Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File:                     oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier:          9onSMC/zO5nvcaKXXDc47hKKanptWAwbzULPB7I3+oE=
Subject key identifier:   83:5D:B7:19:C3:DF:87:E5:77:41:CD:B6:7A:01:78:58:C5:54:35:82
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer:       /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial:       018F8823F8FC0F5C3060009995571F1B6F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:09 +0000
Manifest this update:     Fri 17 May 2024 20:00:09 +0000
Manifest next update:     Sat 18 May 2024 20:00:09 +0000
Files and hashes:         1: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: JA+tdATwZxYViqZyjk6grmuMQigv2WZ4aKd0XomvrUI=)
                          2: tVwr78ld7SoOygHpc8B-ZuM4_lA.roa (hash: tAxopEi5rL5oNBLP6xDOEAqY52ne/XOEZ+WtwqFcrj8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f8:fc:0f:5c:30:60:00:99:95:57:1f:1b:6f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
        Validity
            Not Before: May 17 20:00:09 2024 GMT
            Not After : May 18 20:00:09 2024 GMT
        Subject: CN=835db719c3df87e57741cdb67a017858c5543582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:f1:77:f1:1c:ec:b5:f4:5b:bc:3d:38:6f:
                    6d:ba:e4:e9:3f:06:ac:d0:75:5a:94:63:35:c8:77:
                    40:ed:f2:16:57:bc:83:0e:c0:f9:34:94:01:68:52:
                    b8:19:70:18:80:65:32:d0:bc:9a:87:9e:42:74:1c:
                    69:85:15:6d:a8:9e:fc:11:14:c1:8d:99:85:39:fb:
                    90:45:22:88:50:84:9b:af:53:89:27:f0:00:aa:8e:
                    69:33:7e:26:d3:db:60:e2:22:22:ed:eb:7b:34:0e:
                    e5:d8:4c:3f:0c:f0:fe:48:7a:90:86:49:21:75:82:
                    07:4d:47:6f:c6:8e:f1:47:a5:81:6d:39:76:7e:2a:
                    e0:82:6c:b1:25:2d:d9:3d:2e:87:92:63:fe:78:b7:
                    8a:ba:09:60:52:6d:06:5a:67:59:7d:2a:01:7d:45:
                    b7:39:8e:8b:68:6f:0a:85:64:fc:51:8c:8c:55:89:
                    92:08:db:35:48:68:16:f8:2d:ea:47:cc:7b:56:9c:
                    20:ec:4f:28:3a:34:2d:36:21:f6:8c:fb:be:9d:4e:
                    97:2a:ad:54:8e:cf:1c:91:fd:f0:cc:6f:24:bb:9c:
                    33:b6:67:41:52:99:d7:20:a2:a5:03:f2:5a:d0:a6:
                    7f:b4:ba:77:fb:39:cd:45:0e:21:2e:9c:80:cb:a2:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5D:B7:19:C3:DF:87:E5:77:41:CD:B6:7A:01:78:58:C5:54:35:82
            X509v3 Authority Key Identifier:
                keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d2:2e:29:c3:f7:95:22:12:da:87:55:fa:05:54:76:00:b8:
         0f:2b:26:b5:6f:dd:1c:c1:00:b0:ec:25:e7:cf:a4:5d:ec:a4:
         ad:c3:10:8d:e9:05:36:fc:66:5f:08:0e:90:8f:34:0b:37:a7:
         50:e7:fc:74:24:c2:f6:8d:9c:4a:fa:e0:1c:3b:29:09:0d:e5:
         5b:23:39:07:35:ea:55:a3:0f:c4:c6:94:a5:1e:59:a5:01:9b:
         89:e7:b9:e0:62:eb:7e:1b:a8:92:32:5e:90:9d:8b:fc:68:ed:
         c4:dc:fc:fb:da:73:2f:0a:48:e8:f1:1e:a9:63:57:2e:5f:86:
         6c:ba:24:33:28:80:07:84:ed:09:a4:e8:da:2b:95:39:8d:ab:
         00:be:b1:9e:99:dd:90:78:0a:1b:78:fa:12:bf:91:74:3b:51:
         12:47:8f:17:f5:a3:f3:96:14:33:5e:70:94:9a:5c:7e:c8:9f:
         14:b0:fc:77:c5:a2:6f:a0:a0:34:5b:65:de:34:e9:32:71:fe:
         f2:b6:6a:52:c4:d2:d3:40:f8:c5:fa:b8:f6:67:96:dc:c9:0a:
         b9:a9:9a:eb:fa:3e:ff:3a:c9:0e:91:5f:7e:cb:00:20:0f:da:
         90:9a:d7:c2:8e:5a:f9:b9:0c:fb:5a:65:26:00:99:2c:32:45:
         f4:c1:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:55 2024 by rpki-client on console-fra.rpki-client.org