Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          ecq6CZL2jtmp+BBcvYWJU0xTpDkNdkuqrQTb7hqJSfg=
Subject key identifier:   59:04:69:B7:08:65:1C:53:DC:23:9F:05:96:73:CA:D2:4D:D9:95:BD
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       019352E2D7CD2ED039DCF3B45AE05FC7F75A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          03EB
Signing time:             Fri 22 Nov 2024 08:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:17 +0000
Files and hashes:         1: 5MjDloOkMbroSjLN8OzGXX38UjE.roa (hash: L0hZ+BoOXuQp96fricRnYxcU8ZRBC0PWbP4x5O8AaUg=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: Qq/jcXEYPnAgZ8RWSXpHwions0nJMLahoqiqqHTWyYk=)
                          3: Qi-K4q1uIaWHj0y7mR9BfMvP4GA.roa (hash: Mgt795fhsxBBzfPXPzhteThXFkSp9s83FwHLgSm90X8=)
                          4: ihebqV8SNXDhSy7Wm2bCovww0ps.roa (hash: 1FpJEe++b9fMIQTcbO7xdjjMMcuvH8cS4sk7Axuluak=)
                          5: tKgmwxS7buNXlOIvK59WgqDEmoQ.roa (hash: CVZHXmtJwGTLMcjy/XTt5OPgPu3H8KI2e61uMvRBkSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:d7:cd:2e:d0:39:dc:f3:b4:5a:e0:5f:c7:f7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Nov 22 08:00:17 2024 GMT
            Not After : Nov 23 08:00:17 2024 GMT
        Subject: CN=590469b708651c53dc239f059673cad24dd995bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:07:d8:8b:41:d9:b3:a9:6d:d0:8b:dc:68:05:
                    a8:41:72:80:76:b5:67:35:87:8e:44:65:bc:4f:36:
                    c1:e2:4b:46:46:c1:93:8a:45:ff:3c:7c:df:90:5e:
                    f3:33:b6:54:aa:48:f4:e7:5f:e3:d9:30:a1:83:9d:
                    7a:bb:71:22:6a:6c:2e:fd:fb:de:cf:cd:3e:bc:0b:
                    85:62:95:bb:a4:7e:11:28:3f:9b:54:09:76:e8:bb:
                    24:de:80:86:88:8f:69:a0:5d:28:13:ef:67:b4:72:
                    8e:b0:52:d8:e4:24:3b:e4:29:ce:80:8f:fb:b3:3f:
                    04:63:cd:c7:a0:fd:38:3f:f0:1a:4c:b9:12:fd:8a:
                    f9:ed:32:f8:92:a6:af:fd:59:85:51:ed:9a:c0:56:
                    7d:40:3c:a6:49:1d:44:54:61:e0:95:0e:f5:69:12:
                    34:b2:a7:2f:b2:4f:50:4a:19:c8:4e:a1:33:79:89:
                    30:c5:1c:5e:64:a2:d5:f8:04:12:96:5c:13:64:b8:
                    82:3f:c7:b8:a9:5d:20:06:74:61:d8:db:5c:54:d1:
                    bb:62:16:58:4a:79:c3:f0:ec:93:4b:a7:2e:8e:60:
                    3b:8f:f0:8f:e3:b5:9b:91:0b:fa:48:aa:1c:95:c6:
                    0f:19:3d:84:e2:b3:06:a0:82:25:34:c7:57:16:20:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:04:69:B7:08:65:1C:53:DC:23:9F:05:96:73:CA:D2:4D:D9:95:BD
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:10:b1:b9:f8:b6:ee:e0:d0:30:fb:b5:4e:16:cf:5d:74:ac:
         25:fc:d0:55:6e:bf:ab:7a:32:51:df:66:cc:20:53:eb:5d:fd:
         f6:04:08:1d:b8:3a:08:a6:c9:33:12:81:f8:5f:8c:6b:b0:e2:
         a0:44:37:70:9c:95:ea:83:e3:42:a2:50:7f:6f:1a:b6:2f:0b:
         d9:81:28:ef:da:25:f1:b4:43:4d:0b:32:70:a4:35:a8:be:ec:
         ab:98:38:a1:47:f7:1f:4f:84:d7:cd:87:78:16:8f:a6:58:19:
         a4:a9:7b:e7:cc:2c:38:cb:51:b3:a7:b1:d4:d8:1f:72:df:24:
         fe:1d:70:30:f2:30:cd:e5:f1:81:10:eb:70:4b:08:21:3e:bb:
         49:c2:87:35:ff:c7:be:55:cb:8e:d2:5c:89:06:41:e8:d4:f4:
         83:d2:9f:d0:b6:df:20:11:9b:71:7e:e8:2b:fd:38:0f:44:c5:
         d0:3e:0b:ac:48:30:33:b3:74:a4:fc:58:d8:7d:7a:36:b5:31:
         3c:84:5e:5c:2d:19:5d:dd:27:f1:71:f8:e5:76:92:51:aa:f8:
         8c:75:b9:b0:4c:86:b8:6f:9b:1d:cf:44:72:ca:12:fc:a8:73:
         6d:c6:7c:c6:63:fa:0a:c4:8c:31:2a:63:7d:c0:de:5e:cb:7c:
         ff:90:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:34:49 2024 by rpki-client on console-fra.rpki-client.org