Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File:                     ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier:          JPxLjbbv4UKNmnfGTT5s5Yf/6FSvDW4bPF36cj85dR0=
Subject key identifier:   44:EA:6D:33:3C:75:7C:E9:A1:68:56:F0:AF:F1:5A:9E:E7:B0:30:65
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer:       /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial:       019351999C38417D66156ADDFB6954FFCE24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number:          1E
Signing time:             Fri 22 Nov 2024 02:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:41 +0000
Files and hashes:         1: dB1InVD6nlvzQYiukDeSw4rUpH0.roa (hash: /XV0dsyjhksi3jpGkc8OSwyw8P0aAjZdoncQBDZ7jtU=)
                          2: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: Awy1kPy33xPdh3TkY6Ye2MOX7Q+AuBdKFULwGyuQRlA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:9c:38:41:7d:66:15:6a:dd:fb:69:54:ff:ce:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
        Validity
            Not Before: Nov 22 02:00:41 2024 GMT
            Not After : Nov 23 02:00:41 2024 GMT
        Subject: CN=44ea6d333c757ce9a16856f0aff15a9ee7b03065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:38:ff:35:58:3a:10:6b:ef:6e:8b:f8:6a:
                    d5:c1:7c:e2:31:19:bd:bc:f3:aa:9c:37:f2:a6:60:
                    b6:80:14:94:96:69:db:7e:64:f5:c2:9e:ae:8a:81:
                    a5:87:1d:cf:d3:f6:36:11:f4:87:48:6b:f0:80:84:
                    ff:be:b1:e5:a9:82:f3:7c:b8:cb:5c:bf:a0:a6:e0:
                    3d:46:f0:ca:1e:78:08:fb:38:57:6e:47:3b:7d:7e:
                    3c:ab:33:10:67:ff:41:79:8e:fb:8a:1d:60:d3:f8:
                    14:ea:9a:ab:0a:d2:33:73:d6:2c:f9:d5:71:8b:07:
                    ca:2e:00:d0:4d:ea:35:5d:a5:17:2d:81:f3:7b:d1:
                    bf:82:2f:24:0f:77:b4:a8:2b:9b:78:63:14:79:f5:
                    27:7a:7b:0c:00:f1:c0:2f:c0:f0:0a:e0:24:c2:20:
                    6b:e6:68:f5:24:70:c0:aa:d5:cd:eb:fc:3b:5e:e3:
                    74:ae:7c:11:2c:65:7e:38:3d:43:4b:b7:5a:04:1a:
                    0b:0f:56:e0:1d:60:1c:4b:f4:e9:79:e1:76:30:a3:
                    97:ab:ef:bf:5d:4d:2e:1e:ba:1c:63:33:63:ce:ab:
                    5c:7d:64:21:a7:ab:7e:d3:af:b1:22:5a:3e:b0:b7:
                    e1:06:dd:95:2d:45:cf:a4:ab:ac:1b:50:a4:f5:c4:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:6D:33:3C:75:7C:E9:A1:68:56:F0:AF:F1:5A:9E:E7:B0:30:65
            X509v3 Authority Key Identifier:
                keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:fe:85:cf:ac:9f:31:c9:e1:e2:6c:bd:b7:4d:c3:a7:8b:
         3e:28:47:6e:ba:a8:23:8e:24:7a:cc:d3:d1:bd:ea:b1:08:13:
         e3:c8:b4:08:ef:fa:e3:e0:6a:c6:38:5c:3d:e0:46:37:ed:cb:
         db:5a:f1:7a:65:af:2f:45:ba:3a:43:c8:3f:e2:37:42:6c:48:
         b1:35:cc:f7:4c:e8:7e:28:83:47:a2:e8:35:5a:a8:fe:92:61:
         5e:bf:e6:ba:7a:de:28:7f:0f:cf:47:98:ef:26:34:50:ee:53:
         06:0a:eb:1e:71:47:9b:e4:ca:f1:73:8c:98:d3:25:d5:9d:02:
         e5:bf:ea:d4:c2:7d:da:47:39:97:57:64:74:e2:f1:da:c7:78:
         9b:5d:23:1d:cb:21:26:0e:f7:bd:f0:80:05:bf:e8:50:aa:f4:
         19:ef:c8:de:38:41:a0:c2:14:23:4c:60:57:8a:ec:55:17:82:
         dc:55:91:b0:b9:91:ee:6b:0f:73:79:db:3a:60:33:22:62:7d:
         04:af:55:8a:ac:55:16:69:87:34:3c:63:d5:b1:09:76:0e:e5:
         3d:70:ff:ff:4f:3a:0d:22:2d:1d:52:a3:94:3a:e1:44:39:82:
         35:dc:d2:51:27:f6:03:cb:1c:22:2c:04:ed:e3:32:7e:d9:08:
         2b:4f:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:21 2024 by rpki-client on console-ams.rpki-client.org