Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File:                     pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier:          pp5z6UYm4QJQiqEu8I35kSWCYN3TBg3GeICHq0r+ER4=
Subject key identifier:   70:64:8B:51:51:DE:2C:24:97:F3:8C:96:EA:AA:0F:04:52:B6:67:62
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer:       /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial:       0193561AB60CA7FDA7EBF524F32A04F1FC8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number:          C1
Signing time:             Fri 22 Nov 2024 23:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:11 +0000
Files and hashes:         1: CtiNoVfqo9h1d6qIFzfB-Xo2rto.roa (hash: 7OhJI2Vcrdnj9O/F+NsoXlQxM92wKVG8J0oa5BG0TPQ=)
                          2: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: yeKfI5ZsFt6zxxwSXr2lKcfy5pL0biL7rSmveZ+DxQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:b6:0c:a7:fd:a7:eb:f5:24:f3:2a:04:f1:fc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
        Validity
            Not Before: Nov 22 23:00:11 2024 GMT
            Not After : Nov 23 23:00:11 2024 GMT
        Subject: CN=70648b5151de2c2497f38c96eaaa0f0452b66762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:4d:46:91:55:6f:53:2e:e4:ed:da:91:ad:
                    3e:54:62:d9:4e:e0:d8:17:23:97:cf:ac:a0:1e:05:
                    51:78:b3:bb:0b:8e:4d:5d:8f:1f:6d:1c:9c:82:93:
                    39:7e:50:85:c2:24:bd:c9:c8:27:df:1d:47:41:3e:
                    bb:49:a0:fb:90:62:ab:4e:7e:7d:50:23:4d:63:86:
                    14:89:e6:ea:31:9f:b2:31:1b:94:44:a0:55:18:ea:
                    d7:c9:b5:ac:12:2c:74:36:08:6e:56:80:01:01:da:
                    80:6b:d7:11:43:10:7e:11:f9:c6:3c:2f:c6:54:38:
                    c9:bd:91:2a:16:ab:c3:c1:cf:d2:8f:61:a2:6c:99:
                    7e:0d:e5:9c:9f:06:8d:7d:f0:ae:8f:49:33:bf:03:
                    7d:49:85:99:87:d8:3e:73:8d:5a:d5:5d:ee:f6:12:
                    a7:f6:a4:d1:bc:52:37:78:2b:73:63:9e:54:42:f2:
                    fe:fa:fb:cf:e8:92:0c:1f:41:cc:00:e3:8f:59:ff:
                    e6:9a:12:40:3d:3d:c7:fb:b6:03:17:ce:35:e6:89:
                    9b:ba:df:11:ae:a2:63:ca:a3:e9:33:b1:07:f7:4c:
                    1c:e1:8b:a9:a4:b2:16:dd:af:bc:81:6b:1b:56:43:
                    b1:cc:0a:4a:82:89:dd:f5:21:33:0a:ae:65:38:7e:
                    37:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:64:8B:51:51:DE:2C:24:97:F3:8C:96:EA:AA:0F:04:52:B6:67:62
            X509v3 Authority Key Identifier:
                keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:51:40:e5:5f:45:aa:9e:04:1d:8d:e9:42:4a:2d:2f:16:
         04:48:12:de:bd:ed:73:00:e6:14:67:ca:17:95:26:fc:f3:41:
         d9:5f:c3:d8:17:ba:67:2b:5b:dc:3f:b7:de:1b:fb:2f:6d:78:
         d9:c7:43:7b:d7:f3:4b:87:c3:fb:65:5d:72:5f:7c:e0:d6:86:
         97:3d:f3:38:88:d9:91:b2:89:c5:24:71:92:68:68:97:d4:6a:
         eb:cd:26:81:bf:6e:30:64:af:b2:cb:fa:e7:ea:84:e0:38:37:
         4c:d9:2a:2d:7f:21:96:9a:98:d3:33:69:5f:97:d3:b0:d8:79:
         41:ab:6c:46:d0:e9:07:a3:78:1d:a0:8d:83:5d:98:26:bd:c0:
         a0:68:94:1c:88:f5:cc:38:48:ad:6f:23:e4:bb:dc:f5:a6:c6:
         16:41:5e:44:83:af:38:53:81:09:ad:a3:63:e3:93:1c:e9:36:
         32:9f:57:34:1b:6e:47:6c:1a:dd:6d:48:66:c8:fd:21:b9:b3:
         3d:1b:9f:f8:28:0c:d1:fd:a4:b4:d6:ae:ce:a9:4a:b1:42:16:
         a3:31:93:32:06:bc:65:10:71:92:ce:fa:81:81:1c:41:70:69:
         48:cd:0e:75:fc:01:7f:c0:e2:23:7f:bf:d6:ff:34:d5:a3:5f:
         08:29:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:13 2024 by rpki-client on console-ams.rpki-client.org