Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File:                     nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier:          OowDFcEsGbcJJ6gailNg4uMiozzewmGlbAFvo2GwP5g=
Subject key identifier:   64:AF:4E:FC:13:08:D4:21:AC:48:98:E6:9F:5E:BD:49:FD:AD:F1:61
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer:       /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial:       018F87ED0D20466CA373504654034BB55915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number:          0D36
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: 2ECn95bqZfzbT4pZYsOi0zbFQig.roa (hash: wuIkePzrIdK0F4KB+oQWr9nxnJKW9olLgkczKwILb+s=)
                          2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: j/VvFXgFlrO+qgXE6iHf8/3iJwW/vUzojagZrdjgrZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0d:20:46:6c:a3:73:50:46:54:03:4b:b5:59:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=64af4efc1308d421ac4898e69f5ebd49fdadf161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:6d:3a:e5:7a:9c:ab:68:6e:4a:20:a5:87:
                    50:c1:ec:50:97:b2:9a:f6:69:b3:5e:b3:68:b5:e8:
                    4e:68:2a:f7:1c:9e:81:06:06:b2:1c:b2:2d:fd:55:
                    da:e1:47:27:86:69:9a:6c:e5:86:40:a0:94:1c:cf:
                    88:de:02:ee:3d:f1:a7:10:68:8e:f5:d4:50:2f:f6:
                    6d:ea:9a:0f:c3:21:e6:1b:ef:64:b5:a5:66:f7:96:
                    b8:2d:c6:92:16:c2:95:d2:90:bd:a3:25:ab:9d:29:
                    b8:fa:9c:1a:3b:94:d7:8b:b2:80:75:59:bd:0a:02:
                    45:5f:42:3f:a8:3f:15:58:4d:e1:2d:f9:4e:eb:11:
                    18:3e:ec:cd:bd:45:02:23:d0:cd:76:d4:ce:24:bb:
                    86:8f:b3:c5:53:63:17:34:f2:46:c8:b8:16:41:3b:
                    91:2a:5a:51:11:e3:b6:8b:ed:4c:41:0b:c6:79:c6:
                    45:c2:14:f2:71:0e:2d:8c:97:18:fc:89:24:94:3a:
                    b3:48:a2:c6:f0:b9:0a:d0:5d:d5:3d:10:e9:17:1a:
                    62:80:f6:15:a8:39:ab:79:68:69:c4:8b:77:dd:25:
                    32:70:43:9e:41:cb:3c:34:70:6d:d6:0e:1d:04:15:
                    c9:e1:0f:e3:ee:19:82:ce:7f:d5:d7:23:3c:34:07:
                    19:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AF:4E:FC:13:08:D4:21:AC:48:98:E6:9F:5E:BD:49:FD:AD:F1:61
            X509v3 Authority Key Identifier:
                keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:10:8e:ab:04:a3:83:67:16:4d:c8:1d:92:1d:69:9d:2b:
         cf:11:f8:5b:33:a1:e1:ba:40:bf:84:1a:bc:f4:86:90:95:d6:
         a5:00:14:7d:09:3e:3c:c9:a8:23:5b:55:8c:bc:b9:a3:59:89:
         97:91:c2:01:3a:c2:76:c2:5f:ae:d5:02:4e:8d:6d:92:f0:2c:
         0b:14:91:31:67:74:08:b5:f8:f1:91:ce:fb:9d:d3:68:b9:7a:
         64:a9:67:4b:11:da:42:2f:97:58:08:41:a2:ce:fa:bd:49:77:
         ce:63:65:e1:69:a3:54:53:a2:a2:ee:44:d8:8a:8f:a2:09:04:
         05:5a:3e:ae:f0:74:4c:22:2d:35:81:f6:d4:a0:bb:ff:cd:5e:
         87:8e:f8:e5:5d:75:29:37:94:94:b3:2c:c2:a1:3b:1d:07:3b:
         e5:7a:e7:6f:3d:fe:8f:06:10:10:04:19:be:01:70:c7:89:af:
         10:48:a2:1f:a1:ab:1e:11:8d:da:69:f6:66:c6:4f:1a:26:25:
         fa:92:f4:17:62:fb:62:85:70:cc:73:98:0b:ec:bf:a9:19:9e:
         7a:ad:1b:63:28:c2:4b:bf:84:18:bb:e7:36:68:d2:e4:85:00:
         f1:e0:91:09:38:f9:c6:88:74:3b:11:52:ab:8d:6d:99:32:b3:
         9c:76:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:41 2024 by rpki-client on console-fra.rpki-client.org