Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File:                     OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier:          6GATbgXi9dLUvjfeak3onJta7WVe33dWUIG//BKBBWA=
Subject key identifier:   EF:E0:2F:4E:03:73:6F:F5:28:7B:62:C1:DF:23:3C:B2:FD:19:37:89
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer:       /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial:       0193579BED2FBFB912780819BA99AA3B04EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number:          044E
Signing time:             Sat 23 Nov 2024 06:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:56 +0000
Files and hashes:         1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: /jfi1A0JS35ZiMM04ljxqhze9UCr8lj4m0OUuydEI90=)
                          2: f72opBQ7BBXwUUFEZtlYCnAzD94.roa (hash: V3GuSlt91uKF/dybz8AtOutUmUsw/cXrNF7UH1YVTYw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ed:2f:bf:b9:12:78:08:19:ba:99:aa:3b:04:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
        Validity
            Not Before: Nov 23 06:00:56 2024 GMT
            Not After : Nov 24 06:00:56 2024 GMT
        Subject: CN=efe02f4e03736ff5287b62c1df233cb2fd193789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:55:b3:83:0e:7c:c1:db:a9:17:57:9f:9f:
                    8d:ca:d7:61:16:bb:f9:08:19:ba:9f:2e:ca:82:92:
                    d2:c4:6b:33:10:8e:30:1e:03:82:94:d1:b8:e6:39:
                    cd:23:3c:fe:aa:a5:ce:6c:a0:03:3d:34:ec:d4:d5:
                    9e:b3:71:cf:1a:d2:88:c7:ee:5a:be:a4:35:66:65:
                    21:d7:3f:fe:42:43:e0:61:6a:d0:4f:bd:49:c8:a1:
                    48:28:ec:4d:c9:38:6c:ad:2f:31:53:a9:1e:2f:ad:
                    71:e5:5f:d0:42:b1:37:43:54:0c:21:d5:c9:e7:90:
                    e2:c7:98:60:63:fe:49:37:77:e6:25:67:a6:42:c6:
                    a6:b5:45:58:63:ba:2c:32:a0:a7:a9:b7:ee:2e:e9:
                    8e:44:10:ab:4b:42:23:a9:04:98:4b:18:2e:2b:c1:
                    68:d1:ca:b7:91:28:d9:c6:ef:6d:d1:dd:51:a9:f8:
                    1b:f0:66:fe:60:76:f8:3f:bf:67:7c:17:b5:ed:8b:
                    6f:e7:7e:1b:58:1b:62:e1:e2:f0:85:1f:97:c1:a0:
                    e4:95:1b:a6:31:7f:b4:54:af:d7:00:d8:33:08:42:
                    89:44:5b:c2:b9:05:ce:f6:88:05:58:86:b3:9a:a1:
                    97:82:b3:6f:1e:0c:81:6d:af:4e:2c:e7:f3:50:f9:
                    cf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E0:2F:4E:03:73:6F:F5:28:7B:62:C1:DF:23:3C:B2:FD:19:37:89
            X509v3 Authority Key Identifier:
                keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e6:3f:13:fa:fa:56:70:6e:16:9e:7a:64:5e:1a:25:6c:29:
         69:be:37:75:3b:a2:6c:53:a3:1d:cd:cb:d8:bd:5d:d7:4e:66:
         16:0c:77:f0:f7:9a:d7:5e:a9:a7:d5:44:c4:43:16:56:67:73:
         d8:60:1f:b2:ae:08:e3:11:a8:82:17:1c:71:d1:ef:9a:ee:b8:
         78:4a:2c:cb:31:38:9f:38:0f:79:99:01:6b:96:07:e0:76:86:
         1c:43:4a:4d:13:9c:87:6b:cd:b8:a6:b2:17:b0:38:a3:fe:96:
         b5:7c:a9:68:14:28:58:ae:90:9a:da:3e:a6:2a:61:6a:d8:c5:
         cf:9f:03:28:67:b7:3c:3b:c3:eb:d3:9d:93:f9:89:2c:95:39:
         18:39:ce:3e:10:82:a9:b2:27:7b:dc:a5:72:de:b0:fb:92:ac:
         c8:54:0f:66:45:b1:7c:59:da:25:f9:3d:07:70:19:1d:ae:01:
         e1:71:54:c6:d9:0f:a8:df:1a:91:a9:0f:90:04:da:b0:f6:90:
         fa:60:be:64:28:59:58:77:74:e4:83:83:55:cb:1f:85:6d:c9:
         75:39:12:9a:62:93:20:56:8b:75:5b:f3:5a:4f:26:bf:20:69:
         fb:32:64:5e:33:3b:d7:c7:fd:36:08:8b:ef:c8:1b:2d:a0:c8:
         d6:9e:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:52 2024 by rpki-client on console-fra.rpki-client.org