Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File:                     CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier:          /g+8lvs919lUAfIrlIfcxrq8/QOzpwClhyNEwj/EHGA=
Subject key identifier:   F9:0E:44:AB:B5:94:C5:02:C2:CB:85:74:35:C9:26:89:BC:2C:33:34
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer:       /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial:       019357D234FF017815180452D55742FB772C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 07:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:14 +0000
Files and hashes:         1: 0JygCQluhWl3DJRbtOGxjk79Ips.roa (hash: +Id1wbThYnQQAbmrRNHd5Y2jBk3MGgsEZCno1E7ofuY=)
                          2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: UqoMxWKNDBsAgM3Y6RAJcywK1TNmQvbRf7TaFA3iv1Q=)
                          3: Mf5fkC3MrLwirxVCy1SlUIh67jE.roa (hash: RXHkSjcP7fVMpwYEGNdbuXsIPTFIjKsZ40o3ohXuMh0=)
                          4: mTRqYD0LULhO0epAlx7t8pGDI_A.roa (hash: dYNPwKzkVHD3epieX5AJpm2L7pv5emlGuKh9koCZjS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:34:ff:01:78:15:18:04:52:d5:57:42:fb:77:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
        Validity
            Not Before: Nov 23 07:00:14 2024 GMT
            Not After : Nov 24 07:00:14 2024 GMT
        Subject: CN=f90e44abb594c502c2cb857435c92689bc2c3334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:a5:74:13:c4:67:42:64:04:6a:f1:49:0d:
                    f3:b3:08:53:a9:54:78:67:70:96:76:79:06:6b:d4:
                    15:ca:c6:8b:07:ad:25:82:5a:98:78:f0:37:74:63:
                    46:3f:18:7a:19:30:d4:fb:76:58:56:ca:ca:76:f5:
                    90:dd:15:ab:bd:10:b8:91:6a:b2:e1:fa:16:a5:de:
                    3e:0e:b3:c1:d8:da:60:3b:c2:60:ff:aa:7d:20:79:
                    9b:4e:76:ef:ad:7a:dd:1b:af:53:69:68:88:8d:c1:
                    ca:ad:17:d8:74:50:d3:04:49:54:8b:9d:56:55:4f:
                    39:f4:9b:c9:0e:04:7d:0f:a2:66:4a:c2:79:b5:da:
                    e8:33:8f:a6:33:1a:77:06:91:6f:ae:ce:72:70:a9:
                    58:5e:b5:3c:4e:9b:d0:15:62:c5:35:e2:09:30:d9:
                    85:6a:fb:ac:9a:2b:4e:e4:90:fb:82:b4:76:b1:8a:
                    6a:06:c3:5e:89:21:16:c0:0b:3c:b0:1f:ea:0f:14:
                    18:0f:46:a1:24:f3:4a:3e:ba:ec:53:8e:91:3a:91:
                    eb:b6:2d:2d:4f:41:9a:e2:ca:72:73:56:66:45:79:
                    75:ee:85:b8:ae:0e:6f:54:fe:7d:db:28:ed:de:8e:
                    55:64:c1:50:07:6b:e6:6b:3a:fb:2e:9a:51:9b:3f:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:44:AB:B5:94:C5:02:C2:CB:85:74:35:C9:26:89:BC:2C:33:34
            X509v3 Authority Key Identifier:
                keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5b:e6:32:f2:06:3d:34:1b:cf:8d:dc:66:a6:0b:31:e1:bd:
         dd:1b:cf:de:84:37:10:42:95:0f:ca:e0:a7:8f:52:d4:a9:a2:
         e2:5f:79:a6:2b:d7:5b:f2:e7:3b:51:7d:14:fc:f1:6f:07:d1:
         92:a2:3a:f6:4d:e9:32:95:17:95:67:16:a7:7f:21:24:25:f5:
         0f:fc:59:f0:6d:27:29:fa:30:a0:fb:81:ce:36:a6:ff:3b:d7:
         6e:78:5c:c2:a7:7c:d0:6f:84:62:72:be:0b:84:a6:19:8e:62:
         50:9d:19:ed:ed:b8:53:1c:72:b6:1a:57:8c:a5:8c:5f:80:52:
         b3:84:a1:69:3f:3a:6b:2b:3d:40:09:58:f4:56:b1:01:ec:ee:
         63:33:f0:17:3a:d2:df:80:4f:10:61:12:50:b0:53:00:1a:c2:
         ca:92:9a:59:93:71:b8:ec:fa:42:ce:d1:f2:dc:a8:f3:8d:57:
         8f:e6:cb:f4:ae:3c:d2:7b:1a:d6:2d:35:4c:70:40:ce:49:34:
         cc:67:1a:06:07:0b:31:27:bf:fe:4e:d7:74:3b:dd:48:59:c7:
         d7:d4:97:56:80:40:b7:f7:61:72:77:d6:be:1a:dc:25:ad:90:
         09:a2:7c:9b:f6:af:3c:94:1a:6b:58:82:1d:3d:91:73:9e:14:
         49:e3:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:02 2024 by rpki-client on console-fra.rpki-client.org