Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/oCNHvJ2XM1XkgB8onKB1-dHhjUg.mft
File:                     oCNHvJ2XM1XkgB8onKB1-dHhjUg.mft (raw, json)
Hash identifier:          7GRynfo2Lz7DnmYgPUJZqEjoO6TfJgis7mvlfqmdVDw=
Subject key identifier:   63:70:3D:95:80:95:03:66:2D:B7:CD:ED:89:6A:BB:7D:A7:4F:02:F6
Authority key identifier: A0:23:47:BC:9D:97:33:55:E4:80:1F:28:9C:A0:75:F9:D1:E1:8D:48
Certificate issuer:       /CN=a02347bc9d973355e4801f289ca075f9d1e18d48
Certificate serial:       018F87B6AFAEA5DF1B1C1D87F831EFEFACE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCNHvJ2XM1XkgB8onKB1-dHhjUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/oCNHvJ2XM1XkgB8onKB1-dHhjUg.mft
Manifest number:          07F5
Signing time:             Fri 17 May 2024 18:00:47 +0000
Manifest this update:     Fri 17 May 2024 18:00:47 +0000
Manifest next update:     Sat 18 May 2024 18:00:47 +0000
Files and hashes:         1: Qd9L2zIOmH3lm6f97-2vVZZawAo.roa (hash: xvxH2ZjBK/rej4jEqWtZ23EKPFGo4KmwYDcbmmmeB/A=)
                          2: oCNHvJ2XM1XkgB8onKB1-dHhjUg.crl (hash: NvbBPqh8xaFGugBkjgYaWRwJvUSjAVOUCt824vnmUdA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/oCNHvJ2XM1XkgB8onKB1-dHhjUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/oCNHvJ2XM1XkgB8onKB1-dHhjUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCNHvJ2XM1XkgB8onKB1-dHhjUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:af:ae:a5:df:1b:1c:1d:87:f8:31:ef:ef:ac:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02347bc9d973355e4801f289ca075f9d1e18d48
        Validity
            Not Before: May 17 18:00:47 2024 GMT
            Not After : May 18 18:00:47 2024 GMT
        Subject: CN=63703d95809503662db7cded896abb7da74f02f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:35:83:9e:e8:e0:58:95:c0:02:06:c2:16:
                    0d:97:13:3e:e5:d5:e2:81:83:1d:19:ce:ec:56:39:
                    48:11:fd:3d:93:55:2f:f8:2e:df:0e:64:10:d0:03:
                    0c:12:56:36:8f:2d:b0:44:af:49:25:45:21:f4:63:
                    08:76:03:48:fd:99:3d:a8:bc:2a:01:45:4c:4c:a2:
                    bb:b4:5b:24:cb:5a:4c:7d:64:8d:52:42:e8:91:a7:
                    ee:30:35:58:a2:93:b6:75:eb:c9:86:af:80:78:42:
                    8b:3f:48:80:4e:ce:01:d8:c9:32:5a:f9:d8:d4:7c:
                    e7:c8:aa:23:13:26:ca:64:a5:46:6d:15:cd:ba:64:
                    a7:21:69:9d:2f:9a:d6:ba:f9:4f:93:d7:40:fe:14:
                    74:d9:18:f0:c4:a3:20:d8:5b:df:5d:0d:cf:7d:5b:
                    a4:39:37:e0:85:27:cc:2a:80:69:40:47:19:0a:cd:
                    3c:b1:70:5c:94:7a:8b:e8:62:63:a1:81:9b:43:9a:
                    7d:db:ed:0f:87:55:af:d4:b9:10:3a:82:4a:89:72:
                    a0:d7:ff:36:df:0c:c2:92:0a:dd:41:74:71:6e:5b:
                    e7:b3:5b:f5:fa:bb:36:c7:a7:c5:3b:67:c7:24:1d:
                    af:90:70:89:cc:c2:5b:8e:16:2b:0c:46:ab:c0:11:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:3D:95:80:95:03:66:2D:B7:CD:ED:89:6A:BB:7D:A7:4F:02:F6
            X509v3 Authority Key Identifier:
                keyid:A0:23:47:BC:9D:97:33:55:E4:80:1F:28:9C:A0:75:F9:D1:E1:8D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCNHvJ2XM1XkgB8onKB1-dHhjUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/oCNHvJ2XM1XkgB8onKB1-dHhjUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/142c4d-d073-48b2-bca0-322b5172af61/1/oCNHvJ2XM1XkgB8onKB1-dHhjUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:c3:5a:6d:03:a4:15:c1:3d:e8:6e:90:5a:d1:15:ee:f6:
         d8:c9:e9:ec:81:ef:89:9a:66:82:ee:1c:e1:ce:9e:af:cd:d4:
         b6:49:e1:2a:35:93:2f:c3:bd:1c:51:b9:8e:63:30:cd:95:49:
         55:5b:eb:16:a9:06:cf:c9:7a:d8:09:78:f1:84:a1:a8:5d:a3:
         aa:72:af:22:24:97:48:09:26:85:13:da:5d:7f:7e:0c:82:75:
         49:65:a5:c4:4d:94:0d:1e:5b:fe:41:69:f9:bd:ee:d6:13:a4:
         9d:58:3e:0c:80:6f:4b:b2:2e:a4:33:d6:ac:5e:e8:2c:11:5d:
         bb:08:ea:1c:c7:39:15:d6:d3:37:6b:47:c1:15:ec:1d:8c:74:
         f6:b1:43:81:ce:a0:64:8b:b4:cd:0a:09:66:43:14:33:60:de:
         bb:09:49:34:c0:f6:70:1c:f2:01:d6:9d:d3:a9:ce:23:72:79:
         23:87:70:fe:3f:60:28:56:e0:48:78:64:98:b3:65:7f:9b:5a:
         78:ee:af:c5:58:d5:7e:9d:9c:3e:dc:91:28:61:aa:93:9f:ea:
         f2:0b:78:89:68:18:89:df:1d:da:8a:bd:fc:1f:b3:b6:b6:11:
         83:6d:c4:25:88:6d:65:89:41:11:f1:57:94:39:6e:be:b5:00:
         7a:9b:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:29:20 2024 by rpki-client on console-ams.rpki-client.org