:ec:25:78:6b:d1:c2:0c:a9:02:6b:39:9b:be:1e:
                    ff:f5:b3:f5:70:ab:54:ae:b9:be:72:11:7b:e7:88:
                    b6:09:5d:96:42:69:47:93:80:bc:ef:d1:92:c5:82:
                    7f:40:3d:cf:87:ca:df:b1:34:36:93:8b:9e:ea:45:
                    f0:a5:be:6a:f4:35:a0:9c:ab:bd:fb:7e:fc:18:42:
                    b3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:BF:5B:02:9C:05:7F:4D:FB:AA:BB:4A:B6:AA:EE:71:83:FF:4D
            X509v3 Authority Key Identifier:
                keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:f5:49:44:f1:b6:b5:b5:39:20:b9:28:de:b6:e5:d0:e1:
         a1:51:e3:b8:87:d7:68:e3:9a:d4:ec:46:fe:b1:7a:7d:fd:51:
         ec:6b:01:82:5c:31:ce:a3:fc:43:6c:b5:e6:57:74:76:3b:ed:
         02:75:3e:74:16:8b:54:30:1c:d0:c6:9a:ab:7d:50:7d:ac:0d:
         f2:ed:06:e8:33:48:3f:dd:b3:50:a2:65:a8:7b:9a:8b:ad:a2:
         98:b8:53:dc:0a:22:60:31:74:9f:c1:66:84:b2:3e:cf:bc:5c:
         73:6e:38:b7:a1:06:8a:30:71:f7:12:90:ae:22:27:35:58:10:
         b2:2d:cd:e2:59:f8:c3:d1:fb:31:f3:2d:be:0d:33:17:8d:77:
         79:ba:df:9e:5f:6e:43:a4:99:b7:6d:a7:8e:31:5b:5b:2c:ff:
         99:45:6a:3c:6d:b2:d1:77:a6:c6:83:9e:ed:3c:ca:0b:58:34:
         05:6a:ff:72:a5:81:81:e1:1d:2c:e7:3d:e1:7c:0e:fa:3f:85:
         c0:aa:ff:0e:88:6d:af:96:11:b5:77:3b:9b:4c:4e:ce:9c:4c:
         4d:90:4b:c5:0b:ee:06:b9:e2:46:f3:42:83:7f:a9:9a:16:75:
         0d:3f:de:00:21:1a:47:02:51:54:e9:75:03:fc:3d:89:bc:87:
         e8:34:e4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:57:21 2024 by rpki-client on console-fra.rpki-client.org