Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
File:                     oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json)
Hash identifier:          DDW4QXqbMGMe4RllurYTUVXpN/aDhxE65ZiDnzK98sc=
Subject key identifier:   BC:9B:E8:25:26:49:08:DD:68:AB:9C:1F:55:F3:D2:F2:32:AA:16:82
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Certificate issuer:       /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial:       019357646409C1A154379813D46206946FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
Manifest number:          0334
Signing time:             Sat 23 Nov 2024 05:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:16 +0000
Files and hashes:         1: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: yh4VeksMcmvXxxKLQC4b7QWoKeGCryCtMhx8iXhoxQ0=)
                          2: ryttfzh_un5T7QhJESopWduc8Dw.roa (hash: BJd4B9J6VTwnR+PQg4A26QR1oxM/LgOW7B/6WQzk39U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:64:09:c1:a1:54:37:98:13:d4:62:06:94:6f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
        Validity
            Not Before: Nov 23 05:00:16 2024 GMT
            Not After : Nov 24 05:00:16 2024 GMT
        Subject: CN=bc9be825264908dd68ab9c1f55f3d2f232aa1682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:89:4e:67:c7:11:33:6f:d7:7d:4d:38:1a:
                    6b:b5:2b:b1:b6:1e:15:a4:d2:63:3d:02:15:45:40:
                    44:4a:08:67:b8:ad:25:39:54:eb:16:4b:36:ff:fd:
                    f1:76:c9:45:e9:07:9d:f2:65:ed:ad:ed:fa:21:5a:
                    b9:8d:33:6b:d4:62:22:c4:cc:5b:8d:82:b6:2d:a2:
                    e9:a6:1d:a3:ff:dd:ff:62:0b:c4:c5:b4:fe:ff:86:
                    83:d8:87:23:64:46:8d:f6:cb:40:c0:b4:b5:77:e7:
                    ea:49:c4:5c:a8:38:7e:02:e1:6e:79:f8:ea:d5:13:
                    9b:7d:57:82:f1:87:81:64:7b:09:a7:e3:02:ee:9e:
                    cc:eb:6a:61:d4:fb:ef:33:c6:74:d4:93:50:f6:33:
                    9f:f8:30:4f:0f:4e:71:96:86:ed:0c:a4:81:93:5a:
                    c0:58:9f:be:4a:e8:a4:c9:89:fa:f7:a4:a9:e3:ff:
                    6a:d6:ad:8b:eb:b2:00:ef:ff:c3:2e:11:21:0d:05:
                    fc:72:6c:89:98:b0:86:dc:23:93:c8:28:2d:ad:ab:
                    13:c0:f0:9d:1f:24:9c:ac:cb:b3:aa:96:12:aa:4a:
                    98:e2:a1:22:52:78:2a:45:55:36:9b:51:96:e1:f4:
                    aa:78:46:4a:1f:e9:15:f5:30:11:5b:59:92:f2:d3:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9B:E8:25:26:49:08:DD:68:AB:9C:1F:55:F3:D2:F2:32:AA:16:82
            X509v3 Authority Key Identifier:
                keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:3b:9b:8c:c3:c3:ae:fb:ae:13:39:e8:c3:ac:b1:57:e8:
         8b:4a:8c:eb:c7:13:55:b3:34:d4:1e:b0:35:04:93:82:6f:2d:
         e6:df:3b:5b:b8:0a:70:ee:61:03:f2:97:03:73:6f:74:d1:ad:
         f1:d1:6f:a9:42:6a:27:1c:98:ae:9b:b6:7f:2d:10:cf:82:7b:
         29:86:94:29:af:07:92:42:3c:64:3c:de:10:c3:09:29:24:7e:
         9a:e1:7b:d5:d8:3d:11:7e:26:9d:a5:83:23:a7:e5:b5:ba:5d:
         51:e4:33:3b:9a:06:0c:30:9b:fe:44:09:06:e1:c8:1b:8a:1f:
         ef:b2:9e:87:7c:d5:8e:4a:6b:5e:d7:3d:d6:c7:13:db:01:ab:
         1c:94:1d:21:72:34:87:f2:45:65:07:82:8d:8f:11:04:30:74:
         f8:9e:2d:67:b3:89:18:6d:37:ee:15:4e:aa:38:90:0a:de:6b:
         6e:56:aa:9a:4f:88:c6:92:94:5e:75:27:f9:37:e9:fd:c1:4d:
         cc:e4:f1:bd:21:ef:dd:bc:cb:8f:cf:ac:20:b9:c3:e5:3d:6d:
         ce:59:2d:48:e2:fc:b6:82:33:b4:82:4b:ef:ae:f0:2b:92:bf:
         94:d4:64:7b:41:e3:58:72:60:ef:01:77:39:2d:d1:31:1d:bd:
         dd:97:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:49 2024 by rpki-client on console-fra.rpki-client.org