Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File:                     OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier:          aWUirhJ36oce2y+sK/qBQG9c3U/u87aqrMTPEX2YV+4=
Subject key identifier:   64:3B:08:E5:5B:D5:3B:43:4D:33:95:E0:85:D8:BC:E9:F4:19:8C:94
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer:       /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial:       018F866C9EA489F7AFF291A3225513E1E777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number:          0641
Signing time:             Fri 17 May 2024 12:00:16 +0000
Manifest this update:     Fri 17 May 2024 12:00:16 +0000
Manifest next update:     Sat 18 May 2024 12:00:16 +0000
Files and hashes:         1: OCUhvVCSWg3iy2uXctG-QpvDWLU.roa (hash: 0JWhHsns9mrL9PQCjHRQJX/9dYEqR6UwoR69aDrchRg=)
                          2: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: jMU65BQl1xrGq3cr2TkHoG/OHeBuph/O0pvfAvPrxB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:9e:a4:89:f7:af:f2:91:a3:22:55:13:e1:e7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
        Validity
            Not Before: May 17 12:00:16 2024 GMT
            Not After : May 18 12:00:16 2024 GMT
        Subject: CN=643b08e55bd53b434d3395e085d8bce9f4198c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:bc:d6:50:72:41:3a:01:95:2c:d1:eb:ca:
                    8e:fb:eb:6c:93:64:93:c0:bd:46:50:34:7d:66:10:
                    4b:59:10:00:b3:ac:55:9b:34:d9:eb:ad:b3:08:bf:
                    81:1b:d9:e1:0e:be:fc:2f:d8:e2:76:87:00:b7:fb:
                    95:61:32:28:3c:68:3a:51:71:71:9a:74:54:61:4a:
                    53:aa:eb:46:d3:c5:48:8c:e0:da:f2:97:7c:79:22:
                    1c:be:29:03:e9:6c:7d:ae:5d:79:4e:cf:4f:01:85:
                    31:17:2d:ef:c8:ad:b0:fa:fc:c2:ad:34:ff:18:16:
                    42:0a:f0:52:36:b3:b1:36:29:e3:d8:8c:df:32:64:
                    3b:53:da:f8:bf:a4:64:fa:15:e5:85:21:60:6d:43:
                    20:79:b4:2b:a4:19:b5:76:45:c2:e3:ce:2d:f2:98:
                    c3:1d:94:66:f7:22:a8:72:0e:db:a6:37:6d:bf:53:
                    8a:43:57:82:83:53:48:64:ae:c1:27:a2:a2:a4:99:
                    05:2f:e1:b4:e1:9a:da:fb:e9:8f:5e:3c:f3:ae:6f:
                    16:1b:ec:e1:84:9f:e6:67:f6:f4:35:95:e8:4f:b9:
                    df:f0:71:65:fa:5e:04:1c:4c:b0:87:2d:6c:b3:2e:
                    44:92:bc:58:16:87:a2:12:7b:0a:89:08:bc:7d:25:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3B:08:E5:5B:D5:3B:43:4D:33:95:E0:85:D8:BC:E9:F4:19:8C:94
            X509v3 Authority Key Identifier:
                keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:ca:ed:74:d3:ac:38:81:fb:d5:a6:85:d4:30:45:7d:31:
         04:9f:56:34:e1:a9:8a:06:f7:63:38:27:0a:a5:de:74:74:c7:
         ae:c6:88:21:10:d5:18:59:c3:80:56:65:25:e4:2e:14:36:8e:
         1e:7b:40:c0:52:6d:6d:34:0a:92:be:eb:2d:e1:b3:5a:bc:93:
         9f:29:71:03:f0:ed:54:3d:19:f1:66:ec:5d:06:51:da:13:64:
         68:ca:57:f6:79:4e:e6:87:40:9e:a5:47:bf:e6:94:db:d6:44:
         cb:9c:bf:33:6f:1c:4a:41:e7:c4:72:8e:fd:c2:64:e4:45:41:
         c5:3d:da:fa:5e:65:37:6e:97:b7:6d:68:8e:f9:72:b5:d1:b8:
         06:1b:2e:b4:4c:03:7c:fb:6d:d3:45:a1:e4:12:f2:af:73:7b:
         d1:07:43:cc:fb:5c:11:51:a0:65:bc:74:62:58:d0:f8:39:c0:
         72:6a:c8:a7:f5:ba:ec:25:63:39:55:c0:56:52:9b:0e:9e:0c:
         da:28:99:39:2d:de:82:87:33:08:9f:90:23:2d:e9:31:9f:3c:
         fd:ea:00:0f:09:0d:9d:b6:ad:04:f8:8f:20:a8:ce:b8:58:cc:
         b4:52:e2:62:28:b3:51:5a:76:0e:dc:37:cc:43:c2:e8:bb:4e:
         0c:1a:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:54 2024 by rpki-client on console-ams.rpki-client.org