Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File:                     OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier:          m4O4ZM/mIIoWZwA9dNLJfZMF1f0Xjqqa/FqPcUmYPUI=
Subject key identifier:   DF:90:92:AC:E2:E5:E4:4B:B7:45:6C:F3:FC:12:5D:3F:57:38:D4:1F
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer:       /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial:       019369D980A0A457A061AE6BAE80960FDF9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number:          130B
Signing time:             Tue 26 Nov 2024 19:01:22 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:22 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:22 +0000
Files and hashes:         1: 1iICnsvVwJe2SxhUEgmUAsyxaR4.roa (hash: /BrTdm8jGXvosCv+KkoJXFUB2IeMJFfFfl42llqGnbc=)
                          2: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: 8BbO/M3uY8MLOWpDqxxUHVvwsqUt8HTjZ65wokvOlIw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:80:a0:a4:57:a0:61:ae:6b:ae:80:96:0f:df:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
        Validity
            Not Before: Nov 26 19:01:22 2024 GMT
            Not After : Nov 27 19:01:22 2024 GMT
        Subject: CN=df9092ace2e5e44bb7456cf3fc125d3f5738d41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:13:85:57:c5:40:33:71:d0:89:55:d5:19:
                    da:2f:4f:8c:a8:4b:ba:97:73:6e:44:44:22:d1:9e:
                    0b:ee:9d:e9:d9:2c:49:f6:94:9c:e1:a0:d1:e9:40:
                    26:e5:4c:26:cb:85:9a:77:9f:b8:c9:a0:11:48:1f:
                    d4:c5:d8:b4:87:d8:6d:a7:b6:ec:f7:d1:6a:e6:8f:
                    12:32:20:85:49:13:76:a4:3b:10:cd:73:1e:43:c9:
                    12:d7:37:3c:f0:08:f8:ad:6c:6d:af:68:bf:f2:7c:
                    1a:53:ef:7c:d4:96:0c:f0:bd:4d:eb:98:f9:18:26:
                    58:6c:ea:99:ae:76:88:87:12:9a:74:82:d5:41:9c:
                    86:50:90:d7:96:94:56:00:a2:74:61:54:62:71:ca:
                    eb:6c:6f:4f:fc:b9:9b:c9:4d:c0:4d:bf:7b:07:10:
                    4d:c1:55:f6:3d:cb:af:1b:23:b4:ad:01:a5:39:8a:
                    5a:61:0c:01:c2:bd:f7:42:50:9a:24:df:8e:7e:81:
                    77:cb:9d:bb:18:fc:a6:c9:9c:fe:4a:98:86:df:d4:
                    4e:64:2a:4e:be:8e:2a:1a:42:0d:92:dd:b1:0e:fa:
                    e8:10:0a:e2:87:f8:71:1c:6f:cf:94:bc:86:2a:6d:
                    af:f1:fb:7d:7a:90:44:c6:86:77:56:b9:67:82:83:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:90:92:AC:E2:E5:E4:4B:B7:45:6C:F3:FC:12:5D:3F:57:38:D4:1F
            X509v3 Authority Key Identifier:
                keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:8f:ce:f3:4b:d6:25:68:59:77:ec:9a:3c:26:87:5f:32:
         d4:67:52:b3:dc:41:01:5a:20:30:9d:0f:f1:d0:7a:64:24:54:
         a0:3e:dc:06:12:fe:de:08:82:d5:75:16:a0:28:64:9a:96:f2:
         54:5d:26:86:11:5d:0e:f5:7a:d6:92:f2:61:99:4a:80:eb:f3:
         26:00:42:c3:ce:8b:be:5d:6b:6d:3f:47:0f:d2:45:a9:70:52:
         a2:a7:91:7e:7d:4d:7d:f7:83:47:7d:8e:89:ab:e4:76:5f:31:
         71:66:8a:34:0c:3b:04:53:45:a6:16:80:81:76:d7:c8:ff:af:
         dd:17:27:e7:a8:73:ae:a6:e1:48:07:2a:5c:45:f9:c8:ea:99:
         63:aa:6e:6f:56:f6:92:30:ea:56:d3:c9:48:ba:96:71:e8:ed:
         3a:53:a8:91:12:ed:5d:8c:db:5c:bf:ee:9e:d1:bb:07:dc:2b:
         fa:3f:5e:af:df:fe:ad:85:d2:61:85:e1:67:3b:f4:37:ee:27:
         61:54:19:4f:23:97:fd:94:b4:b7:92:48:b4:4f:16:71:63:f5:
         8d:3b:2d:bb:c0:fb:4d:b0:44:83:53:c0:01:1a:9a:de:b3:c8:
         18:ce:8a:ee:90:74:ec:67:51:b7:21:5f:c5:ab:c1:8e:9d:84:
         91:4d:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:21 2024 by rpki-client on console-ams.rpki-client.org