Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File:                     oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier:          DDyZD8eU0kDQujKxwa+asuT26gS5DKVn4q/CHV9SXDw=
Subject key identifier:   83:42:E7:B0:B7:47:12:E3:2F:F6:71:37:19:A0:98:85:DA:33:77:50
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer:       /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial:       019060015E1B4B369EEFFA1934F25AB599CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number:          11EB
Signing time:             Fri 28 Jun 2024 18:00:20 +0000
Manifest this update:     Fri 28 Jun 2024 18:00:20 +0000
Manifest next update:     Sat 29 Jun 2024 18:00:20 +0000
Files and hashes:         1: GoF3RpvXi_FuH7xHyvA5p639kxE.roa (hash: tfYhclEkERfxKQ4JeIu/D9leMI1JUKeOyQjQK36CWy4=)
                          2: lXBTU27eFgshokh8vJE1nAMtb5w.roa (hash: NEupPq3eJMQCmbLwLLNgcOioC5JlQp0zgqS90i9G8cQ=)
                          3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: XioLhcFpc9pfJuFQ7skNgDAB4IF3YKmoE1Qs7QQsXQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 18:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:01:5e:1b:4b:36:9e:ef:fa:19:34:f2:5a:b5:99:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
        Validity
            Not Before: Jun 28 18:00:20 2024 GMT
            Not After : Jun 29 18:00:20 2024 GMT
        Subject: CN=8342e7b0b74712e32ff6713719a09885da337750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:11:87:b4:83:1b:ff:a8:46:c2:5f:04:c4:
                    68:03:6e:9d:61:ed:0d:ec:02:23:a0:41:ed:3a:5c:
                    b9:4d:57:28:7e:ef:cd:bd:cf:92:85:55:b3:7b:37:
                    7a:57:67:12:c8:c9:57:02:6a:0a:35:96:2d:37:e5:
                    9c:b0:eb:2c:17:6d:d0:44:02:68:36:7a:ff:28:dc:
                    42:fd:c1:71:df:51:64:47:b7:b1:b3:bb:72:44:91:
                    1d:67:85:77:c4:02:ef:fa:f6:53:62:1e:5e:58:5d:
                    ba:a4:eb:2c:d2:9c:79:6d:c8:1e:c4:9a:28:58:53:
                    09:a4:e0:74:3a:33:c9:76:ef:08:c1:45:c4:35:a3:
                    26:50:b6:e6:27:fc:d4:33:be:8a:c6:06:29:cc:4a:
                    45:f6:17:3b:d1:2d:d1:92:98:f2:95:d8:c3:5a:36:
                    6b:31:c9:96:8e:12:3c:59:9c:75:b6:2a:43:8f:de:
                    f7:06:3b:07:47:03:ee:5c:df:04:da:d1:db:3d:86:
                    15:43:e3:65:f1:3f:a8:d6:41:78:1a:b7:54:ae:80:
                    d8:15:92:c7:43:cd:45:94:84:c8:31:7e:37:1d:23:
                    88:60:3e:41:53:73:6a:a3:d1:6d:b6:b4:04:82:e8:
                    dd:57:00:00:78:24:a0:6f:24:82:74:96:c5:f2:44:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:42:E7:B0:B7:47:12:E3:2F:F6:71:37:19:A0:98:85:DA:33:77:50
            X509v3 Authority Key Identifier:
                keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e0:c0:e9:8a:ce:20:f4:7b:2e:ea:87:a4:39:fb:a9:04:a9:
         af:3b:ac:46:51:f4:f5:c3:dc:7c:74:2a:28:77:68:f0:6a:2f:
         bb:e1:2f:40:9b:e1:21:f8:ee:63:56:2c:a1:cf:ce:b2:21:ae:
         81:25:14:5b:61:62:dd:92:2d:ba:6d:26:71:18:9d:fd:01:36:
         87:4e:0f:59:00:b5:03:99:c2:37:8f:3b:4b:d2:45:b9:13:21:
         27:08:39:43:7f:5f:b2:18:4e:08:75:d3:49:d2:1a:63:c3:8a:
         e5:bf:17:56:8b:93:7a:ba:8c:1c:0a:25:68:6b:ff:0a:0d:e2:
         6a:2d:11:96:c8:2f:67:9e:f5:99:09:a0:0d:00:5a:11:7a:aa:
         b0:c5:50:bc:fd:49:ad:48:ce:e7:57:20:d8:66:6f:20:8e:12:
         46:50:f3:4c:94:52:47:84:a9:5c:0a:3c:50:20:3e:be:1a:70:
         56:e9:f2:d9:42:ac:dd:35:af:2a:ac:51:7a:41:66:c7:be:18:
         5b:6a:38:3d:11:b6:fb:4c:94:15:80:df:ed:98:95:fa:bb:3f:
         af:9a:8f:b8:da:85:57:56:47:55:db:99:65:6f:6d:6f:cc:7a:
         1e:49:ed:53:ad:af:9f:97:1b:f5:81:28:41:f4:6c:16:d6:94:
         ee:fc:37:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBgAV4bSzae7/oZNPJatZnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5
OWVhMzEwHhcNMjQwNjI4MTgwMDIwWhcNMjQwNjI5MTgwMDIwWjAzMTEwLwYDVQQD
Eyg4MzQyZTdiMGI3NDcxMmUzMmZmNjcxMzcxOWEwOTg4NWRhMzM3NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug8Rh7SDG/+oRsJfBMRoA26dYe0N
7AIjoEHtOly5TVcofu/Nvc+ShVWzezd6V2cSyMlXAmoKNZYtN+WcsOssF23QRAJo
Nnr/KNxC/cFx31FkR7exs7tyRJEdZ4V3xALv+vZTYh5eWF26pOss0px5bcgexJoo
WFMJpOB0OjPJdu8IwUXENaMmULbmJ/zUM76KxgYpzEpF9hc70S3RkpjyldjDWjZr
McmWjhI8WZx1tipDj973BjsHRwPuXN8E2tHbPYYVQ+Nl8T+o1kF4GrdUroDYFZLH
Q81FlITIMX43HSOIYD5BU3Nqo9FttrQEgujdVwAAeCSgbySCdJbF8kRsuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINC57C3RxLjL/ZxNxmgmIXaM3dQMB8GA1UdIwQY
MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt
NjVmODI0N2ZmYTkxLzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx
LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+DA6YrO
IPR7LuqHpDn7qQSprzusRlH09cPcfHQqKHdo8Govu+EvQJvhIfjuY1Ysoc/OsiGu
gSUUW2Fi3ZItum0mcRid/QE2h04PWQC1A5nCN487S9JFuRMhJwg5Q39fshhOCHXT
SdIaY8OK5b8XVouTerqMHAolaGv/Cg3iai0RlsgvZ571mQmgDQBaEXqqsMVQvP1J
rUjO51cg2GZvII4SRlDzTJRSR4SpXAo8UCA+vhpwVuny2UKs3TWvKqxRekFmx74Y
W2o4PRG2+0yUFYDf7ZiV+rs/r5qPuNqFV1ZHVduZZW9tb8x6HkntU62vn5cb9YEo
QfRsFtaU7vw3ZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 04:42:17 2024 by rpki-client on console-ams.rpki-client.org