Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b19916-397a-4a2b-b86c-37d444a2d62c/1/Ooy8BatJtspBsc95x5VytCZPcng.mft
File:                     Ooy8BatJtspBsc95x5VytCZPcng.mft (raw, json)
Hash identifier:          FIHN2pT2v28++uLguZSQOtrFfiDo6ueQnM+wAxM0in8=
Subject key identifier:   3B:A1:9A:FC:57:84:E5:67:C2:70:36:BE:69:FB:5C:5E:5E:DF:9D:53
Authority key identifier: 3A:8C:BC:05:AB:49:B6:CA:41:B1:CF:79:C7:95:72:B4:26:4F:72:78
Certificate issuer:       /CN=3a8cbc05ab49b6ca41b1cf79c79572b4264f7278
Certificate serial:       019095A8820E8752E9ACA598EBAEFCB2AD1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ooy8BatJtspBsc95x5VytCZPcng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b19916-397a-4a2b-b86c-37d444a2d62c/1/Ooy8BatJtspBsc95x5VytCZPcng.mft
Manifest number:          1200
Signing time:             Tue 09 Jul 2024 04:02:46 +0000
Manifest this update:     Tue 09 Jul 2024 04:02:46 +0000
Manifest next update:     Wed 10 Jul 2024 04:02:46 +0000
Files and hashes:         1: Ooy8BatJtspBsc95x5VytCZPcng.crl (hash: o/m9yRERhzblsCelwHcIcaTy8/QkJtuQAkK6hH0LLyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b19916-397a-4a2b-b86c-37d444a2d62c/1/Ooy8BatJtspBsc95x5VytCZPcng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b19916-397a-4a2b-b86c-37d444a2d62c/1/Ooy8BatJtspBsc95x5VytCZPcng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ooy8BatJtspBsc95x5VytCZPcng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jul 2024 04:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:95:a8:82:0e:87:52:e9:ac:a5:98:eb:ae:fc:b2:ad:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8cbc05ab49b6ca41b1cf79c79572b4264f7278
        Validity
            Not Before: Jul  9 04:02:46 2024 GMT
            Not After : Jul 10 04:02:46 2024 GMT
        Subject: CN=3ba19afc5784e567c27036be69fb5c5e5edf9d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fc:b1:59:a6:06:60:3d:ea:b3:43:bf:fe:e8:
                    b9:36:54:86:f2:55:9f:60:0d:9a:6d:ca:5b:cb:5f:
                    da:93:f2:f9:7b:ee:db:f8:bd:60:58:e5:36:8b:07:
                    e1:9d:da:89:19:23:34:2b:c9:84:5a:a3:98:25:a0:
                    b5:ca:f1:8f:06:1f:34:c7:a3:0e:7e:88:d3:f4:ab:
                    84:94:2b:7f:be:ff:d3:24:72:62:bb:5e:69:f8:e4:
                    c5:38:94:27:56:56:db:3c:6b:09:cd:2d:1d:e7:d4:
                    08:52:63:cf:06:8d:a2:28:4f:8e:3f:b0:8e:92:91:
                    f3:39:65:c5:03:c9:23:36:d5:cb:8d:10:cb:ae:3c:
                    e5:f0:43:79:08:28:26:97:c5:d2:3a:59:1e:60:50:
                    cf:a6:ba:66:27:68:bf:72:12:fa:a0:00:2d:ed:bc:
                    a6:c7:9f:db:f4:23:0e:42:b7:44:df:3b:f5:18:ac:
                    3b:90:04:f6:2e:ce:70:3f:cf:56:62:0e:4b:f8:63:
                    2b:8c:58:54:55:c5:ca:fd:35:bf:34:d2:3b:c9:e0:
                    fb:df:e4:b0:9f:00:ab:33:71:29:4c:1a:28:d0:eb:
                    53:4a:51:5a:50:6b:8d:20:96:ce:8c:cd:e8:13:3e:
                    e6:9b:b4:d6:00:10:58:45:f4:53:ac:ba:ce:3f:f9:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A1:9A:FC:57:84:E5:67:C2:70:36:BE:69:FB:5C:5E:5E:DF:9D:53
            X509v3 Authority Key Identifier:
                keyid:3A:8C:BC:05:AB:49:B6:CA:41:B1:CF:79:C7:95:72:B4:26:4F:72:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooy8BatJtspBsc95x5VytCZPcng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b19916-397a-4a2b-b86c-37d444a2d62c/1/Ooy8BatJtspBsc95x5VytCZPcng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b19916-397a-4a2b-b86c-37d444a2d62c/1/Ooy8BatJtspBsc95x5VytCZPcng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:26:ce:c4:32:18:cb:dd:35:c3:24:cd:de:53:70:a7:4a:
         fe:9f:10:01:39:69:15:35:06:d8:7d:7b:34:79:e1:51:2e:20:
         26:3d:0f:1c:93:19:86:d0:fe:58:5f:54:f6:7c:2d:99:56:6b:
         19:84:f6:70:b9:60:73:55:a2:4f:39:c1:75:aa:7b:3e:4b:b4:
         28:34:9c:44:60:74:52:a9:2e:f0:07:b7:92:ed:f4:70:a3:cf:
         2e:85:69:79:94:d8:4d:94:06:9b:27:dc:cf:95:f4:8e:de:b0:
         9d:dc:16:37:df:42:8d:10:68:ef:12:9c:de:55:c4:10:b7:b0:
         55:f2:b1:69:60:dc:72:ed:0f:f6:6b:da:1e:06:4c:43:62:1f:
         18:e5:99:0e:31:a4:da:e6:82:e4:cc:76:55:57:44:9c:2a:f7:
         d2:a6:fc:d9:50:00:2b:ad:f8:e2:35:29:64:80:bc:c0:1e:f0:
         ff:08:0d:ed:47:7e:b5:f0:7b:68:17:b9:68:bc:85:da:a0:1e:
         1a:f4:d3:ff:12:07:25:07:9d:f4:66:40:21:4f:65:72:fd:73:
         c4:b9:54:50:0a:56:4d:c0:e0:9d:ab:04:ed:75:43:e8:6b:50:
         81:29:e0:c5:8d:70:c3:1f:f3:6c:03:7c:33:aa:74:51:c1:28:
         a9:8d:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:31:38 2024 by rpki-client on console.sobornost.net