Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File:                     1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier:          0SXQwZ9zsIUpIrpqQ/mdo8AfpZgAzMLgfkL5lP0aPh8=
Subject key identifier:   3C:E2:94:98:23:D4:60:74:88:A2:1D:D8:C8:9E:70:DF:AB:60:27:8E
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer:       /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial:       01940645F79C88185BF72A04821D19D8996C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number:          0A9B
Signing time:             Fri 27 Dec 2024 04:00:36 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:36 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:36 +0000
Files and hashes:         1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: FMn2QFRoFKtLhHMzWWrCyM0fbTrqRWeJ/L7rKUcPZBo=)
                          2: QMNfMdMIRh9nZ7lPcwrS6TXOPJs.roa (hash: ZwinjKd7Dfk+BZb/LLk2BIMP42P84k1xzmeOfD3ELRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:45:f7:9c:88:18:5b:f7:2a:04:82:1d:19:d8:99:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
        Validity
            Not Before: Dec 27 04:00:36 2024 GMT
            Not After : Dec 28 04:00:36 2024 GMT
        Subject: CN=3ce2949823d4607488a21dd8c89e70dfab60278e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:5d:90:90:99:53:20:0b:e1:b6:85:6b:67:
                    c8:9a:6a:c5:84:6b:7e:5c:8d:4f:16:aa:48:54:9f:
                    11:88:8f:94:c6:17:01:ee:43:e1:e9:69:d8:09:94:
                    74:7c:74:c3:18:6a:b9:f4:ad:bc:90:0b:3a:4e:df:
                    85:b8:ba:f5:45:9a:04:27:2d:e6:51:c2:47:66:cc:
                    a1:66:df:73:82:32:3b:6a:0d:e2:cd:1e:5f:85:a9:
                    60:63:f6:cb:d1:6a:e5:be:26:73:41:ee:a3:6c:84:
                    81:98:98:62:d0:21:3e:e8:5d:3a:aa:4d:b5:e6:54:
                    8c:46:81:62:b4:cb:81:0c:36:43:00:84:1c:50:74:
                    8f:d4:f3:30:33:d0:fa:cc:81:88:10:f4:40:bb:e3:
                    6d:2b:23:ea:de:b8:65:7a:ee:1d:c6:a0:68:9e:de:
                    af:48:0a:e9:82:2b:72:8a:92:2f:0f:5a:79:de:f9:
                    f7:57:2c:53:d1:8f:b8:4e:36:83:fe:3a:08:9e:51:
                    7f:96:08:6e:ed:f0:21:fc:43:0b:a4:a0:60:71:89:
                    d9:ac:09:54:12:d2:8a:bc:eb:d3:84:72:d4:58:41:
                    72:46:23:0d:99:e1:93:6f:11:ef:b3:b2:74:a6:7a:
                    57:ea:5e:83:7b:34:8d:af:24:42:54:b9:e0:4a:61:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E2:94:98:23:D4:60:74:88:A2:1D:D8:C8:9E:70:DF:AB:60:27:8E
            X509v3 Authority Key Identifier:
                keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:7e:00:36:ce:59:90:70:f9:94:12:16:e2:d5:7e:17:29:
         ce:47:37:17:83:27:0c:5d:6b:d1:5d:b3:e5:fd:c0:72:e5:05:
         18:c4:4c:d9:42:60:2d:13:8b:52:ff:bb:91:59:c8:18:7e:fb:
         84:01:cc:07:3f:bc:b9:37:30:ed:8a:36:08:f2:30:61:c0:70:
         05:9b:ab:d8:1a:f7:50:df:59:1f:66:02:22:04:0b:79:cb:14:
         48:03:f0:0a:b5:a2:26:89:c8:8e:c8:a8:39:42:13:da:e7:f3:
         19:96:6f:4b:45:d5:7c:af:c1:84:74:c6:6e:7e:a1:5f:2c:d4:
         aa:bd:46:e8:5f:a7:1b:06:6d:e6:ad:04:e2:e1:1e:d9:10:84:
         db:96:37:55:55:13:2b:f0:cc:0d:4c:a9:b2:e5:4d:18:8e:0a:
         2a:c6:eb:17:7d:51:22:2b:db:92:89:ad:50:18:60:c2:a5:64:
         55:57:ec:35:fc:48:50:8e:d5:f3:95:32:6e:b2:dd:85:db:2a:
         d1:5d:91:8d:67:8e:4e:4f:21:dc:d8:a0:5d:a1:da:07:04:48:
         8d:0d:28:5d:97:e5:c2:33:a0:d7:c4:68:19:9c:d2:54:97:62:
         5f:84:9c:58:50:6b:80:70:d5:32:8f:6a:83:a7:1b:71:26:e8:
         3a:7e:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:41:22 2024 by rpki-client on console-ams.rpki-client.org