Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File:                     oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier:          TqOf6L6WRalGXIZyVQ5U+akf+YFApU2qFl3UKhU72PI=
Subject key identifier:   53:F4:B5:5E:E9:48:68:67:D4:F8:7B:68:5A:15:4A:30:3B:86:D8:6B
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer:       /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial:       019365FD5039C90CF0186ACE36DE49982EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number:          0FA0
Signing time:             Tue 26 Nov 2024 01:02:00 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:00 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:00 +0000
Files and hashes:         1: dWvBcWemXfZV3odBZBR1G4rg6KM.roa (hash: ths+9p0W3ZtpT7Dxl6F25w1KF9Uzw0zMNF+ZgYw+RJU=)
                          2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: UgUR1kIFvpj9t1D6o9rvaxVl5uq1hUNyVUW0w9313JY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fd:50:39:c9:0c:f0:18:6a:ce:36:de:49:98:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
        Validity
            Not Before: Nov 26 01:02:00 2024 GMT
            Not After : Nov 27 01:02:00 2024 GMT
        Subject: CN=53f4b55ee9486867d4f87b685a154a303b86d86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:f2:ac:6a:68:f6:52:03:71:99:e3:d1:45:
                    56:d7:53:72:d6:4a:ac:82:a3:df:a1:72:ba:9d:ea:
                    87:98:19:a6:ea:53:2b:f4:a1:fc:3d:7c:b5:c5:fd:
                    9e:04:e8:31:61:1d:15:75:f2:32:a9:0a:3e:ed:20:
                    5e:26:b0:c8:2a:da:64:3a:89:d1:b8:7e:46:b9:08:
                    00:59:3b:68:4c:12:eb:75:f8:ac:f8:e6:54:48:0a:
                    da:df:5b:f1:b8:6c:4c:dd:ed:96:b9:6e:1a:87:ea:
                    66:be:04:ab:9f:a6:41:74:9a:dc:8f:97:e0:b6:93:
                    12:48:73:6f:45:13:f2:99:bc:d3:2a:4f:ca:ef:a0:
                    70:ae:7e:35:c1:9d:a4:bd:29:bf:eb:67:27:50:cf:
                    42:16:8b:32:26:e0:73:d0:ff:6d:6a:e1:31:a2:ea:
                    33:f6:48:b7:e8:b1:7c:07:e7:30:d3:0c:5e:96:59:
                    f6:ea:2a:37:4b:69:17:c9:9e:6c:99:5b:87:ed:41:
                    ff:a3:ba:95:d9:a8:f4:37:cb:d6:ad:9f:2a:cf:59:
                    b5:fb:24:96:9b:51:43:dc:4e:bd:9e:0f:f4:99:96:
                    8c:71:77:d6:40:10:b5:0b:30:d6:8b:4c:43:b7:77:
                    14:ac:6b:d0:83:37:1b:44:d0:e0:9b:66:fc:22:36:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F4:B5:5E:E9:48:68:67:D4:F8:7B:68:5A:15:4A:30:3B:86:D8:6B
            X509v3 Authority Key Identifier:
                keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:19:b0:e6:5e:e2:a1:45:a9:2d:ec:b3:87:22:3e:82:64:55:
         34:c3:76:36:a0:95:e1:d1:e0:6c:ba:2c:28:8a:bc:be:38:ae:
         7f:be:55:51:4d:52:57:fb:0e:70:b9:5a:c8:cc:f4:2c:ad:77:
         ab:c2:4b:c3:64:74:92:83:c0:2f:12:42:1e:bd:36:a7:52:58:
         6d:fd:41:fa:c5:6c:3a:9a:6d:ce:92:6d:96:cb:3c:af:e0:b8:
         8d:3e:f5:76:c5:14:82:5e:e3:67:11:69:0c:06:50:56:ce:80:
         22:91:e0:64:d7:f6:b6:ed:61:fa:fd:2f:29:ae:a4:90:e6:3a:
         10:c7:02:c4:bd:bb:b9:0f:b5:72:d6:e6:1e:90:b7:67:a5:90:
         46:f1:2c:67:6e:15:e8:45:3e:ea:28:30:80:c8:14:9b:43:ca:
         dd:73:40:55:4b:ee:c0:e9:bc:e8:46:7d:07:4a:cb:fc:27:f7:
         9a:ab:64:a0:fd:b1:b6:0c:1f:35:82:91:b1:a4:d9:a1:3d:1b:
         b8:24:96:9b:8a:eb:e1:c5:08:99:16:4b:66:cf:a9:7a:3e:9f:
         fe:21:0c:ee:a2:cd:4c:88:7a:31:9b:85:a3:66:1f:3e:27:cd:
         03:d7:78:6d:85:46:f3:0c:52:b6:6e:02:c4:de:f8:74:b7:15:
         d1:e7:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:55:37 2024 by rpki-client on console-fra.rpki-client.org