Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
File:                     OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft (raw, json)
Hash identifier:          UK9/FYpHBwwPrDhIp3M5wQEx85IBlt/0LCwELzmNV8g=
Subject key identifier:   2D:3B:D1:86:2F:1C:A2:A1:D7:8B:21:EC:64:31:35:AD:87:89:54:05
Authority key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Certificate issuer:       /CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Certificate serial:       018F87B6497FAA485FA3B6CD24C8346D1ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
Manifest number:          02D0
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl (hash: sYlIQY1fDdvuxgr+YET0znpLxjUfeCo9c6TuQEs0wtU=)
                          2: QhlBb_l6bOBUzoYcRNBoDz8ljMM.roa (hash: uwOBZ6GW+SAP9h9ZAylyeIG9t1I7HyJBnQfghXXSuGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:49:7f:aa:48:5f:a3:b6:cd:24:c8:34:6d:1e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=2d3bd1862f1ca2a1d78b21ec643135ad87895405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:e2:07:29:3a:7c:db:e6:66:f0:4e:67:b3:
                    73:b0:c0:f5:6e:00:52:d5:b8:53:8c:72:32:8d:8c:
                    fe:67:67:ef:4e:8d:e9:fc:02:e4:c4:02:70:35:3b:
                    c9:a2:f1:e7:5f:01:73:99:d4:2d:72:22:ef:ad:cf:
                    2b:ed:38:ac:5e:58:a6:fa:7c:b6:ce:5f:33:b1:5d:
                    c1:59:46:d5:90:68:8e:11:9b:af:4b:ba:33:f0:4f:
                    2e:1a:bd:c9:1c:e2:9e:17:f3:60:ea:fa:57:d6:45:
                    bf:c1:68:1b:f7:22:7f:1a:77:8e:51:5f:a1:29:a3:
                    1e:16:ea:74:e6:38:94:ce:7a:15:82:e5:09:a6:54:
                    4d:0a:6e:e8:a1:2c:c4:f7:11:ce:de:7b:30:a9:4f:
                    31:46:ad:21:c2:8f:f1:12:f0:77:15:20:f2:02:1b:
                    82:c9:87:19:9a:76:42:4f:1a:ab:36:34:b8:a3:c4:
                    ba:a3:12:c7:af:93:04:b9:f4:1d:ff:4e:6f:a9:26:
                    d9:4d:01:71:51:75:02:11:8a:e4:68:e9:4a:f1:a8:
                    07:e6:06:f1:e8:bf:fb:cf:c2:b9:24:ca:dc:b0:6e:
                    a4:c8:25:f0:ff:8a:82:8a:2a:0c:75:48:7b:47:19:
                    11:6b:39:82:7c:32:14:7d:08:c8:58:42:97:96:22:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3B:D1:86:2F:1C:A2:A1:D7:8B:21:EC:64:31:35:AD:87:89:54:05
            X509v3 Authority Key Identifier:
                keyid:3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7c:72:3d:78:c7:8e:7b:1d:b1:aa:47:c7:2d:2f:10:f9:a8:
         47:4f:57:3c:d8:f8:e2:e7:1a:ea:ae:2c:07:be:88:e2:d6:ba:
         ac:8e:a9:b6:52:1e:da:c6:99:3d:a3:7c:d6:26:fa:50:29:cc:
         7d:9c:16:24:f3:b2:24:31:72:e6:0a:dd:51:89:81:9f:b5:ef:
         e0:93:63:93:a3:e7:ad:e5:c5:20:a7:7f:f6:10:40:8c:5b:dc:
         1c:d4:92:4e:25:35:70:a7:41:e4:0c:d1:f5:2d:49:fa:25:98:
         fd:ef:fe:a5:6b:1d:23:06:dc:57:6b:b4:6b:07:92:b8:7e:b5:
         c3:51:d1:b4:b5:8a:3f:2d:28:85:c4:bd:3d:6c:ff:b7:60:d9:
         60:e3:30:0f:a3:d7:86:4c:ea:d7:b0:ba:b5:83:04:18:18:69:
         c4:07:2b:84:ed:72:24:7d:d9:5d:91:8d:96:bd:de:5e:e9:78:
         2c:60:a1:63:cf:0c:c6:98:4f:ed:58:bb:be:8f:f3:d7:a8:06:
         fe:e5:1a:5a:e9:72:af:93:23:68:8f:70:33:b1:91:05:bd:fd:
         43:63:a0:eb:09:d3:ae:41:6b:db:5a:2f:9a:98:fd:8b:99:92:
         c6:a1:19:35:bd:74:32:96:d4:7d:13:02:35:fe:b4:c4:04:e9:
         7a:26:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:09 2024 by rpki-client on console-fra.rpki-client.org