Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File:                     Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier:          PMy4F5tq6GnRQ5YnLjh8bAZ/p6yDqstclrheDDIBlVw=
Subject key identifier:   E1:4C:75:41:78:BF:B4:4E:3F:17:D6:D8:D0:2C:32:32:68:FC:22:32
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer:       /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial:       019357D2D2E0F45E3304FAF7F42F75141687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number:          108F
Signing time:             Sat 23 Nov 2024 07:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:54 +0000
Files and hashes:         1: 8AKsVLnFklsYLiWWLF8HusAvyUs.roa (hash: V20QMBSXwvXRafgpksPTOvGdZGN6cas2tIaPS99w79Q=)
                          2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: 8OI1f+7XQlsQi3FicaBrb+zFRNJw2xxIv/eb/SfXeaw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:d2:e0:f4:5e:33:04:fa:f7:f4:2f:75:14:16:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
        Validity
            Not Before: Nov 23 07:00:54 2024 GMT
            Not After : Nov 24 07:00:54 2024 GMT
        Subject: CN=e14c754178bfb44e3f17d6d8d02c323268fc2232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:aa:a4:ce:72:32:38:7f:61:96:b7:a4:85:
                    8d:bc:6d:03:4c:2b:a2:87:fd:c5:ab:b6:f1:8d:b3:
                    d4:2a:53:91:a9:99:27:c7:74:02:da:94:2c:b5:a7:
                    e2:50:bf:29:e2:e2:9f:5d:c7:b2:a3:80:02:58:37:
                    d5:dd:17:b6:a8:c0:bb:23:62:8f:8f:6b:bd:06:c0:
                    19:28:cb:6b:48:ef:49:b4:83:a3:33:3f:22:ca:3e:
                    81:95:ee:68:cd:48:49:e1:73:19:61:47:dc:e1:71:
                    6e:93:0b:4d:e8:1d:92:09:29:36:67:86:3b:74:e0:
                    a9:72:90:f0:c9:ed:3d:d8:2e:76:57:85:8e:be:94:
                    34:dc:88:d6:8e:f4:81:94:7d:6e:2f:47:54:4c:88:
                    c9:49:96:94:d2:46:72:af:e9:10:2f:f0:1c:e9:23:
                    75:af:c1:64:56:69:94:70:11:d4:cf:86:3e:a9:23:
                    f6:38:f4:ff:da:4c:85:15:2e:72:d3:63:bc:de:b6:
                    94:bc:5e:96:f7:62:58:01:18:44:35:7b:77:50:f7:
                    e0:dd:4f:09:85:c3:dd:5b:10:19:ac:3d:fa:24:6e:
                    a1:a6:12:10:1d:a8:1f:32:70:4c:fe:e5:9b:dd:29:
                    1c:20:5e:10:2a:77:84:53:a8:32:fd:f1:27:43:11:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4C:75:41:78:BF:B4:4E:3F:17:D6:D8:D0:2C:32:32:68:FC:22:32
            X509v3 Authority Key Identifier:
                keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4f:e7:9e:bf:75:e0:d1:15:3f:45:66:3f:dc:47:d3:a5:53:
         9d:76:f5:5a:61:52:48:0e:7c:c1:c2:61:d1:a3:59:5a:03:0b:
         b2:b0:60:f9:cc:84:3e:14:f4:91:f1:86:38:42:52:cf:4f:0c:
         83:9b:22:a2:44:df:3c:31:e7:45:6b:f4:af:c9:fa:dd:2e:ba:
         76:69:67:aa:13:5f:3e:c4:bd:b1:e8:9f:0c:fd:fb:79:97:12:
         25:57:0c:c4:51:a4:dc:6e:27:a2:e1:cb:a0:67:1d:ba:8a:47:
         c2:bf:a2:5d:96:f4:f9:a1:f0:19:dc:73:b1:cb:ce:f1:6c:4b:
         35:63:d0:8a:6e:c7:e3:97:86:af:a8:b0:ae:43:40:2e:47:78:
         b7:dd:8f:c7:69:fc:7c:27:75:87:75:ed:80:de:a2:8e:4d:f5:
         41:e5:26:33:ef:e7:00:d9:47:91:39:f9:70:d7:83:e2:bb:4b:
         b8:04:4d:1a:9b:8e:91:92:63:f1:c5:4e:8a:f7:b5:8b:ae:14:
         88:41:f2:b1:08:70:b4:38:da:e9:b9:73:57:20:ac:03:e4:cf:
         ce:4d:57:6d:05:f8:8c:03:08:e9:c6:57:b8:bf:96:0b:31:75:
         49:46:8e:31:ed:e9:4e:02:16:91:9d:5c:ed:3f:46:5f:d4:fa:
         f4:a3:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:32 2024 by rpki-client on console-ams.rpki-client.org