Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          aNIXki6jxGCZZ4NiWfKc31Jo+iWEkhSJYWUEAu6ziro=
Subject key identifier:   CD:9A:E1:3F:59:02:72:E0:C1:A1:F6:5A:BF:1C:D9:D4:DA:7F:F7:57
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       0196760CE3DFEA5FBD923B5BC61B8910DDE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          058B
Signing time:             Sun 27 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:18 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: j63XZq1eI7wZKpZqxmeGq8hxcAESZrKNzMR+NXj2BeY=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:e3:df:ea:5f:bd:92:3b:5b:c6:1b:89:10:dd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Apr 27 07:01:18 2025 GMT
            Not After : Apr 28 07:01:18 2025 GMT
        Subject: CN=cd9ae13f590272e0c1a1f65abf1cd9d4da7ff757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:a6:6d:da:b4:25:46:e4:59:d8:44:6f:63:
                    55:b4:e2:fa:42:18:5b:56:be:2f:7c:6d:5b:98:c9:
                    7f:58:62:31:08:af:1a:fa:66:3d:e7:4b:ed:fb:af:
                    8c:64:a6:ca:5d:6c:08:49:f5:df:6d:68:bc:56:e0:
                    aa:de:ea:74:6e:b5:67:6e:47:22:ba:92:52:52:de:
                    20:78:c5:d0:93:a8:8c:16:05:f0:b8:8d:42:c6:38:
                    79:a7:4c:88:49:44:5e:0c:40:b4:18:b6:84:f6:bd:
                    71:05:18:39:b4:be:56:92:2c:71:db:6a:9e:61:0d:
                    8c:de:88:27:9e:87:5f:77:07:5c:6b:5d:2a:86:50:
                    66:6e:1a:19:13:77:ad:b6:4b:71:09:02:7d:f5:c6:
                    45:78:fb:4a:53:22:34:34:c3:d6:de:2f:c1:46:0c:
                    fc:2a:bf:44:b3:c3:1a:99:53:aa:80:8c:bf:63:a1:
                    9c:75:c5:50:bb:b7:d0:dc:d9:49:90:d5:ac:4b:06:
                    df:dd:2d:3e:dc:7d:5f:a2:8a:ec:91:7f:66:10:a7:
                    b5:f7:06:b6:bc:2f:90:60:d9:0f:4e:ca:97:14:6a:
                    3e:ff:ce:1e:74:7b:82:4c:34:7e:54:f7:90:ce:4c:
                    18:57:00:7a:f8:c5:7d:b7:b0:2e:fd:fe:ac:fb:da:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:E1:3F:59:02:72:E0:C1:A1:F6:5A:BF:1C:D9:D4:DA:7F:F7:57
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:90:f6:d1:30:b6:f1:bf:cc:21:53:f7:b5:7c:32:72:c4:37:
         ba:e9:fa:46:85:ff:6d:b0:01:e7:c5:cf:9e:7b:1a:1d:a5:dd:
         ab:3a:c5:ae:7e:09:27:84:bc:54:7d:b9:a1:44:46:87:df:b5:
         5b:4a:f0:b1:8e:e0:40:0c:a6:6f:ff:bd:aa:06:49:37:7b:41:
         e0:5c:8c:d9:af:d8:e5:36:42:28:3e:c6:4c:84:b3:ba:cc:72:
         cb:27:b0:b4:67:3d:9c:9d:90:36:2f:b1:24:84:b7:3a:21:02:
         36:bb:b3:07:65:69:8d:b2:a9:c2:0a:37:af:74:1b:93:43:63:
         0e:ac:ee:04:35:bc:5c:68:3b:fd:96:93:f6:11:18:ee:64:e0:
         9a:6c:53:07:1a:37:62:38:40:8d:4f:37:ec:ea:95:a4:49:05:
         20:1d:21:b8:2f:2c:fd:44:a5:51:79:3a:83:03:2c:4e:c6:57:
         2c:8b:c5:cf:99:ca:27:a2:d9:06:6e:b0:a0:37:d9:5a:9e:3b:
         8c:86:d1:81:80:ec:ac:bc:c2:c5:e8:91:70:cd:e6:18:5d:4a:
         b2:5a:79:78:26:ed:ef:b0:a2:f4:bc:6c:03:f3:69:f3:cd:d3:
         df:a1:1d:8e:77:b9:5f:8b:62:d6:01:5e:fe:6a:9a:13:da:3a:
         1f:b0:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:24 2025 by rpki-client