Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File:                     Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier:          rS/VsuqIYu+4TBwgGhuhesxHfx5NIiJ7jEeNDk6ZfbU=
Subject key identifier:   09:3E:3A:BE:A7:0D:D9:37:6F:87:DD:6A:E4:FC:F0:39:FF:99:A3:09
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer:       /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial:       0193549AC9144EDC2C2A5A523E8344698770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 16:00:50 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:50 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:50 +0000
Files and hashes:         1: 3kGVyEHrO1uSD-MjFw05qLoyV3k.roa (hash: HOT2C+5migcVJBRaoVvao0e15VbsEtVcDeBSKQeW2gw=)
                          2: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: PlqlWhnrdqs5lZ9jilFRQw2UIVQph5K6eCTNNDbECHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:c9:14:4e:dc:2c:2a:5a:52:3e:83:44:69:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
        Validity
            Not Before: Nov 22 16:00:50 2024 GMT
            Not After : Nov 23 16:00:50 2024 GMT
        Subject: CN=093e3abea70dd9376f87dd6ae4fcf039ff99a309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:a8:c3:5c:e7:0d:48:05:8e:48:2d:5f:c6:
                    bb:90:d4:d8:cc:bc:78:b3:34:f2:b1:7c:41:e5:56:
                    69:6d:af:48:e8:49:6f:c4:51:0c:ec:8c:17:bc:2e:
                    f5:96:c9:fa:4f:bc:5c:b2:ab:4e:1d:49:76:b9:33:
                    63:7d:d1:b8:f2:3a:18:4a:04:dd:47:8d:5e:8f:53:
                    73:82:03:1f:88:89:56:7c:91:7f:d5:79:b3:2d:2d:
                    c7:ac:bd:3c:40:b3:94:80:84:06:cb:2d:aa:a7:31:
                    5e:06:84:15:bb:ca:e6:bd:e5:06:4f:b1:13:cc:9d:
                    52:bd:c3:17:e7:ae:c2:ae:6d:9f:23:d1:0a:d8:ac:
                    eb:77:b3:ab:f1:35:13:18:10:10:ec:c6:e1:ce:f2:
                    60:9d:9c:fe:c7:d8:7e:54:7f:0d:b6:69:c2:4b:47:
                    97:9c:ee:b6:1c:a9:f4:dc:50:27:d5:82:71:8a:55:
                    9a:67:22:37:aa:1c:b1:2f:dc:cd:69:67:3a:ff:41:
                    94:56:c6:4f:b0:ab:64:15:41:3d:a0:a7:b5:f0:29:
                    75:de:81:ae:92:77:4e:6a:9c:44:b0:6e:0a:e2:1f:
                    20:91:35:44:2c:00:d8:0e:ed:b7:e0:02:95:06:d0:
                    e8:99:3c:76:f1:bc:5e:9a:ea:e0:0b:e8:11:9c:00:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3E:3A:BE:A7:0D:D9:37:6F:87:DD:6A:E4:FC:F0:39:FF:99:A3:09
            X509v3 Authority Key Identifier:
                keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:33:05:c7:e1:1d:d6:27:63:96:ae:bd:6d:45:1f:17:e5:4d:
         11:08:07:e3:0f:71:03:39:da:0c:3b:d9:49:0e:05:2f:38:26:
         1f:be:50:05:9a:bf:44:d7:68:5f:89:99:33:57:68:3e:d6:6b:
         0b:61:9e:83:f3:58:13:11:7d:b7:ae:bd:5c:ec:9f:b7:84:4f:
         ef:5b:ad:f3:0b:4e:b2:db:b5:0c:ca:9a:f8:f3:f3:ab:92:50:
         29:dc:30:09:a0:67:fe:fe:26:09:77:07:e4:d2:58:62:97:6e:
         f7:81:e0:ce:83:c5:f1:5d:33:49:c4:82:c6:19:80:83:13:2d:
         67:6e:f7:41:62:2f:a2:5e:2a:1c:59:7e:2e:98:fc:27:b4:ba:
         17:25:e0:2d:dc:e6:26:ae:96:56:ea:e1:12:43:16:19:02:96:
         99:ac:d6:3b:a6:aa:11:a1:2a:19:91:9e:93:f6:28:7c:21:6d:
         07:87:56:11:34:b5:dd:94:fb:5c:35:f6:a5:38:aa:8c:d4:2a:
         e5:51:17:34:2f:30:fd:4a:6b:05:36:81:2c:14:68:51:3d:fd:
         e6:d0:f5:39:97:0e:b3:3c:6e:d0:2f:32:87:a0:05:ef:8c:61:
         43:a6:0c:ff:c0:fe:20:88:2b:63:52:25:0a:27:53:c0:de:9b:
         e0:7f:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:07 2024 by rpki-client on console-fra.rpki-client.org