Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File:                     oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier:          ukDdAspSshDQX05oq7LjffE2Nk1VBR5dzxWCGYNekjg=
Subject key identifier:   3D:C0:D4:A5:27:66:8C:92:11:EF:88:89:33:B4:16:45:AC:4D:4A:C6
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer:       /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial:       0193907A489E62F60F18E70FCE817D57A12D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number:          0DCB
Signing time:             Wed 04 Dec 2024 07:02:33 +0000
Manifest this update:     Wed 04 Dec 2024 07:02:33 +0000
Manifest next update:     Thu 05 Dec 2024 07:02:33 +0000
Files and hashes:         1: 1V5MqI2z_WHuuWfvH5c83aUKzYM.roa (hash: A1Q2+Rr6q1G5xVh8ZsgvdOgPG1VOr1CaRpQo6FrTGBQ=)
                          2: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: XcN/dozc8YzjTQg809wdZn2laEJE6b4tWLLdVsggsmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Dec 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:90:7a:48:9e:62:f6:0f:18:e7:0f:ce:81:7d:57:a1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
        Validity
            Not Before: Dec  4 07:02:33 2024 GMT
            Not After : Dec  5 07:02:33 2024 GMT
        Subject: CN=3dc0d4a527668c9211ef888933b41645ac4d4ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:7d:aa:40:25:3e:8c:02:b0:ff:65:b1:03:
                    93:fd:27:01:e3:da:06:c8:53:ad:43:e3:24:2d:48:
                    d5:46:c2:f1:92:44:06:cc:67:df:bc:fd:1f:d7:b7:
                    06:84:d8:7e:1b:bd:4a:e3:e2:f7:11:54:88:0d:6f:
                    9f:a2:ff:e9:5d:2f:06:33:04:fa:73:2a:36:f6:3e:
                    f3:75:f5:26:cb:c2:ab:12:f0:46:77:53:ff:ee:91:
                    7f:a2:31:fe:e3:b9:b0:ab:ff:08:5d:dd:69:9e:09:
                    10:11:8b:ba:94:41:a3:28:fd:ea:74:19:31:52:c6:
                    c4:ee:1d:e8:77:fa:9c:db:1f:52:16:1d:1b:3a:ac:
                    18:7d:6e:23:d2:c6:95:46:38:aa:a8:b0:b4:aa:2d:
                    da:f4:8c:b1:55:68:64:f3:26:7f:16:19:db:b7:f0:
                    c4:f5:f8:51:51:f2:a7:40:40:22:59:2c:b7:e3:e7:
                    05:99:a5:f1:67:47:1a:c9:d1:7f:73:4c:58:07:54:
                    35:04:0b:a2:5c:ac:d5:c2:43:dd:d5:fc:25:80:f7:
                    7b:67:b5:d4:4a:06:8e:b4:a3:aa:bb:90:83:35:6f:
                    36:4f:ed:ab:4c:b4:13:f7:c4:14:54:d2:91:68:04:
                    42:d4:7d:97:5b:62:fa:76:c5:14:13:04:10:ec:bd:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C0:D4:A5:27:66:8C:92:11:EF:88:89:33:B4:16:45:AC:4D:4A:C6
            X509v3 Authority Key Identifier:
                keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:9d:ab:d0:a9:97:2a:f0:eb:6e:b8:3a:42:12:48:ff:96:
         f1:61:63:01:2c:df:f8:99:90:3b:73:80:8a:b5:85:7a:53:ac:
         b0:8b:44:4d:3c:e7:0a:cc:32:a5:b5:8d:b3:e4:c0:28:48:e4:
         87:a4:13:45:82:6d:9e:6f:59:f6:9a:22:2f:d8:55:ad:27:b3:
         a8:ac:33:b9:09:2b:da:18:13:2d:9a:74:e9:cd:49:21:97:ed:
         60:e2:2d:27:14:c8:38:c9:0e:c0:2c:52:c8:20:28:10:25:ea:
         5c:55:14:9f:6f:f0:cf:40:46:b5:30:af:5e:ad:e2:2a:a1:f8:
         a3:1d:63:29:1a:bb:f0:cc:60:1d:35:48:c5:e5:21:29:04:ad:
         d0:56:de:d9:0f:ba:ab:bc:c8:58:21:56:db:47:39:51:1e:20:
         8c:31:46:c1:1c:f5:ae:55:a0:4c:40:fb:1b:3e:e1:2d:e6:ba:
         9c:ca:00:fe:3c:57:a5:43:f0:0b:50:0f:69:e3:8f:1b:5f:2c:
         8f:be:96:f9:fe:07:d6:92:0c:c8:fa:0b:c2:c4:1a:10:65:3e:
         06:06:da:5f:6e:b9:74:eb:49:7f:ca:25:0f:b8:72:e3:53:49:
         c8:bf:f3:7c:45:2f:1c:6a:f6:51:7f:60:67:77:64:4a:38:66:
         33:b0:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 08:52:22 2024 by rpki-client on console-ams.rpki-client.org