Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File:                     OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier:          yjfsNtjH2Q1CawWyoUNihKBbX25Yx33FUWgxxQlmVa8=
Subject key identifier:   E0:1B:87:7A:8F:AD:48:B0:5C:40:8C:A1:86:4D:6B:84:2D:B3:3C:98
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer:       /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial:       018F87ED43F5A8228B90930AB52DC65AB10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 19:00:24 +0000
Manifest this update:     Fri 17 May 2024 19:00:24 +0000
Manifest next update:     Sat 18 May 2024 19:00:24 +0000
Files and hashes:         1: LQhUv-sF5YG_M9E4JICstAXR8Ps.roa (hash: JZNFrqTTU0qLI7AB/o8TufJKE3cAD8kBk9y6K5n+1tk=)
                          2: Mg6zT1NljxXsHILyIMUxLVQ54LQ.roa (hash: n2zIV+Uaf7rrqaLxNU3ewBoAAhjlb2BVX7Hfmov65Rw=)
                          3: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: 0bkdw6Bjg8nuGPRUvUWzQh58z7j0liskhB+TTlKWuxc=)
                          4: a83XiSHoQMn7aSQD0Qn0TqG5pG0.roa (hash: Ez+jqT0mg8zIk9wNrtTIj3odCM2UVUdE1ugibUybWo0=)
                          5: dZiwVMkkjaV1ofB7uuhbpBmqitk.roa (hash: Fyym8JOmuUNZQ/FnpLzA0JSPbc+KUqXz2nuAOmwI5tw=)
                          6: m8mdIGgCdDk8ECzdaCvdrLh4mtc.roa (hash: 1WaQc/H22UNCHQlCBW6a/NhfTlO0CUALYrwN4KQk1Ck=)
                          7: n89kdTnL9xtnu8EbZVFlcBef6xE.roa (hash: CZYR1TQrIEmY+ceJh67P4CpnDyx7aIHAEoV5TBIOeh4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:43:f5:a8:22:8b:90:93:0a:b5:2d:c6:5a:b1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
        Validity
            Not Before: May 17 19:00:24 2024 GMT
            Not After : May 18 19:00:24 2024 GMT
        Subject: CN=e01b877a8fad48b05c408ca1864d6b842db33c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:dd:ac:30:6f:c1:f1:2e:a4:a1:4b:da:b1:
                    95:83:2f:20:f4:ae:e1:1e:6c:d3:d4:7a:32:bb:92:
                    6e:bd:26:b6:a3:9d:2e:08:fa:5a:e4:0e:08:e6:b3:
                    f9:77:21:16:52:b1:ac:ea:04:fe:3f:25:e5:4a:ac:
                    dd:24:f0:82:67:f2:d0:bf:c8:b6:95:57:b6:9d:9d:
                    bb:4c:f9:84:bc:b6:58:81:46:13:d9:ab:d3:df:fa:
                    d6:50:fb:35:20:d5:6b:86:27:bc:70:07:5c:0a:5d:
                    2d:6f:07:46:cd:d4:c9:6f:24:c3:70:ce:1f:23:18:
                    20:e5:ec:72:5b:36:8b:91:17:db:c2:4f:77:f8:da:
                    09:08:fb:cb:f1:3c:2e:79:e8:5a:85:d9:d1:4e:bc:
                    ef:fd:75:60:f1:81:92:f7:0f:21:3f:e7:6f:be:4e:
                    92:b0:d4:2e:94:77:cd:ba:fc:08:ae:5a:55:3c:42:
                    06:9a:6e:8e:8b:6d:a4:8c:90:56:18:c6:03:0e:db:
                    53:5d:e7:82:70:7d:0f:da:e9:9c:a1:fa:92:a2:76:
                    a5:24:49:26:95:0f:b9:08:6b:19:f0:3c:9d:b4:84:
                    68:ae:bf:26:56:47:3d:fa:75:9e:b4:18:bf:3b:0b:
                    7e:4d:5e:2b:e1:f2:64:a7:4a:cc:d1:bd:6d:fb:53:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:87:7A:8F:AD:48:B0:5C:40:8C:A1:86:4D:6B:84:2D:B3:3C:98
            X509v3 Authority Key Identifier:
                keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:01:05:3b:6e:36:ac:80:af:11:dc:5a:a3:ed:af:85:ea:a3:
         27:33:4c:a4:65:86:7b:bd:f8:dd:45:88:11:e8:07:4e:2a:e8:
         b6:c8:d3:a1:9c:ec:ad:12:f5:6c:c2:e2:35:32:f4:54:a6:f6:
         dd:a1:3e:77:34:0a:e8:de:5f:97:30:49:99:06:e7:81:57:e1:
         0d:b2:63:3a:7b:06:a4:90:39:8f:de:89:d4:d6:0d:16:e8:5b:
         a8:fa:ff:6b:a8:2d:74:37:75:6d:a2:f1:c0:8e:28:09:c3:3b:
         55:85:be:8f:4e:4c:74:0c:39:a5:64:d6:be:dd:9e:3f:86:fe:
         71:79:24:02:8f:75:96:2c:5e:b3:dc:63:69:39:cb:2e:9a:3b:
         5d:30:41:0d:87:3d:f2:76:90:31:03:7a:1f:d2:3e:e1:3f:3e:
         8b:70:b1:b2:53:1a:fc:d7:d5:05:77:b2:a4:6d:26:a2:66:69:
         fb:4f:8a:3f:2f:c3:0d:d1:62:cf:f3:59:8b:9d:c4:9b:e4:29:
         6f:d8:e2:4b:5c:2f:f3:c5:c2:63:ae:8f:fe:3b:7a:81:53:23:
         69:ff:f9:f7:4c:41:1d:58:e4:de:9f:2d:e9:b3:cb:c0:76:e0:
         e8:53:be:e0:25:f2:fb:45:be:bc:cc:0d:45:be:3b:1d:2b:ca:
         d3:bb:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:50 2024 by rpki-client on console-fra.rpki-client.org