Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File:                     oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier:          WJEsOR4VmhT+rq7X4+mRU3J9i4BZYtOHmQuccuTe9Ac=
Subject key identifier:   8A:ED:8B:3F:84:29:B9:32:BC:35:AC:71:8C:2F:52:43:C8:DF:78:BC
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer:       /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial:       018F95A9463A97C5CA1190E7BED114D5827C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number:          0BD0
Signing time:             Mon 20 May 2024 11:00:49 +0000
Manifest this update:     Mon 20 May 2024 11:00:49 +0000
Manifest next update:     Tue 21 May 2024 11:00:49 +0000
Files and hashes:         1: cHHMv5BIz46FvPGMMMjUWqnPpMY.roa (hash: aPFV2kTNi+hLzM09RgNReb2q2nYYTCgSO1CbGaIZWjg=)
                          2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: 1omKFK/Ecr1dU8J/CgeqqUvFQ1RAt3kkRBlsy+cieVU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:a9:46:3a:97:c5:ca:11:90:e7:be:d1:14:d5:82:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
        Validity
            Not Before: May 20 11:00:49 2024 GMT
            Not After : May 21 11:00:49 2024 GMT
        Subject: CN=8aed8b3f8429b932bc35ac718c2f5243c8df78bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:01:78:5d:7f:53:6f:49:09:37:ae:09:89:
                    1f:6b:a5:5f:24:9a:4f:68:d1:51:78:5b:f3:55:45:
                    10:67:42:4c:53:c3:da:ca:e5:33:52:4d:d5:71:5a:
                    e6:a3:3e:c9:18:ff:aa:c8:13:e4:23:09:b2:06:94:
                    e6:e2:e5:c7:2c:a9:67:ae:b0:0d:a8:f3:d1:72:6d:
                    fd:c2:ea:db:f3:87:ef:6f:84:1d:cd:2a:d1:d6:ac:
                    38:06:ac:f0:82:6a:66:b6:40:aa:1e:8c:39:4a:8b:
                    e0:bd:71:be:43:da:84:f2:f8:09:79:92:b3:d3:c5:
                    52:f8:f3:36:d7:7c:a6:de:85:bf:a2:00:b0:cc:63:
                    4c:fe:f2:57:f2:cb:80:52:a8:c4:c6:c1:cc:84:ed:
                    2a:70:ec:0f:36:15:c8:e1:f0:37:91:98:a3:50:44:
                    fb:58:cb:03:5a:ee:ed:ed:04:b3:f3:f7:96:69:c3:
                    5a:45:f3:e5:de:ce:32:6b:79:71:fa:09:58:61:6a:
                    13:80:30:2e:47:5d:c7:96:60:1c:81:52:d0:14:6f:
                    87:87:6b:cd:0c:f2:42:35:e2:ab:ee:6c:d5:9c:a9:
                    a6:4e:c0:fb:f7:87:5b:7e:92:53:01:df:1a:37:28:
                    56:45:3a:d8:d5:c6:5b:d3:df:68:25:4d:11:7d:4c:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:ED:8B:3F:84:29:B9:32:BC:35:AC:71:8C:2F:52:43:C8:DF:78:BC
            X509v3 Authority Key Identifier:
                keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:29:44:8b:b3:6f:49:5e:15:47:60:29:a5:b1:73:db:b6:
         86:0d:a5:26:19:4d:38:95:b9:a8:2a:68:86:ba:16:bd:f3:c3:
         04:1b:fc:ab:10:a9:d1:a6:f0:64:8a:8e:2c:8f:09:80:e0:75:
         c6:1a:00:f3:1f:f3:d8:e3:fe:cc:dc:6b:55:a3:72:e6:43:90:
         7a:04:f0:e8:01:ac:8e:6a:b3:81:3e:f0:a1:54:73:75:06:ec:
         33:bf:eb:b5:0a:a8:06:04:82:1f:8f:12:6d:b0:e2:c7:59:11:
         ce:b6:0f:d0:bb:15:ed:4a:8d:f2:52:bc:ee:6a:70:d8:2a:be:
         0f:40:46:0e:73:04:9c:1b:48:f4:0d:7f:5e:0d:2c:9a:21:0d:
         67:57:20:e5:60:f5:7e:8e:05:92:13:a4:e6:8b:b6:d6:56:08:
         05:fe:a1:14:7b:79:05:c2:27:be:c7:6d:95:a4:d8:0a:b6:c1:
         20:d6:4a:aa:76:aa:2b:9d:d9:f9:94:a7:ff:4c:c1:ae:72:d2:
         5c:29:dd:56:d0:e9:21:85:b6:0d:a5:ae:e3:d4:ae:2e:00:60:
         e3:93:92:90:e5:d5:20:47:6e:af:d0:7d:e7:49:68:15:0d:c7:
         6e:0a:73:c0:83:64:38:a1:b9:d2:83:2d:a0:15:60:bf:18:e9:
         88:ca:0d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:08:51 2024 by rpki-client on console-ams.rpki-client.org