Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File:                     oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier:          ZM5zeozkVlvH9MO/Geypfx51J/vi2G+TS/AXyiMgsiQ=
Subject key identifier:   03:54:4C:3C:3E:7E:73:0E:00:E9:25:17:4C:C5:B1:93:8A:EA:2E:50
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer:       /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial:       018EF67227342A6CF825EBDCFBF6F5066159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number:          0CFE
Signing time:             Fri 19 Apr 2024 13:01:00 +0000
Manifest this update:     Fri 19 Apr 2024 13:01:00 +0000
Manifest next update:     Sat 20 Apr 2024 13:01:00 +0000
Files and hashes:         1: IL_UJGrVr_qRkl5DVc7-OFpwcK8.roa (hash: C+u76zbGr0+G+xToik/e08NSKTfmktnn2WTGbwdPOvc=)
                          2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: WOYX3cNC8oHUtyHJycqeWKdrkfoGCPbBw/r/ySzjh6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f6:72:27:34:2a:6c:f8:25:eb:dc:fb:f6:f5:06:61:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
        Validity
            Not Before: Apr 19 13:01:00 2024 GMT
            Not After : Apr 20 13:01:00 2024 GMT
        Subject: CN=03544c3c3e7e730e00e925174cc5b1938aea2e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:ad:6a:4c:8b:de:af:a6:8c:d3:b3:d0:9b:
                    56:c5:0d:3e:de:13:92:4d:61:5d:4c:9b:98:08:a7:
                    e8:b1:3d:4b:c6:42:37:d6:73:2d:df:35:38:2a:eb:
                    db:d7:3f:e3:84:19:21:76:0f:07:f8:54:ad:9e:0f:
                    c1:fe:eb:82:08:6c:1c:d4:4a:76:c9:77:0c:75:d7:
                    dd:4a:6e:55:1c:1a:ff:b3:e0:e8:6f:8d:45:18:11:
                    c7:fb:20:c5:13:53:07:59:10:90:59:d6:7d:ae:a8:
                    96:fc:fa:88:82:40:87:6f:b2:32:42:35:9f:f4:6a:
                    ec:6c:c8:d4:66:7b:6e:41:04:c8:58:d2:54:a7:0b:
                    2e:fc:92:04:2a:9b:52:0f:c3:67:a2:6f:03:be:9f:
                    99:4d:59:1c:46:b5:1f:01:f8:dc:07:07:5d:c1:c3:
                    a2:4f:1b:ba:ee:8c:95:7c:4f:14:2e:6c:bb:90:11:
                    02:e7:8b:ed:2e:61:41:d3:f1:3a:2f:b1:9b:70:02:
                    67:29:6b:d6:1e:cb:09:9c:af:e6:74:48:d3:2e:f7:
                    e6:a2:68:d5:1b:26:bd:dc:70:03:70:98:3c:9f:be:
                    e5:e2:ff:e1:88:df:e1:08:2d:4e:ff:a8:ee:4d:71:
                    15:a2:cd:38:ae:f6:a9:30:a9:24:1b:d5:ff:52:ac:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:54:4C:3C:3E:7E:73:0E:00:E9:25:17:4C:C5:B1:93:8A:EA:2E:50
            X509v3 Authority Key Identifier:
                keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:57:50:8e:03:93:e1:78:1c:62:5a:e4:66:de:fe:39:54:
         d3:db:b3:62:ad:7b:a5:c9:70:9f:66:75:f0:23:ad:08:fa:f2:
         f1:43:41:3f:97:3f:9b:dc:99:80:62:76:85:14:b8:fb:67:6a:
         68:6e:75:f8:e2:da:ee:04:51:9e:01:59:73:9b:b0:d4:41:94:
         db:16:92:be:18:f4:45:71:59:fe:52:d1:6f:bf:f2:a0:49:ae:
         58:e1:c9:59:2c:07:25:1e:f5:d2:86:78:01:ba:05:98:21:41:
         ab:36:b6:e0:c8:fe:5c:e4:23:8f:35:c5:46:e2:df:a3:06:79:
         2d:46:c7:13:14:5a:43:e0:0f:41:f2:aa:d9:2c:b2:19:35:4a:
         4c:7f:69:ae:38:0f:1f:c6:58:99:89:41:ae:1b:f1:99:21:c9:
         ea:13:78:6e:2f:b3:69:67:a8:1a:9e:e2:02:cd:82:23:fc:37:
         75:91:fb:a8:3c:72:81:5b:8e:b1:2b:52:34:6c:21:5e:36:60:
         07:15:aa:ac:07:08:bb:dc:06:ee:b6:fc:d5:59:8b:7c:5c:75:
         33:aa:c5:a3:0f:8f:30:f5:50:02:55:3f:55:c9:f5:60:9e:6d:
         a3:c1:76:e6:72:a9:16:2b:00:5f:48:dd:75:42:88:3a:3e:51:
         a6:6a:45:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY72cic0Kmz4Jevc+/b1BmFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjI4ZTM5ZjQ3MWFkZGM3NWU3MWEzOTFiODJkZDkyNWM3
ZjA4MWQwHhcNMjQwNDE5MTMwMTAwWhcNMjQwNDIwMTMwMTAwWjAzMTEwLwYDVQQD
EygwMzU0NGMzYzNlN2U3MzBlMDBlOTI1MTc0Y2M1YjE5MzhhZWEyZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswStakyL3q+mjNOz0JtWxQ0+3hOS
TWFdTJuYCKfosT1LxkI31nMt3zU4Kuvb1z/jhBkhdg8H+FStng/B/uuCCGwc1Ep2
yXcMddfdSm5VHBr/s+Dob41FGBHH+yDFE1MHWRCQWdZ9rqiW/PqIgkCHb7IyQjWf
9GrsbMjUZntuQQTIWNJUpwsu/JIEKptSD8Nnom8Dvp+ZTVkcRrUfAfjcBwddwcOi
Txu67oyVfE8ULmy7kBEC54vtLmFB0/E6L7GbcAJnKWvWHssJnK/mdEjTLvfmomjV
Gya93HADcJg8n77l4v/hiN/hCC1O/6juTXEVos04rvapMKkkG9X/UqynywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANUTDw+fnMOAOklF0zFsZOK6i5QMB8GA1UdIwQY
MBaAFKFijjn0ca3cdecaORuC3ZJcfwgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEt
MDI1YTBlNmYwNWFlLzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEtMDI1YTBlNmYwNWFl
LzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9xXUI4D
k+F4HGJa5Gbe/jlU09uzYq17pclwn2Z18COtCPry8UNBP5c/m9yZgGJ2hRS4+2dq
aG51+OLa7gRRngFZc5uw1EGU2xaSvhj0RXFZ/lLRb7/yoEmuWOHJWSwHJR710oZ4
AboFmCFBqza24Mj+XOQjjzXFRuLfowZ5LUbHExRaQ+APQfKq2SyyGTVKTH9prjgP
H8ZYmYlBrhvxmSHJ6hN4bi+zaWeoGp7iAs2CI/w3dZH7qDxygVuOsStSNGwhXjZg
BxWqrAcIu9wG7rb81VmLfFx1M6rFow+PMPVQAlU/Vcn1YJ5to8F25nKpFisAX0jd
dUKIOj5RpmpFLw==
-----END CERTIFICATE-----
Generated at Fri Apr 19 21:12:22 2024 by rpki-client on console-ams.rpki-client.org