Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File:                     O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier:          vkwrioXIEPdWBA9YZvjfqAxJb1Wj9J1oQvjkCfP15vg=
Subject key identifier:   5A:0E:9D:B8:B6:49:C9:23:A7:B7:FF:50:9C:D9:2D:2A:79:1F:2B:C0
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer:       /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial:       01935576157E6124973654EDC4E3D8BD2CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 20:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:22 +0000
Files and hashes:         1: 1Y4cXqzBq-syaCh4ZmGgHysqBgk.roa (hash: jKpSxvx0w0M/5Gj2mh2ylQULQliIpPnQJyzOwSgT+Pw=)
                          2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: RfBlYD+UeosvIR2NC74O2ukTsDVXCsKVG0ocaX8i2iw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:15:7e:61:24:97:36:54:ed:c4:e3:d8:bd:2c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
        Validity
            Not Before: Nov 22 20:00:22 2024 GMT
            Not After : Nov 23 20:00:22 2024 GMT
        Subject: CN=5a0e9db8b649c923a7b7ff509cd92d2a791f2bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:4e:5c:5b:51:99:8a:75:21:2f:21:88:fe:
                    14:bb:94:b9:3b:09:c1:ee:57:9f:9e:9a:7c:66:bf:
                    9c:67:d5:63:04:2d:14:af:b3:f8:a2:36:0d:35:a0:
                    2b:e4:f9:42:2c:96:d0:f3:f2:ab:3b:4b:aa:db:e1:
                    36:a8:28:46:c3:6b:79:a1:5e:e5:8b:8b:86:e3:bf:
                    7c:92:81:1d:ab:8a:83:8c:92:25:aa:80:3a:4f:66:
                    6c:c4:8e:1e:29:b5:9e:62:ce:7a:dc:1e:50:c1:13:
                    bb:21:05:6b:e4:e1:12:4d:ca:b4:4e:03:98:10:8a:
                    76:f0:92:38:10:94:7d:9c:18:f1:e5:9e:28:d7:79:
                    be:13:3b:6e:df:46:a2:23:20:77:0d:e6:20:85:19:
                    56:39:ab:3e:bb:8d:f5:04:69:c3:09:ee:c1:63:4d:
                    7f:01:dc:66:b2:bf:93:5f:11:3d:0a:ae:8b:fd:87:
                    98:ef:fb:c8:af:9b:94:ae:3f:cc:93:17:a2:4f:74:
                    b8:e5:a7:b6:fc:ac:e1:bf:01:80:9b:bc:3f:b8:53:
                    55:b0:a7:a5:b8:ad:48:33:82:9f:c1:03:28:46:a2:
                    74:db:8e:5e:a4:30:87:8e:53:86:f2:1f:38:2b:17:
                    5c:45:dd:c5:db:ba:d4:95:42:72:75:48:3c:ae:c6:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:9D:B8:B6:49:C9:23:A7:B7:FF:50:9C:D9:2D:2A:79:1F:2B:C0
            X509v3 Authority Key Identifier:
                keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:05:6b:f8:51:4c:5b:ed:1c:3c:13:af:ec:ea:04:1f:c9:
         59:29:47:30:0a:94:fb:51:e4:af:20:94:c9:7e:d3:d1:52:af:
         95:45:23:2e:11:90:09:27:63:1c:2e:76:f0:09:30:74:68:56:
         94:4c:2f:34:82:34:d9:aa:b6:fd:be:14:93:c5:35:ea:98:c5:
         eb:1b:f1:ae:50:ad:28:ef:9c:3a:6f:70:a1:b9:37:2c:e3:ad:
         f6:52:c7:3d:b5:7c:4c:f6:81:f6:e2:be:30:ea:f5:e0:84:f6:
         e7:74:81:40:ee:76:5e:ef:83:15:a8:cc:9d:b8:aa:18:25:53:
         e9:a4:61:23:1b:15:49:d4:f6:1b:d7:35:62:19:4f:c5:4d:6e:
         d9:51:59:74:c5:6f:cb:1e:fb:43:d0:33:0f:eb:24:13:42:65:
         54:8a:e7:b5:97:00:f1:2d:48:72:09:60:53:c1:b9:19:1c:32:
         11:e2:d4:a3:12:12:96:c6:4f:23:2b:15:4b:2b:a9:c6:8c:f3:
         78:69:13:00:63:1b:14:b5:ed:12:b4:ae:a3:f0:9a:6a:78:9c:
         f4:36:12:fb:fe:d7:b5:0a:09:39:47:fe:f4:ed:d4:bf:a0:4a:
         f1:45:44:92:15:c6:b3:28:f1:2a:5a:52:9c:57:28:69:86:e2:
         66:2b:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:02 2024 by rpki-client on console-fra.rpki-client.org