Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
File:                     0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft (raw, json)
Hash identifier:          Y/v0crQR8GldD11VIFc5YeQsvaJrUG+FiN4Tq/ulNzo=
Subject key identifier:   38:4C:6A:15:E0:7D:51:3A:86:F1:C4:BF:29:D0:D1:CD:DB:6E:BA:B1
Authority key identifier: D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
Certificate issuer:       /CN=d0c3d358812e60b680e4e11632f139560bf525fb
Certificate serial:       0193568A823675CB00E30AEDFFE117D28130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
Manifest number:          0AF7
Signing time:             Sat 23 Nov 2024 01:02:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:18 +0000
Files and hashes:         1: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl (hash: xmihBp2Ktw+YZPZbiIm0n7nfUECAO9nf8FEiY42j858=)
                          2: VYxETRyMB_5brJe_4iKAuiQbEUI.roa (hash: dmcYzJ1f0soAolwfqw1exU9yBuWbBJ6h+v0u9bOPZQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:82:36:75:cb:00:e3:0a:ed:ff:e1:17:d2:81:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0c3d358812e60b680e4e11632f139560bf525fb
        Validity
            Not Before: Nov 23 01:02:18 2024 GMT
            Not After : Nov 24 01:02:18 2024 GMT
        Subject: CN=384c6a15e07d513a86f1c4bf29d0d1cddb6ebab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:c7:5f:11:e5:33:03:5b:ef:01:0a:e2:bd:
                    d8:dd:a3:0e:27:84:ed:87:f6:e3:69:d9:fb:c8:ae:
                    6d:d1:07:bc:18:10:08:4d:89:be:a4:6c:ff:dd:26:
                    c6:6b:ea:63:e5:e8:cd:3e:34:2a:91:25:a2:6f:cf:
                    0a:49:0b:ba:6a:10:bb:42:d2:90:45:d3:1a:b6:41:
                    70:ba:97:c6:46:7e:d3:15:4b:c7:7b:1a:e0:4b:68:
                    5b:57:06:a9:b9:2a:70:cb:22:52:aa:d1:5a:99:4a:
                    3c:85:f6:07:08:5c:ae:18:ae:74:95:d5:3c:d7:65:
                    88:03:25:c6:f3:2f:e8:13:f8:34:5c:34:0c:53:83:
                    b5:18:c5:c1:0b:73:e5:12:e8:7c:02:76:d4:84:63:
                    bb:62:9b:b1:f7:34:f7:b8:8d:ec:7b:d7:7f:61:44:
                    fb:ba:25:fa:15:3e:21:1f:ac:f9:21:d9:9b:89:cd:
                    82:98:11:3e:8a:b4:a0:55:78:ff:34:09:bc:0d:c7:
                    04:f0:6e:38:67:59:9d:aa:87:5e:3e:ba:6b:c4:9f:
                    f9:7f:3a:8a:73:d1:72:e7:4b:f7:8d:2b:9a:23:b4:
                    b3:56:47:65:aa:70:3d:33:4b:6b:6f:d4:58:75:0a:
                    1a:99:20:53:25:de:d5:de:4f:30:4f:21:6f:54:bc:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4C:6A:15:E0:7D:51:3A:86:F1:C4:BF:29:D0:D1:CD:DB:6E:BA:B1
            X509v3 Authority Key Identifier:
                keyid:D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b5:74:c6:ed:66:97:e5:9d:62:9d:b2:90:3a:a8:9e:a3:5d:
         9a:6e:9c:b8:c3:33:c2:b7:67:18:b7:bd:e0:ad:4c:65:0a:26:
         0e:82:1a:b9:a2:f4:d3:83:3a:63:a7:e8:93:e5:98:8b:c3:c7:
         a3:bd:da:d5:68:9c:ad:e7:eb:0a:b3:fc:de:d2:c3:14:6f:ba:
         c6:b3:01:c2:f2:cc:e2:fc:28:df:91:8a:66:72:67:f4:d2:99:
         39:23:21:91:9a:60:ed:e8:3c:3d:0d:0a:8e:7e:37:11:9a:14:
         1e:dc:cc:5d:fc:bb:a6:f0:f8:eb:3b:23:c9:63:6f:df:44:a9:
         f0:14:82:21:12:4f:1b:36:99:ca:2a:d0:9f:49:1a:75:14:a2:
         58:45:de:14:56:c2:0e:0e:47:d7:e6:17:22:9b:b3:21:86:62:
         de:af:e0:d6:ad:05:30:6c:8c:26:21:e9:86:d7:4d:36:ea:aa:
         50:ad:45:99:3a:c6:8a:c4:ed:06:f5:cd:60:c5:e1:0b:cf:3e:
         49:95:a6:59:2f:7c:61:e8:89:e7:90:19:71:34:6c:b8:93:06:
         72:73:19:c4:a0:d7:9d:01:b3:32:60:f6:a8:b4:c1:c3:b6:2a:
         6a:9a:4b:fc:26:b7:49:a1:55:6b:3a:f4:58:b4:f8:95:15:1d:
         b2:9d:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:07 2024 by rpki-client on console-ams.rpki-client.org