Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File:                     ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier:          1Ux/Gy6MwZhBGMp6S+SPF5qfNAzjXAFKDrRlu0Mqtw0=
Subject key identifier:   ED:78:FB:CB:6A:59:A4:61:AE:43:89:7C:1C:4A:4B:99:CF:D8:C8:9C
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       019352751A26F3A57B4958CBC99AAE92F064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number:          13B0
Signing time:             Fri 22 Nov 2024 06:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:26 +0000
Files and hashes:         1: 3Wf3I_pU6HZyRjBsJBWgiNFRb9Q.roa (hash: du+qXsnDHO9OA6/z7xkneHTT9S/L03QyjAElnK59fUE=)
                          2: 4EpMWM0gpT8j5snm8tf30ydQcDo.roa (hash: T+IdXISkQTiU3K/87UJr7aEH+r6hPzyJOk1t0xh8uaU=)
                          3: 9oo_4Gw7mdRmW5Xf9uhOgupAdA0.roa (hash: 9P7NF0IjRAqOJrLhSM0MTLBN4ypiRw7Ae6rvJF/SkxQ=)
                          4: ec5HgUrljEO5QQeLi03VsLNqhIM.roa (hash: gFOEj/rpeGVx+Uz8ZnqtPkn3ApY70iUduuvGPzJqoSQ=)
                          5: gHopFDwH9_KCufCcSXHdJ_Rdz9g.roa (hash: e86b+H0Nq+5wDx0btLrAf9x5FNpPCmr69ciaUDFK/zQ=)
                          6: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: zbhvsUoXs+zV4Qy1IpDYUHRwQ0eTbAnG8DhZoted7n4=)
                          7: tuRQnrpa5QoCOVe8aeFEO_84Cjo.roa (hash: 5TAk9t/pZ66IEIIfIZiM6SH/Qs8Vf++QlnPoXTpcH/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:1a:26:f3:a5:7b:49:58:cb:c9:9a:ae:92:f0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Nov 22 06:00:26 2024 GMT
            Not After : Nov 23 06:00:26 2024 GMT
        Subject: CN=ed78fbcb6a59a461ae43897c1c4a4b99cfd8c89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:1e:53:2e:f7:85:25:39:34:42:62:0d:d9:
                    3a:db:94:de:43:a8:3c:fd:45:26:ab:3a:5d:b7:d6:
                    3c:9c:fc:20:42:37:d9:56:82:67:43:ac:db:87:0d:
                    d7:7a:38:4f:a3:d9:22:4d:dc:dc:66:7c:00:1a:88:
                    d5:84:68:1b:42:1d:17:1f:20:ba:41:ac:dd:d3:f7:
                    fe:de:86:78:02:0f:88:de:ab:03:64:92:f9:b1:11:
                    4a:7e:1f:a8:03:d3:8f:59:82:77:cd:d4:8e:53:d8:
                    36:90:54:8b:7e:1f:d6:42:c8:27:f4:c7:85:df:59:
                    53:b2:76:59:37:89:a5:ef:0c:eb:68:00:5d:62:96:
                    4b:4a:af:f8:32:75:d2:b2:cd:ba:f7:6a:8f:25:c4:
                    9f:6a:da:fc:5d:65:76:30:5b:79:51:de:11:4a:4c:
                    23:21:ed:98:6b:e2:0e:33:bb:7c:6e:6e:60:07:57:
                    b6:72:97:ba:8a:b4:82:92:9d:88:77:63:30:86:e1:
                    c8:fa:de:32:f5:b0:68:76:40:a2:52:10:8a:c5:19:
                    50:19:bc:6f:fb:18:84:59:ec:ed:44:91:89:00:7b:
                    42:ea:f2:f5:09:b0:f4:1a:7a:04:50:7a:f0:db:91:
                    3a:0f:fc:e4:17:b2:2f:17:a1:ea:78:50:7a:80:3f:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:78:FB:CB:6A:59:A4:61:AE:43:89:7C:1C:4A:4B:99:CF:D8:C8:9C
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:76:69:44:a1:cc:8a:42:44:e2:92:e7:33:8b:4f:32:c1:4a:
         ab:4c:88:4b:c9:c7:a1:fc:43:af:a5:0b:ae:c6:7c:05:1b:5a:
         40:c2:27:ec:8e:8d:b7:05:5e:cb:2e:47:c5:ff:3b:25:90:3d:
         7d:44:75:0b:65:22:d3:5e:7b:e3:1f:fa:43:de:c4:52:97:22:
         d5:da:ae:9a:66:b5:68:ce:6a:65:b3:21:0c:cb:ac:b7:bd:6e:
         ef:6a:29:3c:2d:e6:05:e0:c7:fc:f6:05:07:bf:08:21:ca:ad:
         1a:4d:8f:58:1a:17:ac:bd:01:ae:f2:63:3c:35:25:53:ba:05:
         60:ab:57:ee:c0:20:c8:b6:25:2c:75:fc:e4:0f:16:bc:e0:05:
         0f:48:a7:cb:67:43:73:24:e3:b8:30:64:19:e0:9d:7d:9e:bb:
         f6:46:b2:ef:c1:73:bb:f3:e1:35:c6:65:89:81:fe:f2:70:c3:
         81:54:23:d1:5f:1e:0a:ee:c0:12:58:98:b7:33:bc:7a:19:b7:
         89:73:ca:ec:a3:0e:c4:7d:7f:b4:d8:4f:17:45:84:ad:a4:c9:
         b5:02:a5:2e:09:80:6a:5f:bd:16:d9:e1:a5:6d:71:d4:9e:c2:
         88:27:e2:9b:ff:43:b0:c3:06:7c:ee:20:bf:bf:20:64:38:46:
         50:60:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:39 2024 by rpki-client on console-fra.rpki-client.org