Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File:                     OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier:          sVdgRFEoE2CrxL2su22vjSAljT0ZcCR1eTUYbPlntSY=
Subject key identifier:   A1:55:9F:45:35:BC:9A:B0:85:92:C3:04:03:3C:6A:DD:C9:3E:59:63
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer:       /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial:       01935689BCBD71A5A0BA814E2BDF19D52156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number:          0893
Signing time:             Sat 23 Nov 2024 01:01:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:27 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:27 +0000
Files and hashes:         1: 1-rD-wfu8vyZ787pNbsLl0LRbsoA.roa (hash: +RBYoxokBRzSDMi2Oyx9NxuyDdmUl3Ozvy+nGuK4NKc=)
                          2: CAHrILDi7JAU1KoY9fZvDY0WcL0.roa (hash: 9cc+BBCLpHyZHWEQj7UOHoLsuPe4SEBq52chOIU74ig=)
                          3: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: 5Krx3kKkmuqugxsO9Ktn2UFNMZGsCxJtq6E3ybJ9ZXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:bc:bd:71:a5:a0:ba:81:4e:2b:df:19:d5:21:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
        Validity
            Not Before: Nov 23 01:01:27 2024 GMT
            Not After : Nov 24 01:01:27 2024 GMT
        Subject: CN=a1559f4535bc9ab08592c304033c6addc93e5963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:d8:48:99:fb:04:b3:0c:27:d3:ce:0b:1b:
                    3c:b9:b9:22:b5:f1:21:09:56:58:51:8d:d3:cd:b7:
                    09:9d:e0:92:d0:4c:8e:53:eb:bf:65:2f:fa:b1:a9:
                    ae:f4:08:9c:3a:bb:44:31:e1:cb:a7:11:30:7e:77:
                    d9:bc:3e:73:fe:44:99:a7:75:1d:11:f7:b0:58:0a:
                    cb:cc:8e:49:12:81:86:f7:79:b4:3a:a6:17:35:56:
                    50:f2:07:82:18:0f:7c:5a:f2:41:d7:62:e4:c8:28:
                    3d:7d:ba:65:38:b7:11:6f:cb:2e:ff:b7:e0:ca:0b:
                    67:ef:d4:a5:d5:d5:25:20:bc:14:45:24:21:59:47:
                    60:1f:4b:0f:5b:78:75:dc:88:da:f2:64:63:48:78:
                    3d:5a:e3:c5:c2:60:4b:9f:b8:5b:4e:eb:5e:9a:56:
                    d2:c1:7b:ad:82:15:57:5a:9e:fe:42:20:e8:ca:31:
                    a4:e1:35:26:b0:91:1c:13:77:c1:3e:60:a9:da:a9:
                    24:c9:61:b8:4b:ac:cc:82:a8:01:a8:f3:4d:40:d3:
                    72:62:f6:c0:6a:2c:4b:88:ca:a6:e3:81:9f:f4:3f:
                    c4:18:23:42:2c:a5:a6:d8:9e:4c:c5:40:74:ba:ab:
                    91:c9:c5:41:4c:dd:85:34:ae:e7:42:01:84:91:06:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:55:9F:45:35:BC:9A:B0:85:92:C3:04:03:3C:6A:DD:C9:3E:59:63
            X509v3 Authority Key Identifier:
                keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:a5:c7:fa:b6:98:80:df:a3:bc:1e:19:ed:e7:33:20:9f:
         ca:b6:68:82:c6:d5:ac:c9:74:a9:a4:53:92:45:af:05:53:d5:
         fc:d3:46:7d:a0:45:ac:36:25:fa:ea:1b:6e:de:54:e8:44:53:
         c0:35:26:26:e3:fc:e6:60:e1:e7:43:8a:e7:90:c8:15:2a:ed:
         cd:f8:c1:55:29:c6:97:6e:ed:e5:32:e4:65:7e:64:d6:3d:8a:
         42:ae:2f:fd:62:f0:e2:80:35:c6:9d:c9:21:42:06:51:6b:21:
         98:4e:44:f2:8b:6f:36:47:cc:5f:a4:43:00:e0:72:cb:c3:bb:
         50:8e:4b:e4:68:7e:a4:05:fb:b1:f9:54:9e:05:50:29:89:2f:
         f4:36:50:2e:b4:6a:3c:cb:3e:7f:92:cf:aa:3b:cf:7c:8c:16:
         18:c5:2d:66:ef:8b:73:57:08:89:76:0c:9d:d7:0d:1f:4f:d9:
         49:63:5d:59:3b:d3:a6:c7:7e:17:d6:1e:a0:4b:27:ca:58:2f:
         a9:48:2d:56:b4:f3:d9:4b:21:94:38:9c:2a:bd:5b:a8:76:4e:
         6f:0a:5b:d2:77:b3:b3:ad:04:c6:fa:33:17:2d:83:58:bb:8b:
         56:c5:86:ed:fd:af:58:6b:24:a7:ac:d4:d4:04:b5:ff:f4:10:
         f8:1e:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:25 2024 by rpki-client on console-fra.rpki-client.org