Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File:                     O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier:          RokH+iAwmBDIOUfcvtp7GbnSAQBbWF6aR1TDBYB98UM=
Subject key identifier:   A8:CF:DD:6E:27:D4:1D:7B:CA:CC:D6:5E:B4:9B:E8:11:25:F7:91:5C
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer:       /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial:       0193579BE4505A388E9FF29B2A09BF062A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number:          0B36
Signing time:             Sat 23 Nov 2024 06:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:54 +0000
Files and hashes:         1: J1d-JCJqTVYxS09U1ZVavndOvpc.roa (hash: 3RJv9k5ldTB08jLisVtq9X29L7m6EJydKh9jAT9t3ig=)
                          2: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: nRQFR3D+XLx/YYAKPJHoegxlX/yW1hgCYOqgDdqv6ng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:e4:50:5a:38:8e:9f:f2:9b:2a:09:bf:06:2a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
        Validity
            Not Before: Nov 23 06:00:54 2024 GMT
            Not After : Nov 24 06:00:54 2024 GMT
        Subject: CN=a8cfdd6e27d41d7bcaccd65eb49be81125f7915c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:70:45:27:35:27:f9:cb:4d:1d:64:47:76:
                    50:85:c7:18:a6:aa:55:f6:6d:68:67:64:8a:d2:2e:
                    1f:5a:b6:b3:5a:83:c8:97:c3:2a:32:5a:27:e7:01:
                    e4:e4:2b:0e:6c:14:02:cf:fc:e2:80:b3:41:3d:c6:
                    39:85:0e:3f:fb:13:1d:03:ad:0a:95:09:a0:83:71:
                    0f:71:dc:4c:59:dc:74:02:f7:a8:e3:6b:28:a4:ea:
                    0f:3b:5b:5b:f0:1d:8e:cf:e5:7d:5d:7c:0f:76:e4:
                    b5:59:4a:e6:8a:f0:c2:6b:2c:63:d3:43:62:b5:2b:
                    a0:72:e5:7a:19:2d:28:05:74:a0:bc:cd:99:41:c6:
                    90:3f:d4:88:24:2d:af:6c:cc:e2:d6:dd:0a:19:fd:
                    0f:31:b4:98:72:4e:f4:aa:97:62:d8:0c:d5:6f:0c:
                    81:20:cf:89:17:b9:70:67:c5:cf:c6:54:94:a8:e4:
                    24:3c:87:98:34:f3:5b:3c:df:a4:e0:8d:76:15:3f:
                    36:ad:ef:5b:82:ec:bc:63:08:51:21:cc:ae:af:4d:
                    04:56:30:1e:6d:54:b1:96:9f:91:4e:2a:57:f3:97:
                    9c:14:bd:21:0c:fe:5a:0a:a0:d3:fd:3a:bd:9c:26:
                    54:73:ba:ea:e1:2c:3d:c0:28:26:92:4c:2d:45:1b:
                    69:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CF:DD:6E:27:D4:1D:7B:CA:CC:D6:5E:B4:9B:E8:11:25:F7:91:5C
            X509v3 Authority Key Identifier:
                keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:82:36:ea:54:59:8d:73:1b:30:e1:21:55:fe:62:21:33:
         0f:31:44:76:b5:e8:83:19:2f:42:c5:e4:2a:fb:97:28:c9:ce:
         db:8f:b0:d6:d7:68:e3:56:62:de:b4:7d:30:50:3f:6c:4a:76:
         04:29:b0:5d:48:72:8b:d2:57:a8:f7:72:f3:42:03:11:3c:f1:
         a0:7d:49:f5:47:27:ef:99:59:95:9f:c1:42:72:72:9d:06:21:
         cf:b0:58:a1:f0:bc:81:86:1b:6e:47:e4:96:b4:eb:a1:e2:6b:
         a9:13:23:18:eb:a7:df:7b:20:05:70:45:fa:e7:49:13:98:49:
         36:49:be:37:a1:cb:92:ec:ce:9e:82:3f:fa:7a:3a:50:87:b4:
         15:03:b2:27:56:ea:e3:67:bf:15:26:f7:12:3d:69:46:7e:cd:
         6e:73:b9:a9:9f:a3:a7:22:ed:fb:37:30:ed:82:ef:bc:cd:14:
         6d:62:1c:2c:e3:8c:22:81:25:7c:ab:40:10:a3:0c:1b:93:9d:
         7d:26:d6:de:ae:a2:a4:56:d1:16:9b:d5:1d:af:75:cb:e5:08:
         85:da:ea:69:8a:db:b5:9e:0f:a9:47:fd:8f:1a:03:b0:1c:bb:
         0f:b2:d5:2d:4e:51:34:a9:d4:c2:11:81:4c:c2:5f:70:43:61:
         85:fd:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:55 2024 by rpki-client on console-fra.rpki-client.org