Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File:                     o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier:          zLKTGqHfBNLMjOJwt1Rlkay2OzhLqLeeqGDYWp2v/OA=
Subject key identifier:   0F:E4:9F:98:54:F8:87:53:74:3C:E9:E9:90:F4:27:8C:EB:62:E0:31
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer:       /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial:       018F874A096A2CBE86B9D65E066CE5B370D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number:          0BD8
Signing time:             Fri 17 May 2024 16:02:07 +0000
Manifest this update:     Fri 17 May 2024 16:02:07 +0000
Manifest next update:     Sat 18 May 2024 16:02:07 +0000
Files and hashes:         1: 8Umg6eVtRsPMV0mzwlBJQoSsbCQ.roa (hash: iLAWHhxdSrtPwSRNnB5zc79IbXFMHTbmnboH3BYb3fs=)
                          2: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: K2Jpy049eUi4LC4sGsJJnWcO6G9YYctG0Caavszhkh4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:09:6a:2c:be:86:b9:d6:5e:06:6c:e5:b3:70:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
        Validity
            Not Before: May 17 16:02:07 2024 GMT
            Not After : May 18 16:02:07 2024 GMT
        Subject: CN=0fe49f9854f88753743ce9e990f4278ceb62e031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:6b:46:32:ef:0e:4b:f5:0b:f8:a6:8d:0b:
                    c8:90:84:2f:1e:86:81:11:af:7d:0c:93:2d:f8:8b:
                    e9:4b:d9:2b:ab:85:e2:e6:e8:ee:67:a2:16:10:52:
                    f2:45:ef:51:54:fa:87:13:ad:46:b5:74:22:6e:81:
                    36:e9:75:3c:9e:4a:99:88:ae:b3:bd:33:df:b3:d6:
                    93:98:1c:ce:d9:db:4a:30:7b:34:f5:0d:fe:83:8c:
                    ef:f3:57:ab:d5:93:f8:dc:3a:de:a0:05:fe:a4:23:
                    4e:4b:40:ec:ae:b3:b5:a6:89:23:d9:e5:d9:84:a3:
                    fc:3c:6f:65:04:a8:2f:86:15:6e:f2:5a:36:0e:6f:
                    c7:57:5a:27:91:e1:89:4d:cc:3e:ae:f3:81:31:90:
                    c9:cd:07:6d:f3:62:a5:87:bd:5e:9d:ff:8a:6b:63:
                    dc:11:2d:51:26:bd:ed:ed:f9:ee:21:38:06:f7:6e:
                    4e:93:eb:f9:34:f2:64:c3:6d:e1:92:c7:c0:e1:77:
                    51:18:29:4e:9a:54:c6:41:c0:fa:a4:c2:7b:12:46:
                    ab:7f:57:1a:7a:15:54:3e:7a:bd:bb:b9:bf:75:03:
                    11:63:5d:d7:98:ca:c4:41:e2:e4:eb:48:22:54:05:
                    c6:48:42:c4:c8:e4:36:00:36:82:b0:92:94:0e:d0:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:9F:98:54:F8:87:53:74:3C:E9:E9:90:F4:27:8C:EB:62:E0:31
            X509v3 Authority Key Identifier:
                keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c5:9a:49:ae:d6:97:3c:68:03:7c:db:23:8d:42:77:69:fb:
         38:44:c0:c0:6a:1e:cc:02:35:e2:59:cd:86:8d:c9:b5:3c:0f:
         02:27:63:88:65:2f:48:cf:c7:6d:39:17:75:c8:9f:db:4d:62:
         1b:a5:56:f5:d1:f2:79:1d:7b:79:ec:72:50:c6:a9:c5:30:44:
         7f:ac:2c:93:2d:97:31:46:b2:20:74:2a:5e:ba:20:78:c4:e3:
         8d:46:ad:eb:1e:b1:bd:09:7a:c1:6a:91:09:11:9c:98:3e:dc:
         ab:9c:ee:f1:08:d5:2a:be:5c:e9:a6:e1:22:e4:40:28:c8:c5:
         b5:0d:3b:05:b0:67:ef:9b:80:4c:eb:7e:f2:7c:ec:98:93:52:
         04:a4:49:a0:39:8d:f8:3a:2d:fa:a3:a7:b7:ed:c4:94:4f:d5:
         91:99:ff:39:a5:7e:f0:a2:20:5c:5d:83:df:20:a2:b9:ad:04:
         4d:ff:e3:41:76:e9:7c:ad:2a:76:2a:59:08:64:a0:85:08:87:
         92:07:b5:f5:d1:57:8f:c5:0f:d4:75:2c:b0:83:48:98:cc:2f:
         9a:66:79:d5:e9:b8:40:38:b1:27:ce:3c:17:14:34:2b:51:07:
         f0:00:6a:d8:d0:69:f2:90:ad:d3:8b:04:ba:d0:57:44:67:4b:
         78:fb:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:48 2024 by rpki-client on console-fra.rpki-client.org