Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File:                     xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier:          W71OaEIhcdQNmUWMMDloNIiM20i+wkfHP1dWv6IwbFg=
Subject key identifier:   1C:58:43:07:87:A3:00:37:C3:DE:F4:AA:DD:75:77:44:90:DB:31:43
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       019351D032D7E1BC6C985B26BC007D102774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number:          0CB5
Signing time:             Fri 22 Nov 2024 03:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:19 +0000
Files and hashes:         1: KZ3gI0Z3F5JIZVEPuBHW-TTycR8.roa (hash: hIJFfQnhl+PqtfGJcLooN7IspTm/Baui2VccJK7wiys=)
                          2: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: IaPsIYr9epPXsafdEYf3u1OOaos9c43sKB8DeemTsVk=)
                          3: yIwVFoar4exH1C-BGUkkBxYsOWU.roa (hash: YgcM0Ww1WB/FgkJ/mO0hxbSCXH/iCJXM09Vjo8JB5Fw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:32:d7:e1:bc:6c:98:5b:26:bc:00:7d:10:27:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Nov 22 03:00:19 2024 GMT
            Not After : Nov 23 03:00:19 2024 GMT
        Subject: CN=1c58430787a30037c3def4aadd75774490db3143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:e1:6d:42:f5:89:53:00:d5:87:28:a3:49:
                    64:76:86:b2:32:33:fe:4e:ff:5d:d2:61:41:b5:dd:
                    4f:87:ec:a5:0b:cd:ae:10:0d:d0:1f:4c:e0:e3:9b:
                    de:f2:f2:c1:4b:96:e7:38:df:e7:98:7f:43:95:83:
                    bb:00:02:c6:b4:9f:7f:be:4b:59:8d:2b:e3:92:e2:
                    f7:65:82:c5:8f:1b:99:c0:41:4f:81:74:61:66:a7:
                    50:7e:9d:2a:71:24:d8:af:bd:ca:75:34:77:ca:dc:
                    e2:06:24:ee:d9:65:a7:3f:97:27:6b:f3:96:88:a4:
                    07:fe:c9:0a:84:1c:29:92:9c:73:f0:5e:00:0c:ec:
                    e6:a8:f2:77:52:9a:9c:57:cb:9e:66:9f:b3:2b:22:
                    0f:8f:d4:bd:3c:d7:fa:df:19:23:f0:13:53:4c:92:
                    85:6f:06:3c:df:5e:77:4b:db:74:ff:2f:fa:92:df:
                    d2:89:e6:63:7d:79:da:86:05:c5:25:4e:b6:14:6d:
                    5e:14:97:50:57:d2:9e:64:40:cc:f9:5c:13:47:f6:
                    e1:b6:7d:d3:46:1b:14:86:fe:f0:7a:79:f9:b1:30:
                    fe:a7:23:e5:a7:2b:6d:bc:a0:b3:41:13:1e:fb:bd:
                    2c:d8:1d:3b:c1:e0:2b:e0:82:0f:0d:e2:ca:60:f0:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:43:07:87:A3:00:37:C3:DE:F4:AA:DD:75:77:44:90:DB:31:43
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:af:ce:fe:21:87:4f:58:ce:1a:54:41:96:37:70:22:dc:55:
         63:9b:ac:7b:3f:13:b6:29:25:1d:23:39:5b:c9:80:3c:30:89:
         dd:9d:48:d2:be:86:c3:f8:dd:b7:91:0e:b6:c9:3e:25:49:30:
         b3:8a:4c:74:59:99:55:d4:bb:58:24:8d:5a:58:2e:af:6b:5a:
         fd:73:71:1c:d1:9f:56:9d:93:80:4d:5f:2c:5f:96:ba:d3:45:
         65:f0:4c:67:0f:4f:37:d6:b3:13:16:b5:35:2a:e2:44:3a:80:
         d7:e7:9c:fb:14:c7:fc:75:8d:b8:b0:1a:6f:c4:77:b3:4c:24:
         3e:00:6b:a9:75:26:8b:4b:3c:12:b7:09:04:8e:ff:d8:ed:f3:
         a6:d6:96:fe:46:36:71:6a:03:b8:ee:95:5f:f5:27:c9:aa:e7:
         a6:6d:d3:22:83:db:29:f4:1d:d7:37:2a:80:50:2f:73:89:60:
         3b:94:47:37:62:7e:d4:4e:84:66:1d:b6:26:52:42:89:1e:65:
         e3:8b:b3:6b:0a:1f:80:d1:3f:f4:67:39:c3:b7:77:2d:0f:37:
         48:41:61:4e:13:4b:04:74:c9:cc:a9:bd:2c:aa:aa:60:64:28:
         22:6f:2b:b0:4a:f8:7a:81:0e:be:0a:5a:91:51:af:25:1d:8d:
         35:de:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:09 2024 by rpki-client on console-ams.rpki-client.org