Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File:                     otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier:          Ju0uZ/OYe/JJa9wTm5hxhFe2IqgKx5oBi0+LBy6soaY=
Subject key identifier:   07:54:DA:4B:C2:A9:52:91:83:52:06:09:6B:3D:45:AE:ED:7E:E7:2B
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer:       /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial:       0191FAB4FD6F64B4785A2DFCEF8AB004D610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number:          0118
Signing time:             Mon 16 Sep 2024 12:00:50 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:50 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:50 +0000
Files and hashes:         1: emVE3TWvPI4mjfy2k9dAVHXNYRY.roa (hash: vCYA7gO/ILKKHL/FyHAM8xgc9Q8kYxoSTahsd+W6wUU=)
                          2: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: oP5uuyLJpQMhzgnP/ldw/YAy06cNdotwTfddx0SMhxg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b4:fd:6f:64:b4:78:5a:2d:fc:ef:8a:b0:04:d6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
        Validity
            Not Before: Sep 16 12:00:50 2024 GMT
            Not After : Sep 17 12:00:50 2024 GMT
        Subject: CN=0754da4bc2a95291835206096b3d45aeed7ee72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:2c:d6:9d:74:fa:a7:46:25:ec:f8:5a:72:
                    0f:95:6f:b9:0c:62:8d:cc:5c:e8:13:39:64:ba:e5:
                    9d:09:bd:37:db:00:54:cd:3d:85:b4:d6:e9:f5:b6:
                    ec:79:fd:f2:0a:85:68:01:e7:96:2b:cd:6b:ec:7a:
                    33:ec:72:ce:c4:a5:bd:5a:19:a9:37:e4:21:a9:f2:
                    1d:5d:48:61:ba:81:2a:2a:5a:ea:b0:a2:bd:60:e0:
                    7c:c4:4c:ce:5a:e2:b1:e4:5a:92:8a:a3:50:87:5c:
                    c3:6a:bd:7c:49:88:13:69:ab:d7:51:b5:2d:e1:f8:
                    c0:f8:f8:79:92:bf:8b:83:b9:f5:47:ac:91:de:c0:
                    df:2a:0d:37:dd:a0:85:d6:e5:10:40:d9:0a:d5:69:
                    cb:78:98:fb:c3:cc:6a:2a:1e:36:cd:fd:e2:1d:ac:
                    b4:f4:40:a2:34:b5:94:15:d0:26:b6:d3:f8:61:22:
                    f4:69:b9:17:93:db:c7:20:9c:91:23:41:a2:27:e7:
                    5c:a5:92:60:5d:0f:f4:e8:93:c2:b7:53:e9:83:ff:
                    b9:fd:5d:27:18:11:6f:90:18:d0:ca:13:32:cd:11:
                    d6:7f:2c:f2:42:ce:35:f9:8b:46:a7:c8:02:08:de:
                    69:6d:4d:8a:0b:fb:ba:0a:e2:03:22:44:47:0e:0d:
                    42:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:DA:4B:C2:A9:52:91:83:52:06:09:6B:3D:45:AE:ED:7E:E7:2B
            X509v3 Authority Key Identifier:
                keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:b3:ef:2c:77:33:ed:01:98:55:35:2d:70:9b:99:b8:5d:
         87:84:8c:57:4c:4c:61:17:82:c0:51:4a:ad:3c:f9:2e:3c:8d:
         bb:8a:81:ea:4a:3d:c7:c6:2a:9b:66:40:5d:0c:97:b0:40:54:
         1a:a2:13:25:d7:c0:f3:6a:6a:1a:bb:cc:06:6e:83:2b:31:9c:
         cb:3f:35:0a:ad:27:52:45:68:45:bc:d8:eb:c3:06:0e:76:ae:
         e7:f4:dd:a9:e7:82:30:f3:b8:27:d9:a6:97:e1:40:83:05:63:
         da:9e:80:11:51:78:07:b4:17:a1:6c:85:7b:1b:7f:8e:46:21:
         c2:a7:da:2b:7d:6d:b0:99:b8:77:1e:3a:74:69:55:18:4b:59:
         34:89:65:08:84:af:a7:91:59:f2:60:9d:97:65:a8:1b:86:af:
         22:a5:21:a2:3d:bc:ad:99:e0:2f:68:44:9a:2e:83:b7:fb:08:
         8e:6f:af:0a:77:8a:6f:12:dc:3b:1d:ba:61:b6:fd:03:df:7f:
         4c:b5:62:8b:d1:86:65:66:ab:c7:f3:7a:09:c4:84:a1:9a:6c:
         5b:ef:58:e1:87:70:05:d8:8e:f4:48:21:25:b2:31:32:04:bc:
         ac:5c:17:ee:ae:32:fb:39:80:9b:60:1a:39:76:cc:a5:9e:38:
         6c:3d:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:28:51 2024 by rpki-client on console-fra.rpki-client.org