Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File:                     f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier:          F5FXT8Zp/Ryqphjfka6LObzBbrovhtTqr20n6uIVYWw=
Subject key identifier:   4C:99:50:2C:47:55:88:79:77:22:A3:CA:5D:B5:72:3E:17:16:45:F2
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer:       /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial:       0193636896E3D4DB6D93B66AD17FB8066F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number:          0C24
Signing time:             Mon 25 Nov 2024 13:00:18 +0000
Manifest this update:     Mon 25 Nov 2024 13:00:18 +0000
Manifest next update:     Tue 26 Nov 2024 13:00:18 +0000
Files and hashes:         1: WxlDWzOy4Fv4iKcjVJUKNbFCXDU.roa (hash: 3536b2nemRCGC9lKmJOL46IS+goTdyKnxVd8h8e27ic=)
                          2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: x+/jsQg3qkWXkzShW/Bq4Ov0+94R5/OqQ4wTXrJfIfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:68:96:e3:d4:db:6d:93:b6:6a:d1:7f:b8:06:6f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
        Validity
            Not Before: Nov 25 13:00:18 2024 GMT
            Not After : Nov 26 13:00:18 2024 GMT
        Subject: CN=4c99502c475588797722a3ca5db5723e171645f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:47:c8:f4:00:6b:90:d1:c8:2e:ec:e4:b5:
                    e2:d8:99:b0:d9:4b:09:3d:c0:ea:e4:82:45:28:06:
                    bb:73:3c:b5:56:23:b0:2d:aa:36:52:0b:4a:c7:e8:
                    62:6d:57:58:73:42:f7:09:e3:6c:e9:31:a9:48:18:
                    7c:25:63:af:93:39:70:ef:47:60:ec:d8:e6:4d:d9:
                    a5:41:7b:19:99:ba:8a:c1:6a:00:48:f8:20:ca:bc:
                    e8:20:45:99:8d:cb:75:f7:09:4b:d4:70:3d:7b:e4:
                    ab:71:f6:33:a9:18:15:13:a4:7f:71:b8:ea:86:d3:
                    73:32:62:7e:52:ac:f4:84:8d:7d:aa:97:4a:92:d1:
                    55:7e:50:0b:4a:6d:b5:9c:29:ec:fa:de:89:c9:86:
                    cc:ec:fa:8d:c8:b4:c4:7f:02:38:c7:c5:26:07:7e:
                    ad:2c:d8:ac:2b:4c:44:8e:12:0d:ec:08:18:57:95:
                    c5:c4:74:03:83:37:b0:a1:69:79:0f:fa:51:01:c1:
                    9d:d9:50:21:4c:63:4f:5b:c9:7a:f0:1e:07:2e:91:
                    33:ff:a7:b0:49:b4:47:be:b4:8b:cd:92:c5:e5:44:
                    15:29:5e:90:af:64:b6:6d:99:d4:6c:e7:93:7f:f4:
                    bc:0b:2c:1e:4f:ab:c8:5a:1a:df:38:09:a3:68:c5:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:99:50:2C:47:55:88:79:77:22:A3:CA:5D:B5:72:3E:17:16:45:F2
            X509v3 Authority Key Identifier:
                keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3b:5d:f5:71:f4:c7:13:f7:a3:8c:c3:39:86:46:90:1b:1a:
         97:51:57:da:49:97:79:86:76:16:48:ad:12:02:8f:9e:58:4b:
         14:ee:7c:ac:25:48:3d:87:e6:38:24:de:a5:6d:ee:0d:b3:b9:
         62:97:e4:4e:ff:43:48:5e:b7:7b:d6:1c:9c:cf:ce:ae:e0:b4:
         0c:fa:5f:7b:c7:fb:bb:6c:87:5b:09:44:ea:9f:74:3a:1b:6c:
         ee:33:7e:dd:42:aa:76:a5:57:da:03:ca:06:0a:8c:ce:86:4a:
         3a:fa:d9:ab:16:83:a0:0d:61:5f:40:92:71:53:dc:56:23:4b:
         9c:7a:08:c2:76:d7:9e:96:68:c4:c0:99:65:c4:ca:d5:a4:84:
         2e:35:05:fa:d3:07:6d:c9:a0:e1:73:51:b2:33:03:ae:c4:30:
         16:9b:df:15:e3:b0:c7:9d:63:bd:8b:40:56:87:38:75:56:cd:
         71:c9:3f:90:3d:3d:f5:92:c7:a4:ad:01:e3:65:a5:1c:cb:5f:
         2f:1e:47:84:49:a0:84:3e:df:55:cd:dc:ef:e1:b6:e5:c0:9d:
         17:8f:31:df:6b:8f:e4:28:7b:c3:0f:bb:9e:c1:20:9f:dd:2d:
         24:7f:04:dc:27:a1:89:98:99:9e:d1:e4:c7:f5:a4:dd:fd:c4:
         dc:83:d6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:33:24 2024 by rpki-client on console-fra.rpki-client.org