Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File:                     Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier:          dXvXCfwZNXn6NFj6BG+q5Xvhs4IC6TLBaCtjXO49Mpo=
Subject key identifier:   96:AD:D2:FD:B8:64:F3:85:73:0D:35:11:50:E3:A1:31:A4:BD:02:18
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer:       /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial:       019367EA5151C72AD2AB73C12BBFD475521F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 10:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:29 +0000
Files and hashes:         1: DlrKaO9b0KFGnJrsIPAIZP1l1DQ.roa (hash: e7JvR+IOki1gNG3aFgUh79FZRrYkOX0VX6UAoP+C87U=)
                          2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: 5ZScHZdzdj4CEZB8BY9r9m89GiZeuY3BMLtrto3oJQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:51:51:c7:2a:d2:ab:73:c1:2b:bf:d4:75:52:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
        Validity
            Not Before: Nov 26 10:00:29 2024 GMT
            Not After : Nov 27 10:00:29 2024 GMT
        Subject: CN=96add2fdb864f385730d351150e3a131a4bd0218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:54:65:7a:e4:9a:6d:5d:95:23:13:a2:f1:01:
                    f0:55:d1:68:d3:32:f4:18:6c:91:2d:e4:f1:cf:20:
                    35:b1:90:cb:fe:00:d5:25:1f:1c:90:0e:0b:66:37:
                    3a:cb:84:4c:e8:3d:a5:32:8b:14:26:f2:4a:25:30:
                    44:0d:b4:97:c0:2c:b9:4d:05:8d:9c:14:9a:f6:76:
                    f1:eb:b8:45:f7:90:88:c4:3d:51:09:ba:26:e2:82:
                    4a:33:1a:d7:d5:53:2d:63:fa:40:4e:36:21:90:f6:
                    9b:fb:12:97:f3:22:8b:bf:8c:c6:a9:05:97:c5:a6:
                    0e:a5:56:39:ef:0e:4d:56:4c:58:ca:69:0b:e4:23:
                    e9:63:ba:27:94:6b:0a:67:59:d6:cf:4b:d7:b1:84:
                    84:e2:d2:c7:09:cf:88:1e:c3:71:63:8c:88:2f:f6:
                    63:de:49:4e:b6:2b:6c:fc:86:70:2f:0d:52:a9:3f:
                    ac:b7:e8:8d:f0:f5:53:59:16:87:19:4d:a0:06:e9:
                    e5:70:9c:19:52:0a:20:fd:6d:da:d2:77:ea:0c:bd:
                    14:a9:96:41:08:2b:f7:fd:79:24:02:5d:2e:d2:39:
                    13:ee:51:6c:2a:be:25:93:41:5a:bb:92:bc:4a:8b:
                    40:74:0e:7f:84:0f:ac:9c:2b:0a:88:70:ea:f8:7e:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AD:D2:FD:B8:64:F3:85:73:0D:35:11:50:E3:A1:31:A4:BD:02:18
            X509v3 Authority Key Identifier:
                keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:28:0f:33:de:b0:7c:71:dc:e6:e6:37:5a:ad:dd:2f:4e:34:
         c9:8a:9c:7c:9f:2b:1b:60:e6:16:7f:19:51:9d:ff:53:fd:4a:
         7b:31:1f:d5:b3:e8:08:ce:60:76:42:55:b1:db:9d:ad:7f:69:
         86:60:de:b5:16:6b:8d:44:39:03:fc:d8:07:21:f8:9c:ee:95:
         48:1f:e5:6c:d1:3d:0e:3e:13:83:2c:d0:0f:c2:a5:5b:80:fd:
         da:5a:26:8f:22:6a:60:84:88:74:1f:82:48:d8:68:5c:c8:de:
         e5:95:59:2f:85:c6:61:73:3e:58:2a:91:7a:a7:2a:34:35:02:
         d9:f9:1d:bb:4b:b4:3a:f6:74:6d:bf:a4:1e:60:53:b5:50:65:
         44:c2:48:06:ce:41:7a:06:f2:1f:00:6a:32:e8:da:89:69:af:
         19:5c:a2:88:da:70:f7:cc:8d:df:29:12:69:77:00:0b:45:ee:
         0f:b5:27:c7:a9:5f:44:dd:a9:a2:c1:2b:4f:f7:0d:f7:e7:f3:
         a2:4f:98:76:99:49:2f:4b:39:10:a0:3c:3a:52:23:bf:bf:93:
         79:41:87:13:30:2f:84:5a:05:43:33:c4:9a:ea:85:61:b2:f4:
         2f:fe:ad:b7:cb:a6:4f:e2:e4:cc:3b:b9:7c:96:fe:66:92:28:
         99:11:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:29:22 2024 by rpki-client on console-fra.rpki-client.org