Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File:                     ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier:          F9Rsts5IrCyA/Qzx6EDERDMuMQ3QjnpNAc3n/HnWmtg=
Subject key identifier:   B9:85:6A:B2:91:33:33:FD:07:EF:6B:17:2D:43:99:D4:0E:50:C9:FC
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer:       /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial:       0193549B2B14ABDFF58B2CBF66BE6BE8532D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 16:01:15 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:15 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:15 +0000
Files and hashes:         1: ojRQ_38REcpiLZpWwcLOuAfD-P8.roa (hash: Dag9PY3a87tdhINSOfkBZLOq2Tr1p2aYuCS8a18q3Rs=)
                          2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: dawFBkfFFnHK7h5U95spkyPM9xXM4TCJSlfNB7dn6Yg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:2b:14:ab:df:f5:8b:2c:bf:66:be:6b:e8:53:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
        Validity
            Not Before: Nov 22 16:01:15 2024 GMT
            Not After : Nov 23 16:01:15 2024 GMT
        Subject: CN=b9856ab2913333fd07ef6b172d4399d40e50c9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:7d:9f:f1:90:ca:64:cf:c7:66:7f:b4:88:
                    1a:17:74:1b:2c:67:98:cc:a1:5b:90:4f:c7:d6:ae:
                    4e:4c:cd:2c:df:28:a0:27:b8:d6:02:90:60:ae:e9:
                    4d:c0:74:a6:e5:0c:36:ac:ce:53:80:59:68:63:0f:
                    ff:11:33:51:2b:6d:b2:66:b4:fc:2d:2e:4d:27:2d:
                    46:f5:d7:36:b1:ef:43:b0:c7:96:53:09:04:aa:b7:
                    ac:f7:8d:55:ad:63:d2:33:e2:e4:20:ee:2c:ef:00:
                    62:91:2b:5b:c8:69:dd:0e:f8:52:fd:93:07:d5:49:
                    32:51:30:25:60:9a:80:0c:ee:23:aa:e1:05:76:67:
                    ac:01:e1:c4:05:c4:07:5c:eb:16:70:4d:e8:f8:33:
                    90:02:87:e1:31:13:88:8a:b6:15:a9:ed:de:d2:b4:
                    98:77:68:d9:85:b0:fd:f1:92:8f:54:b9:84:be:19:
                    dd:eb:86:9e:b1:12:4c:0c:88:d5:85:7d:f0:8c:1a:
                    56:df:ed:91:6b:65:e5:50:36:7a:7f:f4:ca:23:55:
                    f8:0a:6f:4c:82:57:e1:a4:1f:41:88:66:c7:d1:b1:
                    44:56:d3:bd:5c:b2:ad:ff:05:60:f3:52:2d:de:ad:
                    6c:a2:23:91:11:a3:62:f7:7d:7c:38:d3:aa:ce:1d:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:6A:B2:91:33:33:FD:07:EF:6B:17:2D:43:99:D4:0E:50:C9:FC
            X509v3 Authority Key Identifier:
                keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:f8:9a:24:27:bb:a1:5f:c2:76:6b:9b:ba:10:c3:d3:36:
         ff:03:bd:b3:ba:b6:5a:5d:3f:99:07:a8:b8:64:02:1c:24:41:
         1b:4a:6d:59:ee:62:b7:90:60:3f:94:b7:8a:34:0f:70:f1:36:
         c5:54:64:6d:75:a1:88:75:77:14:09:29:c9:fd:08:4d:3b:32:
         3c:44:c6:f2:88:1e:4d:e5:cb:75:35:c2:bb:28:67:5e:a2:4c:
         12:6a:48:1b:f6:17:a0:d6:65:44:f6:bd:ae:41:27:32:f4:82:
         9a:e0:eb:27:cf:cb:e5:e7:9d:2d:c4:69:cb:ae:e0:90:f5:62:
         f2:8d:ba:b1:52:0c:02:1d:ba:8a:2d:60:ae:74:d6:05:3d:4a:
         2b:30:60:8a:9c:25:8b:01:bb:3e:df:d6:ab:cb:5f:bb:55:6c:
         79:61:67:1e:11:99:b3:93:35:02:49:3e:41:fa:e9:42:e9:ce:
         40:80:16:b4:dc:33:2b:84:91:6a:38:79:a0:b5:21:4b:72:a6:
         1d:bc:40:48:f0:bd:ff:21:e8:8f:58:44:8a:af:74:8b:7c:bb:
         2f:83:3d:ef:ec:18:8f:28:0c:84:ce:93:c0:11:37:84:5c:40:
         87:a1:a2:6d:4f:0d:dc:91:4f:8c:7c:d1:8a:18:07:02:4f:1a:
         88:d6:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:17 2024 by rpki-client on console-fra.rpki-client.org