Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File:                     obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier:          Kot7SAmfKDItoBRYFyR9iUjmvaCgkGoL8zfGtE6fgQI=
Subject key identifier:   51:75:72:2E:9C:CC:48:78:5B:18:44:DE:E9:10:19:E0:C5:0E:F9:2A
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer:       /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial:       018F87EDA4E09E509EE784B130BBBAFA22AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number:          0656
Signing time:             Fri 17 May 2024 19:00:49 +0000
Manifest this update:     Fri 17 May 2024 19:00:49 +0000
Manifest next update:     Sat 18 May 2024 19:00:49 +0000
Files and hashes:         1: lF1iyyTecMer-VEWz6HQbJ1h-9c.roa (hash: nLmObfbfkjWCUPDsHMsXFEfQy+o26JLPtuqfyjE0XtY=)
                          2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: IeZVsnessA6bSHhMjzt0Ge8tM+TtmrZRDG3Bj8PVyXg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:a4:e0:9e:50:9e:e7:84:b1:30:bb:ba:fa:22:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
        Validity
            Not Before: May 17 19:00:49 2024 GMT
            Not After : May 18 19:00:49 2024 GMT
        Subject: CN=5175722e9ccc48785b1844dee91019e0c50ef92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:6d:d0:e4:3a:a4:86:c9:c0:ed:11:af:e0:
                    2c:cc:4c:c5:61:4a:ce:58:ed:54:89:b5:5f:e5:ec:
                    50:9f:96:69:eb:53:08:b3:04:f3:d2:a5:9a:ac:dc:
                    4f:2d:79:f7:eb:c8:97:a1:db:a0:6d:f7:73:29:66:
                    3b:b7:ad:0d:43:92:ab:77:ee:06:e0:94:c4:54:6b:
                    44:46:5b:21:a9:aa:3a:e4:5d:cb:8a:88:d9:ce:bf:
                    a3:5e:c6:28:d7:ce:45:0d:61:b2:c3:28:37:49:48:
                    d1:55:9f:40:08:1e:d3:66:b8:18:74:a2:1a:2b:48:
                    fb:53:23:32:03:29:2b:08:de:cd:a6:c4:2d:76:b2:
                    4c:9f:0a:e7:b3:95:67:fa:a4:7e:90:12:a1:39:a4:
                    19:2c:f0:fd:48:14:2a:9b:45:29:0e:29:2d:69:c4:
                    60:6c:7e:b3:46:e2:19:b0:bb:02:a6:42:ad:f0:4d:
                    dc:04:42:b6:79:b6:be:01:93:55:59:1d:fb:02:37:
                    76:66:d3:50:cd:e0:da:98:4b:14:50:3c:01:45:85:
                    32:26:e9:90:4f:e9:c9:2c:60:e3:13:eb:e5:53:46:
                    2d:92:19:8d:60:17:5e:61:36:7d:09:d0:64:ad:e0:
                    78:d5:63:0f:4d:ba:3e:49:4d:b6:a0:6d:c2:03:5e:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:72:2E:9C:CC:48:78:5B:18:44:DE:E9:10:19:E0:C5:0E:F9:2A
            X509v3 Authority Key Identifier:
                keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:ab:fa:a4:ed:0c:c0:05:ba:1e:91:da:c6:14:c1:96:64:
         aa:55:dc:43:95:1e:1f:63:16:eb:75:04:fd:b1:0d:79:85:ad:
         5e:b3:82:b9:27:28:e6:57:a9:d8:ed:3f:b3:74:53:85:1b:37:
         99:98:6d:c1:81:f7:90:eb:73:d1:89:29:43:90:3f:2d:ab:90:
         7d:23:1b:96:2c:b0:e2:05:fb:d8:8d:2d:76:db:b6:0f:83:13:
         4e:48:65:7e:0e:39:d1:e6:d0:ab:89:1d:6e:fc:02:b0:f5:44:
         5e:6c:82:6d:d6:a7:aa:6f:91:fa:d4:c2:af:1c:1a:eb:db:bd:
         55:57:77:61:65:29:1c:07:72:5d:16:b9:c0:e8:5e:23:c2:42:
         5a:cf:ec:f1:eb:a3:23:40:cb:8d:6c:3e:16:fe:08:bf:03:7d:
         70:6a:e7:58:85:92:68:b6:8d:f0:66:65:69:75:62:c2:c5:82:
         68:52:31:d3:33:c0:d1:92:97:20:34:f7:05:65:3a:e6:b7:80:
         89:b7:7b:5c:b3:a4:cc:24:c7:57:97:62:7d:21:ee:c9:0b:a2:
         3b:ec:15:ce:a3:e7:c4:9b:dc:f2:58:22:c9:7f:c7:fb:9a:00:
         12:2d:51:12:42:c4:01:1d:76:e8:b9:c8:f4:f0:f3:8c:9f:c4:
         00:db:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:35 2024 by rpki-client on console-ams.rpki-client.org