Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File:                     OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier:          4svTmPDzyUGaleKQEQfQo0NEnCzWVkvs5RblPtiGLLg=
Subject key identifier:   F7:E2:94:04:D5:E4:88:91:B7:C6:3A:42:C3:2F:B7:CF:BE:BB:10:14
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer:       /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial:       019355AD0021DF8010297378E50ECFE01850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number:          06C7
Signing time:             Fri 22 Nov 2024 21:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:21 +0000
Files and hashes:         1: Et9SX7waqHVsOCHaM9XC6E9Pf4g.roa (hash: 79rZSbMlaqHq3jHCzw3/OmsSBxWvi+9RuZ8gN45ARBs=)
                          2: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: foHclFt8qu4E2MfBTYhQHHDCCuoJMLotCfkrAUXP9+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:00:21:df:80:10:29:73:78:e5:0e:cf:e0:18:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
        Validity
            Not Before: Nov 22 21:00:21 2024 GMT
            Not After : Nov 23 21:00:21 2024 GMT
        Subject: CN=f7e29404d5e48891b7c63a42c32fb7cfbebb1014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:fe:1b:23:2b:41:39:df:ce:d9:01:a5:c1:
                    5c:b4:0c:1c:db:27:84:8e:87:04:4d:69:85:8b:c6:
                    cf:42:82:76:97:59:00:8e:a9:3e:3d:61:38:57:b7:
                    39:eb:02:ff:d9:16:d2:7f:90:4a:bf:6b:a8:aa:b0:
                    84:5d:d2:79:17:38:43:5f:8b:91:3b:fb:01:27:d1:
                    21:ab:6e:db:f4:4c:b8:03:9a:09:5d:6d:eb:d7:e0:
                    a9:f3:98:f3:b4:d1:a0:64:27:40:f3:25:e7:2d:53:
                    e4:aa:4e:d6:87:9e:20:90:74:48:05:1b:17:6d:df:
                    78:9b:36:b1:66:3f:c7:7a:78:56:e2:d5:bf:86:b5:
                    60:49:5f:f9:7c:63:12:c9:9d:88:dc:21:9c:c5:4e:
                    61:4a:bb:9a:28:84:41:ed:09:3f:89:4d:12:0b:ba:
                    80:99:16:fe:e3:5a:6e:55:80:76:64:87:e8:0f:58:
                    f9:94:6d:46:ee:22:11:10:dc:ea:38:97:eb:ee:e5:
                    51:18:e7:b6:48:79:15:52:95:2a:a6:09:9c:ed:2a:
                    6e:d0:b3:53:90:6f:52:9f:2b:9b:e9:2b:74:cd:80:
                    b5:d4:0a:df:4e:4f:b5:d9:1f:21:aa:93:d4:6d:b8:
                    63:9e:43:b2:76:fe:bd:b5:35:c5:0d:03:a2:cd:73:
                    a8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E2:94:04:D5:E4:88:91:B7:C6:3A:42:C3:2F:B7:CF:BE:BB:10:14
            X509v3 Authority Key Identifier:
                keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:59:36:a7:2c:3c:fc:9b:95:eb:05:06:99:da:5f:ff:aa:18:
         a3:86:42:29:7c:d4:1c:3c:3f:f5:b3:e8:3e:c5:c9:27:ee:67:
         af:aa:28:a3:76:85:07:89:f9:7b:22:58:6f:e6:3a:a9:32:ee:
         34:d3:f0:9a:c9:0e:6c:4b:4a:aa:d3:2b:87:f4:21:ac:e5:f1:
         cc:d4:39:77:eb:69:7d:52:f1:6b:74:c5:1f:64:e8:43:94:8b:
         07:2b:c8:da:ac:8e:55:06:6e:9d:b4:d1:3a:48:47:66:14:43:
         ea:5c:01:7d:70:ba:61:be:43:8a:ef:07:d7:73:53:ad:0a:38:
         63:5b:82:fe:c1:98:55:ef:8c:6b:82:0e:9e:d2:01:31:ed:eb:
         3f:1f:3e:33:07:72:b7:9d:55:e8:57:b4:b4:a4:93:39:5e:95:
         c5:76:e0:b5:ed:28:b7:f5:29:96:46:d2:22:65:e2:3b:87:83:
         f4:89:97:ca:bb:d6:ef:eb:8d:92:2e:8c:28:6b:07:5f:3a:40:
         af:d2:90:52:1f:72:b5:c4:db:c4:80:4b:37:d1:69:b6:13:c0:
         ee:23:fd:f3:ad:41:e0:be:0a:84:cc:71:b0:1a:41:be:61:be:
         ae:90:cc:ac:26:94:c8:a0:32:a2:d9:d9:fc:b6:77:37:48:6d:
         3b:a5:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:38 2024 by rpki-client on console-ams.rpki-client.org