Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File:                     dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier:          84nK924TmHcCU99ej4+UTJFXL6GAU9hglFMrijIrDsU=
Subject key identifier:   F4:7B:6B:A1:7D:AC:83:9D:C0:AC:45:F2:55:7B:26:20:61:EA:F4:4E
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer:       /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial:       019368FD1B812D1B41732E7AB617A6D45193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number:          0AD6
Signing time:             Tue 26 Nov 2024 15:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:38 +0000
Files and hashes:         1: 5VU2CxoVEUF2umPI3eKHndRqMQE.roa (hash: TChhPObs8u4ffzZJwUfFdf2uTMtVDaN9e2nhPvpvmrY=)
                          2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: Zs+eVpbc79FX9c4ZC+OatAUxfe+xAlGQmUJPqZAYG9A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fd:1b:81:2d:1b:41:73:2e:7a:b6:17:a6:d4:51:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
        Validity
            Not Before: Nov 26 15:00:38 2024 GMT
            Not After : Nov 27 15:00:38 2024 GMT
        Subject: CN=f47b6ba17dac839dc0ac45f2557b262061eaf44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:fa:36:11:6c:26:c8:f0:4b:e2:b7:e3:b6:
                    ae:a6:a8:2a:99:0a:c8:65:36:79:c1:52:16:22:78:
                    d8:2c:20:91:06:85:ab:1c:bb:d6:63:1e:13:bf:9d:
                    ac:d1:93:aa:7c:7f:c1:cb:d3:71:2e:b1:76:b9:fe:
                    04:5a:62:8a:cd:99:2b:ad:12:59:ae:65:c7:29:b8:
                    9c:3e:72:8b:13:fe:c9:03:4a:d2:48:69:38:a3:45:
                    07:10:12:0a:7d:fe:c5:92:64:42:eb:e5:94:c1:47:
                    6a:db:1d:2d:31:26:0a:22:11:98:c4:14:12:93:5f:
                    04:ea:b6:51:da:0e:64:1d:87:0f:53:8b:2a:d3:25:
                    0c:1b:cf:45:a7:df:ce:8b:bb:bd:79:fe:0f:1f:2f:
                    18:8f:37:ba:0c:86:44:2f:e7:c4:b6:0e:4e:13:f1:
                    84:fc:1a:3b:bc:cf:ee:a1:24:64:aa:84:0a:7e:2b:
                    f6:4c:16:69:a8:57:a2:9f:15:57:e8:e3:0e:9d:c3:
                    47:82:c7:35:b1:32:6c:20:30:0c:5d:af:c0:3b:99:
                    a6:6d:12:a7:ac:77:a9:7f:31:99:81:fd:df:3e:30:
                    61:a6:b3:e3:30:25:44:3c:41:84:e8:01:c3:07:64:
                    ba:2d:de:f9:93:1f:4b:60:6c:33:4c:fe:11:e9:2e:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7B:6B:A1:7D:AC:83:9D:C0:AC:45:F2:55:7B:26:20:61:EA:F4:4E
            X509v3 Authority Key Identifier:
                keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:f1:64:43:80:8d:48:0c:d0:f9:69:fd:93:f2:03:a6:97:
         53:ef:f3:61:b6:9e:12:42:9c:3a:bc:6c:5c:0d:36:b2:66:f4:
         1a:fb:ef:48:01:5b:9a:b0:95:56:25:96:86:ed:ae:e6:24:fc:
         f6:95:d8:e2:d4:37:26:9c:10:43:bd:bc:29:5d:f6:24:66:8b:
         cd:de:84:8a:f2:e6:42:d4:c1:0d:c6:19:1b:7d:10:18:1b:51:
         06:84:a4:df:c6:a4:cb:93:ed:04:58:23:07:40:bd:ec:e9:50:
         30:4d:22:bc:19:18:22:0c:f1:c6:1c:05:8c:4c:51:2a:2c:18:
         c6:2e:0d:cb:42:34:ee:1c:8d:c1:8e:27:7b:86:63:12:b8:c0:
         2c:08:22:75:36:d6:f6:f1:0d:51:0f:2d:dc:9e:ff:23:a9:1d:
         85:ca:e1:f3:21:db:a6:87:14:f8:ed:f7:f4:c3:42:b9:d2:b0:
         1c:12:3b:cb:a4:99:fc:85:01:84:29:38:14:58:57:c3:8c:4d:
         24:f2:d9:82:db:1c:4c:60:a6:29:3c:26:90:a1:e4:f3:b5:f2:
         dd:69:f0:1e:9a:2d:da:34:b5:73:88:a9:d7:21:e7:ce:eb:13:
         cb:91:26:3f:cd:18:2f:ae:fd:45:60:41:aa:14:86:df:f4:9e:
         70:95:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:51 2024 by rpki-client on console-fra.rpki-client.org