Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
File:                     OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json)
Hash identifier:          9AWWGMd04MSBSNcddBFD3C2QYIN7d2Zqa75A92u1oDA=
Subject key identifier:   A0:FB:9F:C2:41:D5:29:49:6F:A4:D2:9B:E6:9F:65:84:2B:DD:D3:E9
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Certificate issuer:       /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial:       019351996D3FA40B0D6E7CCB48A853BFF8E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
Manifest number:          0B5D
Signing time:             Fri 22 Nov 2024 02:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:29 +0000
Files and hashes:         1: C0zqOv4Nu_NNdoeNNn0q-FBejLU.roa (hash: X8wc0Kas88GJ4N1WF8qgiP2g/LFT+h3CEIEaAA0XREw=)
                          2: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: d1lfuonNro7VE/BDIk43DatXHQZpvDuNsph38JTsRI0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:6d:3f:a4:0b:0d:6e:7c:cb:48:a8:53:bf:f8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
        Validity
            Not Before: Nov 22 02:00:29 2024 GMT
            Not After : Nov 23 02:00:29 2024 GMT
        Subject: CN=a0fb9fc241d529496fa4d29be69f65842bddd3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:24:f3:3e:6e:c1:07:f3:c9:f8:ea:57:63:5c:
                    82:37:9d:d8:cd:f6:bd:fc:50:85:75:c1:c4:23:b6:
                    67:76:49:c2:5d:21:dc:a3:b4:56:8e:c4:e8:8d:9d:
                    6e:97:a5:e5:8d:46:70:e4:f3:59:81:4e:95:17:89:
                    3b:c4:82:2c:d3:1a:1b:9b:78:c4:0e:76:f8:c8:90:
                    8e:f9:38:4e:37:f2:b1:4f:eb:88:9e:69:7e:0b:37:
                    e2:14:5b:f7:8b:32:9f:dc:ad:9e:cc:31:64:15:86:
                    bf:1d:40:5e:84:f6:85:0b:bd:76:4f:8c:31:00:d0:
                    64:40:b1:8c:e9:f7:c1:95:a2:88:83:f7:fb:fc:af:
                    28:ef:dc:56:ab:f4:5e:e8:bb:5f:06:56:3a:66:80:
                    85:26:70:32:59:73:46:12:27:3d:e5:a6:ae:9b:a5:
                    27:8f:22:84:de:b0:cc:c9:0f:f2:a8:c4:64:8e:05:
                    61:d1:d9:c0:c3:55:7f:35:07:99:ac:32:55:6d:a2:
                    ff:81:b8:3e:f3:69:62:33:82:8c:b5:df:73:41:82:
                    68:30:41:53:fe:31:90:16:2d:2f:7e:1a:8c:aa:b6:
                    e2:64:c5:77:2b:ba:b5:1c:61:43:5e:19:9e:c5:3f:
                    3b:b6:73:d8:69:e7:75:a6:81:1b:4b:58:ba:b8:0b:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:9F:C2:41:D5:29:49:6F:A4:D2:9B:E6:9F:65:84:2B:DD:D3:E9
            X509v3 Authority Key Identifier:
                keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a3:7c:00:cc:77:35:b2:ae:38:3d:93:db:44:19:e5:d9:f3:
         e9:65:96:7e:9c:37:34:63:f4:51:c1:08:bc:04:1c:9d:84:e4:
         c4:60:21:de:2e:48:e3:c5:78:0d:2b:b4:0b:a4:59:c5:fa:d6:
         45:db:21:e7:10:38:a4:c9:67:88:a9:ff:0c:a7:ec:ae:2d:9f:
         cf:5e:f0:69:a3:d2:3b:fc:98:25:ba:32:35:3f:d2:09:44:d6:
         3e:df:3a:e1:70:6e:ba:5c:97:75:b7:9a:27:ca:cb:e3:80:20:
         21:d3:6c:d8:a0:a1:9a:fb:36:83:1a:51:be:3a:97:8c:fa:cf:
         90:a2:86:55:8a:9f:59:44:71:72:5e:27:c1:97:11:32:22:ba:
         df:3e:9a:f1:fd:a3:67:0f:66:e8:ae:1f:a8:bb:45:ee:f1:98:
         ce:e2:af:e0:8c:9f:3f:44:d7:27:24:ec:cf:a6:7b:86:ed:7a:
         0b:0d:da:03:3f:d0:59:96:97:82:85:7d:b8:32:46:62:14:04:
         7f:99:2b:8c:76:d8:ef:31:7e:42:a8:99:5b:13:a2:3c:4f:5d:
         86:0c:cb:86:01:43:21:1e:6d:79:5a:83:3a:54:01:81:d6:25:
         cc:2b:f6:69:72:37:01:9e:82:1d:26:83:3d:33:f7:a5:42:8d:
         a6:eb:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:16:41 2024 by rpki-client on console-ams.rpki-client.org