Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          Hlu2B6tpDCANFg/vvxAlqQ64h9mbFzf+sIcCuBQZjig=
Subject key identifier:   38:0C:39:45:D6:01:55:D7:1B:E8:4B:EB:07:D4:0A:8D:B7:09:97:2B
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       01935689C4C2B404D61B006DBD27E0976F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          0ED6
Signing time:             Sat 23 Nov 2024 01:01:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:29 +0000
Files and hashes:         1: iaQf8vdKeavZOi3c0TzzpGZFQvM.roa (hash: +Xx1RXFK1mCEC3/pJBQOSw1KeSCUEjfLdxB/5IHzCpk=)
                          2: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: DNwYx9hS2z4Sx8gWESXtUqAMrqwTASBlT5ZoVam5iA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:c4:c2:b4:04:d6:1b:00:6d:bd:27:e0:97:6f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Nov 23 01:01:29 2024 GMT
            Not After : Nov 24 01:01:29 2024 GMT
        Subject: CN=380c3945d60155d71be84beb07d40a8db709972b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:71:3a:da:19:30:ed:07:51:60:da:3e:19:
                    90:ba:00:f6:94:bf:45:ff:d6:20:da:81:ec:22:98:
                    65:10:83:65:12:dd:12:6f:7a:c3:31:84:4b:ac:ae:
                    83:c4:1f:62:19:5b:fd:02:9e:a1:a4:34:92:29:dd:
                    99:dd:c7:4c:1d:92:59:80:e9:c1:8e:86:a5:3f:7f:
                    3c:ac:c6:a8:88:64:00:28:a9:0c:53:5b:08:2c:3f:
                    42:bd:94:f3:1e:bd:9c:dd:b2:5a:46:18:07:0e:d5:
                    98:b0:d6:81:38:2d:9f:df:07:4b:1a:1b:15:ad:83:
                    d3:b9:97:9c:a2:c0:c9:91:e5:1f:eb:54:0b:da:66:
                    ed:cd:b8:8e:15:5d:cd:15:ab:fd:c4:57:0f:47:17:
                    1e:7b:05:42:c9:f4:82:60:5c:60:f8:13:1d:51:b3:
                    dc:af:86:37:1d:a9:81:4c:0b:a5:c6:97:ac:07:7d:
                    3a:a9:f0:11:74:92:7a:2c:0f:4b:e7:8c:36:fb:08:
                    d4:d4:8a:a7:32:bc:6f:9e:27:71:8b:7a:48:6e:3f:
                    c6:06:48:f5:d1:ca:d6:0d:7b:9c:c2:3e:aa:50:75:
                    5f:8b:01:ed:6e:b3:c2:3a:b8:0a:62:01:d9:97:f1:
                    b9:28:30:e3:bd:98:92:d7:df:7a:60:ab:f7:ee:89:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0C:39:45:D6:01:55:D7:1B:E8:4B:EB:07:D4:0A:8D:B7:09:97:2B
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:01:df:52:c0:24:6b:e5:cf:69:1e:ce:22:07:1a:e7:1a:59:
         82:f1:d8:fc:f1:40:07:ce:3a:ee:54:1b:23:69:27:69:a4:13:
         e5:f9:2d:9a:2d:f8:16:10:3e:77:40:55:13:03:82:f5:10:39:
         cc:9d:78:c8:9c:53:3e:0f:19:37:c2:c9:d0:4c:3b:f7:12:ad:
         72:39:0e:ae:cf:02:d6:74:28:79:eb:e2:67:b8:f1:1c:0a:18:
         2b:6d:24:d0:69:0b:4c:a2:cf:e4:db:56:f1:ba:e3:ab:b7:64:
         5c:68:e5:26:d6:7e:99:37:8f:32:58:88:a1:31:3f:1e:73:58:
         38:84:f4:ee:77:21:a1:44:c9:d2:81:af:1b:ff:2b:ee:0d:d8:
         e1:d2:77:a8:74:c8:b2:c2:7f:8f:a3:55:67:74:4a:a3:8b:4b:
         ad:a6:0f:64:1b:c8:81:78:d1:d4:ac:d3:07:b4:1d:5a:d8:d7:
         ea:67:be:2f:f4:e1:52:77:45:95:e0:55:47:d5:e8:9b:a9:8e:
         3e:65:34:85:d3:ae:63:6e:34:88:bb:6a:21:6a:29:9a:f7:60:
         0e:b5:3a:52:91:84:59:28:52:04:7a:c2:ac:88:fe:90:6b:bb:
         0b:6b:d8:5b:0b:24:83:30:4e:d5:0c:eb:7e:a5:97:7d:8c:95:
         cf:8c:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:34 2024 by rpki-client on console-ams.rpki-client.org