Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File:                     o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier:          c4CHoZBYp+ARxLc2DPPOdiU1tbANDeicsZCxdKNBGro=
Subject key identifier:   6D:59:CC:7D:E1:99:D8:4C:DA:FB:6B:2C:4A:CC:2F:85:AF:FC:2A:FE
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer:       /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial:       01936933F069D6C5F4049AEE8D8BC88A6720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number:          0142
Signing time:             Tue 26 Nov 2024 16:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:31 +0000
Files and hashes:         1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: WJhK6JM8vXXPKVtue73MK+aEowEQNlC76P81WpbDA7c=)
                          2: pp6cYSMd21t-dA_j_5KvfPINwuo.roa (hash: 43RAf2oeA3Ut1+PwTFODKKU4y/iRZoSXlnZH2VNGOvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:f0:69:d6:c5:f4:04:9a:ee:8d:8b:c8:8a:67:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
        Validity
            Not Before: Nov 26 16:00:31 2024 GMT
            Not After : Nov 27 16:00:31 2024 GMT
        Subject: CN=6d59cc7de199d84cdafb6b2c4acc2f85affc2afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:28:3c:13:a9:01:37:1b:bb:df:13:23:eb:
                    ef:56:ea:e4:c7:b0:92:90:22:fe:c0:95:32:a4:26:
                    82:a0:de:8e:70:7d:6f:7a:d3:a9:38:41:dd:9a:ee:
                    2f:9a:a8:91:9b:38:06:20:e5:7c:2f:f6:ca:2f:24:
                    8a:5f:c7:1e:eb:a7:73:43:b6:fa:0f:08:08:fd:15:
                    38:79:01:51:6a:7c:91:f2:ae:1c:67:0d:f4:11:b8:
                    5c:1e:0f:b9:85:90:6d:40:af:f8:94:bb:1d:50:23:
                    e1:8e:2b:ed:09:c8:8f:ca:58:70:c4:16:89:12:c2:
                    6f:89:9a:4f:6a:0e:34:1c:4d:d6:22:4d:9a:d2:2e:
                    fe:15:42:0a:d4:7b:a6:fe:5a:0d:65:6e:c1:df:86:
                    30:59:55:85:b1:9a:a5:d9:6c:ec:ba:ed:a8:b6:ac:
                    ad:2d:aa:e4:e4:a9:5e:32:3e:21:65:94:32:9b:93:
                    c1:2b:90:29:51:be:1e:b1:04:92:57:ee:07:c9:e6:
                    5a:b9:98:d4:62:5b:bb:e6:a2:de:c8:80:2e:7f:94:
                    65:ad:3b:99:aa:86:52:64:da:ee:73:72:76:bd:ed:
                    d9:d7:13:9f:6f:8c:f6:bb:9b:76:d3:cc:b4:c3:df:
                    71:c0:ed:af:4d:f9:38:a1:29:1b:24:05:51:ab:88:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:59:CC:7D:E1:99:D8:4C:DA:FB:6B:2C:4A:CC:2F:85:AF:FC:2A:FE
            X509v3 Authority Key Identifier:
                keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:95:ec:a1:6f:89:55:21:77:48:50:45:6d:d2:48:f1:df:
         2c:ba:ca:23:dc:65:14:79:4b:54:82:24:53:96:d3:4b:e5:57:
         50:9b:c2:f9:16:db:14:2e:ce:66:ba:ee:d8:a1:f4:ac:16:ba:
         e8:cd:64:f1:57:67:71:4a:19:e2:62:3c:57:77:38:8b:ef:c8:
         20:1b:5c:48:7a:06:12:78:d3:2a:8c:f3:5e:bb:b3:58:5a:43:
         c7:82:48:d9:b4:10:af:71:23:70:c2:b0:4e:ae:76:09:2e:3c:
         7e:e9:85:6b:9f:51:1a:a8:64:9a:b0:42:a9:24:2a:39:2e:1b:
         64:75:60:76:29:5c:64:45:47:2c:ce:5b:58:ef:f2:63:9c:1b:
         9b:0c:e3:98:1e:78:0e:55:a4:9a:92:b1:08:45:ec:b7:52:6b:
         d8:db:66:bd:7a:78:0f:bc:bf:b2:91:fe:cb:2e:ad:7f:e1:ab:
         a4:7c:8d:1a:26:7a:f0:fc:c4:84:ba:0f:87:06:e5:e4:bb:00:
         d2:63:dc:b2:3a:a9:20:0b:6a:27:98:1d:d5:ee:32:04:86:11:
         68:8f:1e:ba:c7:f8:4e:df:68:50:1f:1d:22:c2:35:af:ae:a2:
         f5:fb:61:35:a7:42:ed:22:57:f1:52:88:01:82:a0:08:94:ec:
         6c:d7:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:32 2024 by rpki-client on console-ams.rpki-client.org