Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File:                     oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier:          qG6BsMrvrqwo9Xy7RpKIyfawRsUsI2a7ebbwmAwbW+Q=
Subject key identifier:   9B:99:DF:6B:7F:9A:47:90:B8:EA:D8:C3:BE:1E:B0:7C:25:FC:CF:7A
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer:       /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial:       018F87B684A8886ECBCC6786FE4A8E70E27F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number:          0EE2
Signing time:             Fri 17 May 2024 18:00:36 +0000
Manifest this update:     Fri 17 May 2024 18:00:36 +0000
Manifest next update:     Sat 18 May 2024 18:00:36 +0000
Files and hashes:         1: ZUrnh3aVY-lZ7gyUNzpiw8OMWH4.roa (hash: 3lxVNOgYp1GoaCx5JSdSW1QwKd7pacnk0fOw8jB5/cw=)
                          2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: cw5qONHrdSnA01Ka8WI1OtT+tIo62yCsVtBeiXmRNXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:84:a8:88:6e:cb:cc:67:86:fe:4a:8e:70:e2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
        Validity
            Not Before: May 17 18:00:36 2024 GMT
            Not After : May 18 18:00:36 2024 GMT
        Subject: CN=9b99df6b7f9a4790b8ead8c3be1eb07c25fccf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:ae:1c:59:b4:80:7a:9b:52:1d:a1:6d:9a:
                    2a:a5:28:54:e9:ee:a4:0f:3d:53:be:f9:40:00:21:
                    39:87:23:76:5f:a6:07:88:39:d4:7d:03:c6:da:34:
                    88:26:2d:90:40:71:d8:e3:87:84:98:21:99:2b:50:
                    65:e9:8f:b9:31:a1:51:1f:fc:6d:3e:a2:7d:60:25:
                    11:9e:7f:37:21:d0:6d:42:f9:fa:1d:e2:fe:b4:ed:
                    49:5d:42:5c:fc:ea:fc:99:5b:dc:16:d2:4d:15:47:
                    cb:11:e6:bc:10:b1:f7:4d:0f:44:b3:ad:e5:c6:4c:
                    53:b0:8f:45:ad:35:28:49:04:7a:10:5e:92:d6:8f:
                    b5:36:43:6a:11:ab:6b:f5:a3:9b:ee:7d:01:13:db:
                    ef:e5:d8:39:05:d8:7c:b4:f1:c7:7b:a1:ae:2d:34:
                    5a:0d:4d:8e:b1:a1:7f:e1:a4:c2:f6:79:da:21:23:
                    c1:32:89:f1:59:c7:10:03:b8:c1:27:c2:1f:ed:cc:
                    0e:80:6c:e3:55:06:cf:26:f3:46:f1:67:47:9e:4a:
                    de:b3:45:14:4a:5d:d1:ea:88:a0:96:bd:20:e7:e1:
                    2d:c9:b2:df:aa:08:ca:ef:ed:38:5f:0c:24:d5:c7:
                    20:f4:ee:be:3c:e4:dd:6e:6b:87:3a:ef:46:95:8d:
                    cd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:99:DF:6B:7F:9A:47:90:B8:EA:D8:C3:BE:1E:B0:7C:25:FC:CF:7A
            X509v3 Authority Key Identifier:
                keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:db:35:de:82:41:1e:61:0a:4b:70:5f:6d:43:aa:ac:66:c6:
         77:c3:e9:94:aa:c4:93:9b:34:ba:bf:2c:9a:81:52:2d:91:90:
         d4:ef:fc:f0:c3:7a:44:e5:7f:9a:b9:a6:ef:e1:5e:9a:72:1f:
         31:93:be:5b:5a:9c:f2:dd:c8:0d:12:09:6b:7c:53:c4:8b:df:
         e0:eb:a4:5f:58:f0:b7:60:bf:43:c3:ab:f1:cc:98:45:35:c5:
         05:42:ae:1d:ce:0c:eb:5d:a1:a7:ab:b8:43:c8:8a:fb:84:39:
         8f:71:85:d4:96:34:1b:0c:d8:5c:64:a5:79:49:4f:38:93:78:
         72:ec:13:dc:e9:19:6c:37:b9:b9:2b:1e:db:a6:dd:bc:2b:54:
         78:5d:24:d3:10:ee:12:7a:cd:2d:ec:0a:ad:30:d5:a5:9f:4e:
         e8:fc:78:24:84:58:c4:ec:ec:d3:dd:17:44:77:15:bd:4f:2f:
         b1:1e:ad:85:d5:f7:87:ad:49:9a:96:62:4c:86:3b:aa:3a:08:
         fd:a2:64:b9:76:22:6e:76:d1:5e:cb:25:c4:23:1e:d0:d4:3d:
         f7:b9:82:ca:98:3b:e4:cf:90:f3:3e:2f:9f:eb:2e:e7:f2:13:
         45:ee:2c:a1:b6:f0:ee:75:b9:fe:81:b9:a8:d5:84:f8:6e:c7:
         1e:b0:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:20 2024 by rpki-client on console-ams.rpki-client.org