Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File:                     O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier:          4BkIc0tQjZ5/HPJ+k8E7Bmfu3VaA8T6+Ut+GeRnt+ds=
Subject key identifier:   C0:08:C6:71:3D:02:3D:D8:7F:28:ED:9C:17:04:66:BA:F5:2F:78:F7
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer:       /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial:       018F5ADFB4F20040CA39F2F59DA1A98EE26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number:          116F
Signing time:             Thu 09 May 2024 01:02:41 +0000
Manifest this update:     Thu 09 May 2024 01:02:41 +0000
Manifest next update:     Fri 10 May 2024 01:02:41 +0000
Files and hashes:         1: BbVA45-G3JaZ9aARBupwivZdtwc.roa (hash: Olst5gc6kfnLaRGa2S9NliQKizwEJoLwQTKdBrdZ2Z0=)
                          2: MKC-PwTuuMLdugPlxIzteNmxkWU.roa (hash: dpWBPHw1roNJPMJ4aeYo7B4udRj0hryl/1X0HcD6f3k=)
                          3: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: 2Jym7qymv+dXrQIedO8oMtlDP3D0hk28S8cWArYNUFo=)
                          4: P66mpHo1-dmOLpuTK0e5B7uhOPs.roa (hash: a6iXRJHum+QdRJIxDkGuecL6Yk3tb3/R+aY/LBXo5xY=)
                          5: c8WrLVu_21_PKTbhCc7excuHkV8.roa (hash: 5qQ/9bSH4F/YykiMEHSAjGwjG3PSHqJlXb+t1DVhdbE=)
                          6: d2y0qQHqhq9Z-pkV9jMaw5NZ78A.roa (hash: X42kxnoM7gASFhqHQH9+TLpK7iibF2TM0Jfk0gkWaSQ=)
                          7: eWX5ufeAL_W1niX8HTHidwRee2w.roa (hash: 5FMrkC1e3v7Q4VryxY70BJPiGlqUtyjNNZ/xK1YAgks=)
                          8: j5a67ySjThAK3cSkis_vi5k3qec.roa (hash: lO7rtjk8uZKo1cQ2l937nOHr/2PqYKNfsJcWPSQ5c/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:df:b4:f2:00:40:ca:39:f2:f5:9d:a1:a9:8e:e2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
        Validity
            Not Before: May  9 01:02:41 2024 GMT
            Not After : May 10 01:02:41 2024 GMT
        Subject: CN=c008c6713d023dd87f28ed9c170466baf52f78f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:fb:54:ae:5e:89:ec:e1:38:f4:a4:aa:2c:
                    54:50:aa:9f:76:70:fb:9d:5e:b2:4c:5c:28:4d:a3:
                    19:38:90:4a:49:49:40:92:b3:65:aa:16:cd:ee:9d:
                    1e:53:c0:62:85:85:69:51:e4:ab:7b:62:bb:05:6b:
                    05:59:25:15:62:2a:6e:99:aa:6c:ac:19:9c:17:b4:
                    54:58:b8:9f:0e:f5:c5:3b:42:38:20:9c:2b:71:96:
                    13:50:0d:4a:4e:dd:36:61:7e:ac:6a:1b:fe:cc:e3:
                    2f:9b:89:f1:ce:ac:db:41:b5:64:69:c2:ab:8b:74:
                    d3:7a:2d:fc:9c:0c:a1:d9:50:72:38:59:3b:5a:27:
                    8a:85:8b:26:62:2a:86:15:6e:b0:ba:b8:01:30:14:
                    66:06:f1:c9:d5:d8:18:59:a4:7a:ad:a2:28:62:16:
                    e2:c7:cc:8a:2d:ab:b6:a0:36:4e:cb:01:5a:f6:e9:
                    00:3d:bb:a3:ed:41:d2:9e:57:27:f6:2f:3b:54:a5:
                    ab:ad:dd:78:89:d5:e7:da:23:90:d9:b3:49:33:46:
                    af:af:c1:f1:25:e1:40:2f:7e:8d:d1:da:07:dc:55:
                    11:f5:b0:71:d5:99:1e:a6:1f:b3:4d:6a:a5:72:74:
                    23:e3:b8:4b:90:6f:e1:29:b1:6f:87:f2:b3:6f:e4:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:08:C6:71:3D:02:3D:D8:7F:28:ED:9C:17:04:66:BA:F5:2F:78:F7
            X509v3 Authority Key Identifier:
                keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:09:29:0f:52:7b:76:19:4a:55:6c:fb:58:0b:5c:3d:32:
         8b:27:1b:da:74:a8:53:ff:1b:c4:b2:ae:4c:69:5d:76:c9:0a:
         e7:1d:e6:c1:07:3a:9b:28:d6:5c:1b:6b:fa:9d:8c:52:5f:9b:
         17:99:df:d3:3b:43:1c:20:7d:83:55:23:03:7d:60:ed:04:87:
         1a:aa:26:e1:5a:37:4d:36:e5:79:04:2e:35:42:d9:f5:21:63:
         93:2b:ba:8a:ae:32:1f:f2:94:73:ce:8e:38:8a:1b:d4:31:ab:
         0c:e4:9c:f1:6a:e2:56:b5:ac:28:48:79:2c:3b:cc:78:51:e8:
         2b:df:99:7d:22:1e:c9:26:a2:cb:fe:d6:ac:3d:f8:dd:60:6b:
         43:d5:1f:fd:2f:01:5f:b6:12:56:4c:61:68:07:71:25:ce:27:
         20:e3:aa:b7:b8:74:d0:c7:66:d7:d5:85:03:fa:14:cb:1a:3c:
         4d:9a:62:81:6a:cd:47:0e:63:fa:bb:b9:19:a2:ac:a0:89:ec:
         b1:73:16:e2:18:e7:b9:ca:66:ae:d0:71:ac:33:aa:62:6a:ff:
         5c:3a:8c:e4:c7:cb:81:36:97:9e:23:77:fc:e8:ea:e2:78:16:
         f4:12:4c:8e:bc:b9:18:9f:0d:1c:b0:3c:9c:cd:11:6f:28:2d:
         07:15:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 02:43:25 2024 by rpki-client on console-fra.rpki-client.org