Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File:                     oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier:          +ZmPLcK9yd+xkJUCLsQHaNCTOnEgLPozZaurnrBAW/4=
Subject key identifier:   A4:4D:66:31:17:41:1A:DC:BE:3E:6C:95:0C:88:25:9F:0D:13:73:49
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer:       /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial:       019352AE56AB8CF2EEFF2F47CD6EBAD49913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number:          0D4A
Signing time:             Fri 22 Nov 2024 07:02:57 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:57 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:57 +0000
Files and hashes:         1: 0wt2hqmPScdh8hEEQjwgK92M1ws.roa (hash: noIKgampjm48pJJVBiX/owIf07PFPWXYX9Jsan5tKpk=)
                          2: 1KEGHQmULn4ro-xVX2ZjkNo9BTw.roa (hash: 9h7O8zevIF/7SP+vwypVcniLHF6lE3Vs7pdJiTqCp+Y=)
                          3: 1rSEcxSJI3Vqp99PWh7sJqbp0mI.roa (hash: k5gn4yfULZ2xeDivsMHe5nuaS1M7y4pXBi/lwQrW7q8=)
                          4: A6P6N9iHYVPkK4vI8MV7iCmgSmg.roa (hash: p3LqcVU3qTPeRHB89JuLVzBt8C7uopfG/fMdYv8iAoM=)
                          5: RzYuQpvXAjsOJtv88YkQPlLLoYw.roa (hash: YNS6rQZq5TBfSnVNVW+2kwQLqrbCihaGi/6IBnTPSlA=)
                          6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: /0yuR68uMFuRJPwhkeeAAai07GuY/kVVSWCB6Vs84yk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ae:56:ab:8c:f2:ee:ff:2f:47:cd:6e:ba:d4:99:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
        Validity
            Not Before: Nov 22 07:02:57 2024 GMT
            Not After : Nov 23 07:02:57 2024 GMT
        Subject: CN=a44d663117411adcbe3e6c950c88259f0d137349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:6f:35:fc:c4:dd:b5:fe:68:1b:3c:f6:eb:
                    c2:6d:3f:ed:fb:bf:27:d1:8e:2e:64:8a:6b:19:c3:
                    db:d6:ca:ba:06:f2:8f:62:cb:96:01:ea:e5:2c:bb:
                    ad:47:45:d9:fe:a9:26:bd:c2:4b:85:f3:80:85:32:
                    f1:dc:2a:55:3a:78:62:4c:ae:64:45:cd:e9:51:53:
                    97:5b:6b:c7:7f:bc:fb:18:8d:86:aa:b6:62:e1:e0:
                    98:ae:03:66:05:a2:3a:d8:90:93:49:65:b1:92:c4:
                    fe:ee:c4:ba:5c:b7:a6:1a:39:13:db:6e:e5:51:b1:
                    10:31:c1:6a:03:c9:a7:70:63:3f:a8:71:ab:26:78:
                    fb:bc:f9:94:3c:3b:d5:12:06:ab:79:55:1a:d7:42:
                    ed:bf:2c:6b:de:33:3c:c9:ec:1a:be:42:12:0b:c0:
                    6d:43:2a:86:3e:8e:20:01:9d:3c:27:45:cf:a6:19:
                    10:8e:d2:7a:37:08:cd:12:28:e5:3a:87:f7:94:55:
                    cc:07:ab:92:f0:97:7f:e2:95:ac:7f:18:56:96:8d:
                    3b:0a:08:b1:cc:38:91:7b:e4:81:13:3e:1c:0a:a4:
                    b7:dd:3a:b0:3f:0e:1c:43:56:57:71:bb:5e:9e:bf:
                    7f:fb:91:5d:72:4f:3f:6a:2a:9d:39:79:be:ed:13:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4D:66:31:17:41:1A:DC:BE:3E:6C:95:0C:88:25:9F:0D:13:73:49
            X509v3 Authority Key Identifier:
                keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:76:54:95:6a:11:63:8f:4f:a3:ca:7e:4d:88:6c:a2:5f:
         59:aa:4d:97:6e:1a:bd:1e:f3:8b:75:b0:8f:25:bf:c6:dd:1a:
         2e:a5:86:0c:a6:8a:66:37:84:c8:30:ac:35:6f:c1:a2:a2:cd:
         9c:3e:d6:b8:fb:fb:2f:dd:70:c2:ff:b9:fb:80:57:4c:32:a9:
         bf:fa:c9:e8:65:31:71:25:d7:77:20:75:36:17:d0:ff:08:ae:
         d1:5e:4b:39:21:48:a1:5d:a4:75:1d:d2:81:41:bc:96:29:17:
         67:40:0c:d7:76:03:87:4b:c0:54:23:22:99:7e:5c:64:34:f6:
         5a:1c:f0:e2:3f:7b:a5:dd:fa:68:1a:e8:86:6a:1a:0e:e0:e5:
         72:1b:7c:14:e7:f1:5c:4a:25:4a:25:ba:c8:80:67:f2:c2:06:
         7b:63:28:8c:43:48:03:9c:60:05:aa:15:5e:9d:fe:47:62:e0:
         21:02:71:5b:e3:aa:5e:f4:36:85:42:fa:84:41:ac:f9:13:a5:
         1d:e2:03:8a:31:d1:d3:ea:d6:ca:f5:2d:28:a3:c0:ad:d4:f9:
         3b:94:3c:39:8a:6c:cd:9b:a7:b8:3b:37:da:6d:e2:3d:e9:2e:
         23:26:65:f1:8f:4c:aa:5f:7a:29:89:65:94:88:1a:52:4d:2f:
         f7:04:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:24 2024 by rpki-client on console-ams.rpki-client.org