Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
File:                     OEGrqj51xG2YtvqGeNNP7yrDhbA.mft (raw, json)
Hash identifier:          P7Wx66wqdnKjJ2qF329e14t+LdVowN1X7q/KG1dbd78=
Subject key identifier:   F8:25:A2:34:B3:3B:10:DE:78:59:BA:1A:DF:83:AD:48:1C:E4:E3:AD
Authority key identifier: 38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0
Certificate issuer:       /CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
Certificate serial:       01936AB43B8419D1EED8D8160AC38598AACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
Manifest number:          0AD7
Signing time:             Tue 26 Nov 2024 23:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:16 +0000
Files and hashes:         1: OEGrqj51xG2YtvqGeNNP7yrDhbA.crl (hash: 1JXczDthCB0dwgi6onX5ppKMGTWmnjB7zPAReHZpnmo=)
                          2: izM4A8471Iq8MvRpCywCACkVNWc.roa (hash: VuFx3dme4jZYX9eLA21N3okATN8Eooud6gzbSqrWzFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:3b:84:19:d1:ee:d8:d8:16:0a:c3:85:98:aa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3841abaa3e75c46d98b6fa8678d34fef2ac385b0
        Validity
            Not Before: Nov 26 23:00:16 2024 GMT
            Not After : Nov 27 23:00:16 2024 GMT
        Subject: CN=f825a234b33b10de7859ba1adf83ad481ce4e3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:63:c2:38:6a:3b:80:20:08:a9:ce:6d:18:
                    d3:90:4a:24:90:0c:4f:c2:78:c0:4c:a1:f6:4f:de:
                    4b:2c:3d:56:33:33:9a:93:f7:cc:74:20:2c:0e:0a:
                    e6:b0:70:5c:28:25:7c:25:73:d0:a3:77:36:8a:ac:
                    9a:0d:9a:47:e4:c4:7d:3b:09:0d:6e:10:70:0b:60:
                    3f:ff:a8:cb:1e:85:85:99:c2:97:0d:62:8d:17:01:
                    a2:fb:85:e2:58:85:e9:6b:68:3e:5f:8b:29:9c:aa:
                    32:38:f2:d8:b9:41:4b:e9:12:8b:62:5f:78:28:ee:
                    b3:dc:9c:2b:4b:61:34:0d:c7:db:87:2d:96:47:cd:
                    90:a5:e2:e8:39:a3:10:42:47:29:c0:8d:59:4e:9e:
                    73:17:11:bd:2f:d9:aa:a7:b5:70:83:c3:c3:0a:5a:
                    00:1d:05:77:91:81:a0:d1:4f:ac:b6:ae:d7:e3:20:
                    ac:c9:5b:8b:42:74:05:a7:18:f1:41:65:dd:5e:41:
                    16:01:1f:77:a3:af:fb:52:04:10:96:9e:c7:f5:31:
                    bd:f0:92:e3:c8:3b:a0:47:13:68:1f:49:73:b0:51:
                    4a:07:19:7b:4c:65:8a:3c:f9:3d:3b:d2:a1:85:56:
                    ff:5a:32:fa:91:20:75:f1:2f:b6:f5:ff:d3:79:cc:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:25:A2:34:B3:3B:10:DE:78:59:BA:1A:DF:83:AD:48:1C:E4:E3:AD
            X509v3 Authority Key Identifier:
                keyid:38:41:AB:AA:3E:75:C4:6D:98:B6:FA:86:78:D3:4F:EF:2A:C3:85:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEGrqj51xG2YtvqGeNNP7yrDhbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1129de-bf43-4967-8c04-f22610e63c92/1/OEGrqj51xG2YtvqGeNNP7yrDhbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:88:cd:c2:f7:b0:1f:93:ed:54:27:73:ef:35:c4:75:8b:be:
         56:9a:55:dd:56:5f:4a:0a:df:38:74:7d:67:70:0d:72:64:aa:
         ab:6b:92:90:b0:60:af:d8:0a:fb:57:9f:ca:7f:99:eb:dd:31:
         93:e1:8c:44:31:fb:47:e1:64:f2:5b:7d:d7:88:24:a2:12:9e:
         02:95:93:b4:16:a6:0c:cd:32:e3:9d:6a:10:49:3c:b3:05:d4:
         9e:ea:06:f0:08:96:cf:3c:36:30:f0:2f:6f:9e:e0:bb:eb:ea:
         53:07:51:1d:1b:a0:81:d3:16:c7:15:99:c1:62:ef:a2:1a:c3:
         85:ca:87:cc:cb:83:5f:e5:45:48:8f:b7:9a:9a:08:e1:c5:69:
         79:ca:81:c2:9c:82:23:28:14:bc:d0:2e:d2:21:5b:2d:8b:50:
         5c:aa:e1:8b:0e:3b:92:68:dc:32:67:45:a3:cf:57:79:2e:3e:
         8d:1c:23:85:e1:31:1f:6e:36:8c:b5:23:b8:c1:d5:22:8f:fe:
         5a:3c:86:6b:bd:b2:20:32:1b:61:79:50:00:b1:40:f2:1a:14:
         ab:41:76:af:5d:ad:37:d4:bc:68:0f:ad:2a:2e:b9:c2:fe:b1:
         6c:5f:41:53:d5:7e:3f:4b:1c:51:d1:b9:1e:30:79:02:d2:86:
         38:ea:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:08 2024 by rpki-client on console-fra.rpki-client.org