Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File:                     OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier:          GEfHdU/gYkDx6lYAw29VLBUF8zL2gGlMzDguh++nbyw=
Subject key identifier:   64:E8:D4:EE:7F:9D:4C:34:2D:9D:C6:53:04:E5:F7:3B:E7:8C:95:CE
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer:       /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial:       019369DB198EFA32661EB8F661F8E948007D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number:          103C
Signing time:             Tue 26 Nov 2024 19:03:06 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:06 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:06 +0000
Files and hashes:         1: CW3mAtCqWgPxWS6h_zTVIzCAywQ.roa (hash: aBtJw68+DNe0dFUq1RVDKhKq6rWanQqzQbfRS0IdVM0=)
                          2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: I9QJyQaxYZ+njJz5TKpMeWIo1RdiCS/XiWnun3KJxug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:19:8e:fa:32:66:1e:b8:f6:61:f8:e9:48:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
        Validity
            Not Before: Nov 26 19:03:06 2024 GMT
            Not After : Nov 27 19:03:06 2024 GMT
        Subject: CN=64e8d4ee7f9d4c342d9dc65304e5f73be78c95ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:e3:99:4a:55:1c:91:9f:6d:56:f1:d7:af:
                    3d:aa:97:d9:f9:5f:41:e8:fd:87:91:a1:10:21:26:
                    5b:1a:62:9a:f9:84:83:10:8b:fe:65:27:76:69:0d:
                    1a:14:d7:36:f7:72:44:f8:13:86:26:6b:89:b2:2b:
                    0e:19:7f:00:a8:41:2a:1b:5c:47:a7:32:96:8e:31:
                    ab:4a:88:4d:0d:91:05:ba:e8:21:97:27:25:6a:d9:
                    67:d6:68:15:c1:a4:d9:20:99:36:66:b5:29:20:e7:
                    fa:6e:83:39:18:83:1d:49:2b:a6:a0:d2:86:68:cc:
                    70:84:56:d5:f0:26:4f:83:2e:d3:27:c9:f4:72:6f:
                    89:b9:ce:72:4d:ba:37:93:5d:ad:1e:c3:22:23:7c:
                    a2:b7:62:4f:e8:5a:6b:23:0e:d0:74:a4:20:35:97:
                    38:c8:09:c5:4f:18:c3:90:15:d8:fb:f8:38:ca:28:
                    6d:13:73:74:02:4c:94:73:30:b4:25:e6:a7:97:da:
                    b0:2a:68:9b:86:d5:e7:0b:7f:e3:30:2e:0b:a9:5d:
                    31:57:05:79:67:17:c3:f7:3e:29:24:4d:5a:94:fb:
                    13:9f:80:89:d5:d1:f3:f9:af:3e:9d:3c:7d:27:f4:
                    10:2f:81:47:25:86:5c:bf:e2:a1:c0:08:f4:c9:9f:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E8:D4:EE:7F:9D:4C:34:2D:9D:C6:53:04:E5:F7:3B:E7:8C:95:CE
            X509v3 Authority Key Identifier:
                keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:fe:fb:49:4c:fb:28:be:31:02:65:0d:37:a1:15:8c:16:
         2e:a1:b5:3e:2d:de:e9:ed:20:c4:31:e3:a9:c1:e7:60:8d:9b:
         b3:c2:87:2c:bb:40:c7:dc:23:0a:67:df:ae:bd:2b:21:af:36:
         c8:8d:73:94:68:1b:49:e5:2f:25:ed:5d:3d:df:92:92:bf:f2:
         6f:06:a8:db:4d:cc:54:ff:23:9b:3c:c3:b3:4a:fe:17:aa:e5:
         15:e6:57:72:18:d6:5b:52:e5:4c:9d:d7:9b:15:83:23:d9:4a:
         8c:d8:3f:73:08:a6:09:83:83:c2:9b:d1:33:cc:9f:84:83:9b:
         19:0d:68:b1:bc:53:cb:a3:82:ee:e4:87:79:1c:1a:0d:be:90:
         2e:06:22:c4:71:9a:fc:ac:b2:1e:96:d6:05:f9:fe:9c:75:c1:
         d3:e6:c7:e0:3f:c0:e0:e0:92:85:f0:6e:33:e1:93:88:d4:cd:
         6f:ee:b8:73:9e:fb:75:36:67:bd:c9:db:bc:fa:ce:e0:db:7a:
         17:a3:88:f1:ff:22:0e:9e:46:5f:8f:36:a8:53:e9:18:58:ec:
         d0:91:88:01:14:39:58:9a:b5:9e:0d:ad:79:b1:5b:c8:35:56:
         6f:8c:06:30:6a:b8:95:e4:1a:2d:68:c5:c2:a6:ed:44:3b:18:
         07:b2:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:39 2024 by rpki-client on console-ams.rpki-client.org