Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File:                     8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier:          y4vOj0JH27OgZ80kocsTeQX4jFZYFGljDPAHMdzIL4U=
Subject key identifier:   8D:DD:81:7F:84:EF:99:A4:C2:FA:78:C4:CD:7C:37:A5:50:A6:10:7C
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer:       /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial:       0193568AB697113BA5FDC3E4519D189EBFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number:          0C3B
Signing time:             Sat 23 Nov 2024 01:02:31 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:31 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:31 +0000
Files and hashes:         1: 6HKRlCVxNUZSYcRW26uKbvSIwb0.roa (hash: pxZM0b8jMeBUYunbjN1cProRl6hoWtKANILWFPZ2Mho=)
                          2: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: bK9MMSotPpDHQ0UDcYPGiaWgvtkDxgvLKq6DgILRFyA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:b6:97:11:3b:a5:fd:c3:e4:51:9d:18:9e:bf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
        Validity
            Not Before: Nov 23 01:02:31 2024 GMT
            Not After : Nov 24 01:02:31 2024 GMT
        Subject: CN=8ddd817f84ef99a4c2fa78c4cd7c37a550a6107c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:5e:22:62:cf:22:2d:ed:03:e9:83:59:3d:
                    88:0c:d2:e9:7a:49:ed:5e:13:39:db:f2:a2:a6:dc:
                    94:71:d7:84:dd:aa:20:53:48:f0:36:2b:7e:ff:94:
                    ee:65:c5:21:b9:06:38:b7:04:43:fb:08:65:10:3a:
                    46:7f:2a:ec:3a:b6:83:ea:1f:1b:b0:1f:66:e8:c1:
                    ad:fc:f4:bf:33:99:44:2d:97:3d:7f:dc:0a:bc:1f:
                    10:5b:25:ca:cf:2d:4b:51:83:25:1e:90:f7:65:88:
                    1a:19:09:4f:7e:04:64:26:9e:6f:1b:62:3d:54:f2:
                    12:2b:a2:15:f9:ac:15:56:f4:1a:69:84:8c:9b:b4:
                    0d:8d:81:76:3a:f7:b4:c6:a6:6e:a0:22:1c:de:bd:
                    34:23:8f:6f:4e:6d:55:d2:99:9f:77:ff:50:2e:9c:
                    a6:14:00:ec:37:85:e2:04:7e:b8:c9:16:27:c2:2b:
                    51:d8:43:c0:b2:8f:0c:8f:f0:18:44:56:62:9a:17:
                    8e:21:c7:86:75:78:cb:15:1d:d2:3e:b4:bf:7c:0e:
                    27:6e:21:75:85:35:4c:d6:5b:0c:0b:3d:2e:5a:60:
                    8d:6f:e7:3e:a0:c3:b0:ed:4f:6b:17:f1:dc:08:e3:
                    36:96:ce:87:44:a3:8a:1a:4c:72:f4:c9:d3:3e:37:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:81:7F:84:EF:99:A4:C2:FA:78:C4:CD:7C:37:A5:50:A6:10:7C
            X509v3 Authority Key Identifier:
                keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:c1:8e:87:3f:64:9e:c7:f7:77:8f:18:1b:ef:14:3e:e5:
         0f:58:64:aa:7b:8a:f1:72:ac:3e:5e:b9:4c:ef:5a:f4:a8:65:
         9b:80:3b:12:22:6b:17:3f:83:75:be:79:9d:6e:4a:e3:21:3b:
         3f:41:6b:d9:9e:4f:d6:f2:97:38:1f:96:4e:32:1f:be:15:be:
         53:0b:0c:14:e5:09:03:66:07:d3:3c:d9:5f:b2:d4:80:5c:99:
         14:c0:0d:1e:ff:b9:1b:3e:6a:d1:a8:d6:76:08:6a:e0:8f:89:
         72:1c:92:4d:f6:59:55:6e:dc:c8:47:23:98:96:56:18:da:37:
         52:aa:8f:0d:9a:1c:d8:fe:90:ef:e3:74:d4:ab:17:92:ee:50:
         33:f5:85:8b:11:53:55:56:26:83:1b:1d:f8:6c:23:65:6f:ab:
         34:4f:c2:9f:65:6c:38:bc:8d:44:e7:89:69:d0:aa:c3:57:06:
         a7:bb:16:24:67:d6:b0:73:6d:10:8a:3e:35:c4:63:d3:0e:e2:
         59:fa:36:74:20:6c:a0:c0:0b:69:fe:64:63:cb:e0:f9:3c:f7:
         ae:92:51:ce:3e:aa:c0:c3:12:5f:a2:86:cd:c7:99:ba:a4:ed:
         58:d5:fd:80:a6:a7:7d:ad:2c:e7:49:6f:10:a6:07:71:17:64:
         ed:e0:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:00 2024 by rpki-client on console-fra.rpki-client.org