Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File:                     o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier:          MzAcgcHfzmWm8hVu/fuuLT40+mTuODOzCD8cXyDzVoQ=
Subject key identifier:   9B:58:7A:27:5C:89:0E:6B:40:CC:E5:B5:9B:56:67:29:78:EE:DA:7D
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer:       /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial:       018F8DEF50AE89C4D1B35E5A2B84CCE435B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number:          117F
Signing time:             Sat 18 May 2024 23:00:22 +0000
Manifest this update:     Sat 18 May 2024 23:00:22 +0000
Manifest next update:     Sun 19 May 2024 23:00:22 +0000
Files and hashes:         1: UzyrtJITbaxmk3q-4qbRm5zZyOs.roa (hash: EMBR0KrkyHE2wD3fz7drjZegJWFElmqH26VH9GCTemc=)
                          2: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: yWUeLDcMx4dJ+I9gO7Cd7IZTX/UMehvqojO4mKy8bus=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:ef:50:ae:89:c4:d1:b3:5e:5a:2b:84:cc:e4:35:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
        Validity
            Not Before: May 18 23:00:22 2024 GMT
            Not After : May 19 23:00:22 2024 GMT
        Subject: CN=9b587a275c890e6b40cce5b59b56672978eeda7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3a:bb:00:64:38:c5:cc:16:a4:e4:27:26:a0:
                    17:d5:d4:ba:09:51:5e:0c:45:1b:2a:af:54:c9:73:
                    77:e3:98:cc:00:05:97:ef:93:fd:23:20:57:05:e2:
                    d3:84:e4:1a:36:14:29:ee:b6:4a:52:c6:4e:c9:f8:
                    49:55:19:bb:b8:72:d8:a8:50:4b:54:92:42:80:a2:
                    af:db:ea:09:65:66:6e:88:81:f3:a3:7a:fd:9d:d1:
                    30:c3:64:46:0d:28:37:58:34:85:bb:17:8e:9f:9d:
                    37:37:56:75:03:01:fb:c4:a7:a8:58:02:c7:4f:c8:
                    0c:89:c2:b9:d1:3e:19:44:44:3b:5b:bb:bb:5f:5d:
                    f1:c9:0a:fe:39:1b:13:6f:76:d2:29:6f:c1:90:16:
                    80:86:fc:56:69:94:a2:15:6a:ce:e0:b8:b6:6a:98:
                    9d:a2:c0:3b:27:9d:a2:09:61:4f:6d:3d:19:91:d1:
                    af:ef:86:51:4a:e8:d6:ef:1a:fd:1d:a0:d9:22:0d:
                    db:f2:19:73:d5:a5:77:15:4e:af:9e:7c:13:54:a4:
                    d0:43:2b:f0:c5:37:c9:b4:a4:ff:96:32:58:0b:94:
                    ed:1c:82:17:c6:fa:bf:e8:83:61:af:46:13:70:85:
                    2c:77:4e:50:bc:2e:96:14:47:4c:e9:eb:fe:6f:9a:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:7A:27:5C:89:0E:6B:40:CC:E5:B5:9B:56:67:29:78:EE:DA:7D
            X509v3 Authority Key Identifier:
                keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0b:80:2f:0e:00:d8:d0:b2:a8:63:20:6a:b5:ab:9e:69:03:
         f8:25:fe:3f:13:f3:8c:4a:a1:3c:80:fc:36:7b:6b:47:ec:fa:
         25:1a:48:ca:da:89:5e:af:82:e1:e8:28:8b:60:c1:ae:e0:9b:
         87:4b:60:f8:61:e7:bb:4a:af:f6:fa:6f:58:da:83:fa:cb:a9:
         dd:d2:1b:23:4c:53:06:ff:e4:01:55:3e:06:01:8a:5c:0d:5a:
         0e:3a:4c:58:60:b2:a6:8e:67:a4:d5:8f:e8:ae:84:7a:2d:3b:
         07:ec:5a:5f:28:b7:d0:09:17:73:c3:70:66:1d:41:45:53:d3:
         e8:ea:2a:66:4c:83:41:19:ed:36:af:31:20:97:17:54:d6:8f:
         7a:fb:bf:03:db:27:8f:7b:cd:8d:ee:e5:aa:d8:6c:e2:d2:a1:
         f2:4b:bc:d8:fc:4b:21:34:a2:78:74:2d:16:41:55:6f:27:07:
         ea:82:b1:72:1b:80:52:1f:37:b9:68:14:21:cc:bc:69:69:db:
         51:85:c3:d0:eb:eb:0a:8d:74:57:65:06:60:18:c6:df:b5:87:
         83:35:32:59:00:f6:36:bf:c5:f4:08:81:94:8b:ac:7b:50:62:
         85:04:8b:58:32:34:29:2a:07:27:46:84:4a:4b:8e:5d:2f:6e:
         74:88:7a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:24:18 2024 by rpki-client on console-fra.rpki-client.org