Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File:                     k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier:          9gPNSKjA1ZnyYiQLP9k0IJ3Bwt+2hvEqdzD9UX6Fl9M=
Subject key identifier:   07:33:A7:A5:A5:D6:15:6F:01:45:B5:7C:F0:8B:6A:D6:4A:54:8D:BF
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer:       /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial:       01936B8FE9CEB493F0B75BB184FA19A7FC7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number:          02D5
Signing time:             Wed 27 Nov 2024 03:00:13 +0000
Manifest this update:     Wed 27 Nov 2024 03:00:13 +0000
Manifest next update:     Thu 28 Nov 2024 03:00:13 +0000
Files and hashes:         1: TEBOq2yrat16KeumYHlN_PcvXlw.roa (hash: CK/xO64lWItS889szdJYXDvcMKdnS003sPYQI4005dI=)
                          2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: RRXHdeFc6xwjl/UMmCE+Y47wbIDff91YNdd4d6Od5L0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:8f:e9:ce:b4:93:f0:b7:5b:b1:84:fa:19:a7:fc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
        Validity
            Not Before: Nov 27 03:00:13 2024 GMT
            Not After : Nov 28 03:00:13 2024 GMT
        Subject: CN=0733a7a5a5d6156f0145b57cf08b6ad64a548dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:1e:77:09:f4:49:82:42:5b:18:0c:33:6e:
                    a8:70:7d:5c:dc:c3:60:00:34:72:a3:db:f8:07:75:
                    56:18:b9:e9:87:90:ee:b1:bc:4c:f8:10:1b:85:74:
                    97:05:71:a4:1f:fa:56:32:d8:98:51:71:61:62:3e:
                    56:01:55:00:88:6e:e8:f1:38:f7:0c:98:0b:19:2e:
                    19:40:9b:b0:08:c8:0b:29:9b:26:91:d1:5d:94:41:
                    ef:7f:ed:cc:5d:6c:1c:ed:ec:b6:35:04:10:28:06:
                    8b:4f:df:79:eb:0a:a1:11:27:fd:ec:96:d0:60:eb:
                    cf:61:ae:e6:df:ce:27:a2:16:55:b3:08:9e:93:fd:
                    d2:96:bc:10:ee:63:c1:3b:3e:4e:e1:ff:f9:5e:1e:
                    d4:3e:69:61:a9:18:0d:10:49:42:3a:6b:91:a8:b5:
                    f9:9e:ef:0e:7f:1d:55:8d:93:97:85:33:59:fc:34:
                    88:04:60:76:76:84:6f:e7:24:0f:45:1e:fb:58:3d:
                    21:dd:7e:73:12:22:18:e9:b0:83:b1:3d:1e:06:a6:
                    68:13:26:47:b7:2a:ec:cf:c3:7f:3f:60:17:90:fd:
                    f1:67:f0:b3:24:50:b5:b6:03:a5:4f:f7:70:a5:b3:
                    2a:4e:e7:71:db:b5:a8:a4:3d:fe:ed:7e:34:26:79:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:33:A7:A5:A5:D6:15:6F:01:45:B5:7C:F0:8B:6A:D6:4A:54:8D:BF
            X509v3 Authority Key Identifier:
                keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:2e:4a:a3:f0:8a:a1:63:54:fe:10:83:2b:c6:c1:41:0e:
         d7:6d:74:fa:ab:40:7c:4e:ea:2f:6c:68:56:89:c2:9a:83:ed:
         32:5b:8d:6c:71:eb:4c:12:31:f0:24:d4:60:d9:7b:0f:18:08:
         47:09:43:68:44:b2:8d:8b:4b:bd:f2:ea:1c:1d:6b:37:ff:71:
         32:2c:13:bd:44:54:dd:c0:30:20:59:20:e1:9e:f6:28:e0:1e:
         a7:58:82:6b:ca:1a:59:5f:7e:72:15:01:48:09:58:28:bc:c9:
         67:b7:6f:6f:19:a0:57:0d:8f:1f:a9:d7:2d:d7:08:f5:9d:ed:
         1c:a9:23:68:af:62:44:5d:29:fa:2a:f6:30:79:78:ee:19:a8:
         db:87:9c:c2:07:b4:da:37:a0:d0:9c:c9:42:eb:78:d6:ac:37:
         89:db:16:9f:41:3c:d3:06:1f:c7:a9:4e:92:3e:e7:e2:a7:aa:
         fd:47:85:f4:3f:ed:5f:8b:92:4c:de:d3:75:58:11:2d:11:3a:
         24:53:55:d5:99:a4:8c:9e:55:b6:f5:8b:ee:74:fc:29:4a:5f:
         a4:14:71:3f:0f:16:98:2f:0a:42:f1:5d:c0:f3:55:d4:15:18:
         e3:c3:fc:47:66:f6:76:39:a9:48:24:84:3f:ac:64:b8:88:d3:
         d1:dd:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:16:44 2024 by rpki-client on console-ams.rpki-client.org