Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
File:                     9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft (raw, json)
Hash identifier:          86RrxfZTDqYqquCtmG2uCasI/0x5rYtziNGRyZsqF7g=
Subject key identifier:   DD:E0:9C:28:28:1F:78:98:D2:C6:83:B9:50:08:69:96:F7:C5:31:28
Authority key identifier: F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
Certificate issuer:       /CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Certificate serial:       01936AEB51728B8B97E0851E9CF9E59CA3B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
Manifest number:          083C
Signing time:             Wed 27 Nov 2024 00:00:26 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:26 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:26 +0000
Files and hashes:         1: 9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl (hash: /7zz3pIMBixCl8l14UkwmmOgiDmZgg0CrL3nxTZHFzE=)
                          2: UkS8SUInkzgsqSzfJ181bF1GZME.roa (hash: 6vfQ7YliVT6CTDwHmHx/uDZzV3zdAmKUnuH1ENcvF+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:51:72:8b:8b:97:e0:85:1e:9c:f9:e5:9c:a3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
        Validity
            Not Before: Nov 27 00:00:26 2024 GMT
            Not After : Nov 28 00:00:26 2024 GMT
        Subject: CN=dde09c28281f7898d2c683b950086996f7c53128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:78:f7:5e:72:36:58:a5:96:fd:c3:bd:39:
                    e1:2b:72:15:7a:35:b0:91:e2:85:f4:9b:0f:c5:3d:
                    f4:ed:fb:d8:de:ba:c0:4d:79:66:22:16:2b:1b:de:
                    f3:16:b0:41:cf:c2:d4:2f:5f:b8:31:91:bc:ce:5c:
                    ec:d5:0c:d7:63:5e:ba:76:25:8c:ba:a2:31:4a:21:
                    d0:87:a0:56:62:ff:0f:a7:61:36:05:f0:d5:18:50:
                    71:62:8c:56:fa:19:b9:68:fb:52:64:1e:9c:8c:40:
                    1d:26:1b:15:dd:ce:29:6a:4e:e6:81:19:ac:4f:33:
                    6e:8c:de:6c:3f:2d:a6:e3:99:b6:83:1d:af:dd:6e:
                    e3:70:16:36:06:cc:f8:d1:ca:e1:4e:0f:3a:62:87:
                    99:56:9f:8a:a5:e8:f1:66:81:a6:28:0b:43:f3:e1:
                    0c:6e:52:9f:9b:83:c6:5a:0e:54:df:e8:28:f7:e9:
                    da:4b:e3:69:df:32:63:8f:94:c5:7f:d3:ee:59:fd:
                    7c:5f:0f:98:cb:8e:0b:1c:39:af:0a:ca:7c:fb:26:
                    9a:13:d7:a1:ae:81:a5:a3:8e:a1:19:6c:e1:a3:cb:
                    58:a3:68:a0:df:90:11:bc:70:d1:e7:99:f5:71:fc:
                    50:3d:a8:98:d1:65:0d:f8:55:12:4f:07:4f:0f:d8:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E0:9C:28:28:1F:78:98:D2:C6:83:B9:50:08:69:96:F7:C5:31:28
            X509v3 Authority Key Identifier:
                keyid:F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:db:a2:86:34:25:c4:7c:26:95:fa:92:df:f9:e4:81:91:3b:
         ab:59:56:d4:2b:89:2c:41:6f:68:00:ea:b8:17:49:9f:d3:36:
         87:fb:d0:b4:24:3c:ce:86:f3:5f:be:04:be:c7:c4:75:9f:16:
         b6:37:f7:10:40:93:3f:c5:41:4b:06:3a:84:61:ac:77:ad:ce:
         36:7b:53:55:1b:33:2f:82:d2:b1:7c:23:93:37:2c:05:07:99:
         57:19:26:93:aa:36:f4:42:14:a4:18:ec:63:72:c2:dd:a6:cd:
         8a:00:79:d3:57:55:28:62:d6:7d:c2:83:94:c9:54:c6:36:2b:
         29:36:58:b8:fa:7a:85:cd:6c:fb:02:49:59:a7:cb:77:85:4e:
         fe:3b:1b:80:57:09:76:90:e7:49:69:30:02:62:48:5b:1c:3f:
         b4:20:2b:18:41:4a:3b:d4:53:3d:cf:ff:13:84:17:8b:16:97:
         ed:37:a4:5a:7b:55:41:4e:51:87:8e:0f:cf:8c:00:ca:88:d5:
         eb:33:69:1b:35:64:35:0a:6e:36:2a:79:a3:18:79:74:ee:c4:
         c7:2a:41:70:87:fe:6b:03:c9:d3:8f:3b:51:1a:a4:1d:13:3d:
         a5:44:87:08:6a:c5:95:f2:4a:a7:e7:23:3f:0a:ec:df:53:7c:
         c0:e1:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:05 2024 by rpki-client on console-fra.rpki-client.org