Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File:                     Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier:          Fd71sqwMtpG60ukLweVSoNphVo1GfgxEiRBQRT+E6EA=
Subject key identifier:   CE:E9:16:20:03:49:37:EA:59:62:E1:E1:F1:38:27:50:0B:34:5C:70
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer:       /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial:       0193568AC33737232549801E3E7F651C5E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:02:34 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:34 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:34 +0000
Files and hashes:         1: 6ByreJ6GGmC0Ls5ZQcn1r5njo7U.roa (hash: omPHG08DNmaJPCkFyAYjR5zRmKX5VMPdq7pjTHb8chA=)
                          2: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: pB6IrqTpKDt4o4jY1wEScpcmUJNl4JjDwTJPIE4HGzo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:c3:37:37:23:25:49:80:1e:3e:7f:65:1c:5e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
        Validity
            Not Before: Nov 23 01:02:34 2024 GMT
            Not After : Nov 24 01:02:34 2024 GMT
        Subject: CN=cee91620034937ea5962e1e1f13827500b345c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:39:92:89:21:f2:da:c8:33:2b:97:43:06:
                    98:ec:0f:00:9b:4e:f6:15:3b:f1:21:15:36:c5:31:
                    af:00:e8:4b:4c:75:bd:ab:34:d3:1f:d8:ea:c9:d1:
                    5c:13:61:a3:bc:05:5f:89:bb:0a:94:8e:cc:6d:65:
                    b8:35:ee:4a:2a:f1:7c:d8:6d:87:82:a9:e5:9d:0a:
                    f6:a8:07:7d:ed:35:99:bf:14:b2:48:c8:8b:da:3b:
                    ab:e6:ab:2b:70:05:8f:43:a2:6b:bb:63:ca:46:2e:
                    fa:76:2a:94:d7:e6:ae:7e:66:8f:f0:0b:c8:18:d6:
                    cc:5d:2e:4f:78:42:a2:c0:e3:1e:0d:ce:79:ff:66:
                    67:36:4b:2b:53:da:64:72:a6:6d:e3:e0:92:80:84:
                    89:fa:1b:13:2b:92:b6:39:91:d8:66:be:a6:e1:be:
                    2c:ef:ca:29:36:9a:95:62:1d:5e:f6:69:81:89:e1:
                    9e:f4:0a:6b:09:db:32:9f:eb:0c:a6:88:64:ac:d5:
                    c2:2d:bf:e2:1d:a0:7b:a1:7c:8a:f9:57:9c:16:7c:
                    8c:45:f2:01:4d:16:2c:67:0c:a8:6d:e5:b2:a2:e8:
                    a5:66:91:45:d9:e3:c1:8a:b8:95:ad:dc:64:51:e3:
                    ff:16:b4:0c:3f:63:f4:2c:7b:de:74:f8:0d:14:ad:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E9:16:20:03:49:37:EA:59:62:E1:E1:F1:38:27:50:0B:34:5C:70
            X509v3 Authority Key Identifier:
                keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:66:4d:5f:eb:2d:b4:b0:d1:80:e0:c0:c0:bf:7b:f3:a4:
         36:cd:1b:e1:19:9e:4b:10:83:58:c8:65:25:77:da:3d:33:dd:
         8b:e2:53:36:0d:c5:60:5d:d0:33:10:32:3f:ac:16:df:e1:4f:
         d2:f2:7e:ff:88:c1:1c:57:4b:d3:7f:71:bb:bc:f3:25:ac:90:
         76:2e:4f:62:30:40:c2:f5:ef:c7:e7:55:60:97:d7:f4:43:65:
         80:66:bb:28:7d:df:97:4f:fd:00:ad:e7:88:2c:7c:18:90:da:
         ac:6f:15:ff:6b:4f:26:ad:88:c0:fc:eb:d9:41:3f:9b:35:c3:
         df:ac:d3:7a:b4:c7:e6:03:88:03:2c:53:0b:c3:95:78:38:0a:
         b1:6c:e5:66:0e:ed:0f:49:82:48:41:38:e6:97:e8:14:1c:ec:
         44:8c:09:b8:a8:5b:32:79:04:8d:e2:1f:2c:3f:7e:96:81:18:
         c1:fe:13:f5:9d:14:12:6e:87:0e:fc:d6:ee:f2:d3:97:fa:bb:
         ea:ff:91:4f:81:9c:74:b9:44:7b:af:68:d2:f3:b3:e2:21:15:
         78:42:3d:23:b0:71:5a:92:5e:2e:d5:95:74:ec:d7:66:0c:32:
         87:63:7f:92:f3:de:e4:9f:d6:43:34:fa:fc:aa:d0:2c:62:d7:
         8e:e5:75:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:18 2024 by rpki-client on console-fra.rpki-client.org