Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File:                     opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier:          kNoisvtxyHlnWgCzr8KErxAWmRi4J15kPtuZcLKs9yo=
Subject key identifier:   7F:24:0E:98:ED:2E:BB:AA:4B:9F:B0:5F:F9:83:C4:0A:8D:C3:AC:1B
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer:       /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial:       0193553F8E9F712F55279A4302C11E9EDC35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 19:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:48 +0000
Files and hashes:         1: YRHPXYS0ohCmsejB9ndck-2LSmc.roa (hash: mBqwPWHHmrHhUo8UcoaOLcrxysMWXRMY3w+iiR+UePM=)
                          2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: j/tKU0FYVvYQfSQ9hhma1nASprQghV2zqC0NefFehN8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:8e:9f:71:2f:55:27:9a:43:02:c1:1e:9e:dc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
        Validity
            Not Before: Nov 22 19:00:48 2024 GMT
            Not After : Nov 23 19:00:48 2024 GMT
        Subject: CN=7f240e98ed2ebbaa4b9fb05ff983c40a8dc3ac1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:bd:7b:fb:7f:be:52:d9:66:6c:d1:5a:7d:
                    74:53:04:ff:1a:23:18:fa:ce:0c:48:a3:57:dd:58:
                    81:de:55:f6:b4:37:f7:75:1a:72:94:a0:48:80:e1:
                    bb:72:d3:92:aa:0b:96:68:0c:98:90:3a:87:10:a8:
                    ef:94:40:1c:ac:7c:18:96:65:6c:44:74:f9:45:16:
                    58:b1:28:4c:1a:16:85:fa:12:5f:fa:8f:dd:47:2d:
                    67:18:fc:24:e3:96:2d:b2:9a:85:b3:2c:71:3e:69:
                    52:eb:96:8a:7f:12:a4:a6:75:a4:10:5e:8b:92:2d:
                    d9:e8:e9:43:1a:56:ef:8c:93:61:d4:62:30:3e:14:
                    7e:e6:85:ec:bd:ce:65:db:68:a2:d9:61:e1:a4:0b:
                    a5:64:af:67:de:32:d6:4d:63:ac:6c:e0:58:33:5a:
                    b8:9e:4d:16:a8:55:8e:5d:f5:6f:33:df:41:5f:7b:
                    96:94:0d:d2:4b:45:1b:a7:e0:11:e0:d8:7c:27:7f:
                    95:c4:c3:0d:0e:14:fa:67:64:ba:7e:0f:de:21:ee:
                    2a:d4:28:7f:5e:40:ba:5f:64:5c:d7:24:1b:36:f9:
                    05:60:5e:97:b3:52:74:f8:0e:2e:74:6f:08:d0:09:
                    26:25:b2:a9:c9:7f:09:f2:65:6a:05:46:85:bc:02:
                    a8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:24:0E:98:ED:2E:BB:AA:4B:9F:B0:5F:F9:83:C4:0A:8D:C3:AC:1B
            X509v3 Authority Key Identifier:
                keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:7f:6a:48:3d:fe:7c:f0:3a:25:e0:4a:4d:83:7e:43:95:
         26:a9:ec:f7:d2:de:ff:bd:84:8b:3d:66:2b:1e:5d:57:7d:14:
         37:df:e2:67:e1:f5:2a:f9:62:44:22:02:bc:9f:8a:26:44:ab:
         3d:8f:e4:46:ce:54:a8:14:1c:31:ec:58:e0:fb:59:09:07:7c:
         53:e6:97:4c:fe:9f:ac:0b:f7:43:69:cb:9a:f9:b4:77:0f:66:
         60:ab:24:55:5e:8f:cc:b0:0f:23:57:25:07:e8:7f:da:4d:9e:
         11:dc:19:11:66:0f:4e:02:82:2d:49:6d:79:eb:c4:64:d7:b8:
         e8:0a:75:5d:cd:4a:5d:29:02:51:57:54:f7:61:f4:b0:a2:d2:
         6b:f1:3a:7e:b1:a2:23:54:2b:4d:40:9a:2f:f6:2f:fd:6c:a7:
         aa:f7:d2:df:99:70:f8:6d:3c:4b:19:fa:c4:f6:39:cf:93:90:
         cf:83:f0:73:ee:9f:7b:9a:c3:81:97:0d:cb:6f:2a:0e:83:dc:
         02:8c:5f:fe:31:45:8a:e8:cd:23:73:80:2d:f8:bb:a8:2a:d1:
         79:c0:86:3d:bf:9f:98:c2:09:60:78:38:b4:d5:0d:6b:7c:4a:
         73:b3:f9:a2:d2:7f:8b:fe:55:22:2b:74:2b:4c:a6:3b:06:8a:
         75:f3:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:25 2024 by rpki-client on console-ams.rpki-client.org