Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.mft
File:                     oSbeI8bX74ew_f-AmPBce3vDR64.mft (raw, json)
Hash identifier:          VFci/zs7LdbSc4szm/Yx/wqaxEhinfmCnyVoUWCFnQ8=
Subject key identifier:   E0:BF:0F:AC:DC:6E:70:41:C4:8C:10:26:7D:6E:3E:18:FD:21:19:C2
Authority key identifier: A1:26:DE:23:C6:D7:EF:87:B0:FD:FF:80:98:F0:5C:7B:7B:C3:47:AE
Certificate issuer:       /CN=a126de23c6d7ef87b0fdff8098f05c7b7bc347ae
Certificate serial:       018F87B6314A18B555F69C3957F55BD42439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSbeI8bX74ew_f-AmPBce3vDR64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.mft
Manifest number:          0126
Signing time:             Fri 17 May 2024 18:00:15 +0000
Manifest this update:     Fri 17 May 2024 18:00:15 +0000
Manifest next update:     Sat 18 May 2024 18:00:15 +0000
Files and hashes:         1: 00Ma0-_LO7REqz_Vbtrs_1HFk6Q.roa (hash: +WBS6DtNYV1Q6Yc3PsF6BfmGtYd7zyXdYSS71mGEPh4=)
                          2: oSbeI8bX74ew_f-AmPBce3vDR64.crl (hash: uLwgTNuPre15ejO7MhPA/B5jD7z4u5nTtYIu/vKz/1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSbeI8bX74ew_f-AmPBce3vDR64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:31:4a:18:b5:55:f6:9c:39:57:f5:5b:d4:24:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a126de23c6d7ef87b0fdff8098f05c7b7bc347ae
        Validity
            Not Before: May 17 18:00:15 2024 GMT
            Not After : May 18 18:00:15 2024 GMT
        Subject: CN=e0bf0facdc6e7041c48c10267d6e3e18fd2119c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:d5:67:1f:10:15:41:cf:bc:8a:2d:40:a8:
                    70:a9:59:06:7d:0a:25:84:fd:f6:92:31:d5:36:63:
                    e3:f6:54:0d:9c:d1:25:c6:5d:80:e7:d4:dc:9b:07:
                    b3:55:d6:ce:0e:24:6e:51:d6:7b:a1:94:8c:4c:26:
                    ee:b7:b7:70:51:6f:5e:a5:88:ee:74:3c:4f:94:df:
                    d7:ee:f1:3f:0c:37:ec:62:08:28:41:b9:f2:00:d3:
                    4a:06:63:f8:e6:60:e3:31:3c:27:b9:81:c5:fb:c9:
                    33:0c:7e:b5:ca:3e:63:e8:d4:bd:82:4b:64:b9:0a:
                    24:2c:5d:3b:f0:c8:9f:f6:44:a8:57:4e:ac:14:6a:
                    e1:47:4f:3a:ff:80:08:bf:d5:69:23:38:b3:c3:45:
                    a1:2b:5b:81:c8:15:a8:6f:97:7d:c2:25:ec:5e:12:
                    e7:05:d2:12:d1:60:52:e0:ee:b2:de:da:ee:c9:3e:
                    0e:2a:54:77:e1:c3:cb:96:f4:10:02:0c:d4:49:fd:
                    b2:dd:99:0c:28:49:2b:00:3e:0c:b9:c8:11:a1:a1:
                    c0:8f:06:d9:22:e0:49:87:9f:5d:ab:45:e5:0c:ee:
                    df:41:91:9b:be:d3:55:a5:cd:0c:a6:d0:c4:8b:bd:
                    3d:b2:b9:95:46:3d:fd:83:43:6f:14:c3:8e:1a:b9:
                    5c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BF:0F:AC:DC:6E:70:41:C4:8C:10:26:7D:6E:3E:18:FD:21:19:C2
            X509v3 Authority Key Identifier:
                keyid:A1:26:DE:23:C6:D7:EF:87:B0:FD:FF:80:98:F0:5C:7B:7B:C3:47:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSbeI8bX74ew_f-AmPBce3vDR64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:3b:3a:e8:46:75:9e:72:99:4c:4e:eb:42:fa:8e:f6:ac:
         34:35:5f:d9:1b:03:2b:fc:c2:5a:67:8b:1b:43:bd:46:e7:a1:
         71:81:79:10:6d:bd:38:ae:28:b9:77:21:d6:44:9d:8d:55:e8:
         7e:e1:c1:d3:27:20:3c:b1:ca:dd:32:93:e8:e3:e9:da:b4:17:
         47:b9:46:5b:6a:44:e5:af:1f:0c:41:83:66:a6:9d:ec:eb:81:
         64:72:0f:36:42:18:d1:6e:59:11:d9:19:37:f9:77:16:c2:f3:
         1a:92:ef:07:15:b1:2e:48:f4:8a:46:0b:f4:c7:8a:f0:ad:7d:
         da:12:30:ff:7f:ec:98:8b:a4:3b:a6:c5:52:dc:38:63:77:46:
         ba:7c:59:b8:cf:7c:25:67:58:16:df:04:a2:9d:8f:2c:ee:d6:
         ca:bd:f3:ab:9c:79:03:32:06:2f:81:d1:75:19:86:04:43:6f:
         58:b4:a0:50:2a:00:50:0f:b8:fb:d4:79:2b:c0:eb:cf:03:8c:
         a6:46:6c:ed:21:f0:db:01:36:e5:ea:e4:86:17:bc:7b:f1:3c:
         a6:5c:92:0d:28:03:10:56:5c:a0:7c:56:33:42:a8:74:cb:6b:
         07:41:b2:a2:2c:37:9d:d4:2a:a6:17:b0:3e:50:59:29:58:5b:
         22:80:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:40 2024 by rpki-client on console-fra.rpki-client.org