Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File:                     r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier:          4uAofS2bSVkpWLtuxP3RiDF9tghRs5pctw4boK/MnTA=
Subject key identifier:   B7:48:24:C7:16:7B:CC:E1:97:A6:8E:2A:24:5D:29:A3:C6:89:59:5B
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer:       /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial:       01936331F37F7CC158B98348D2FF26BB6E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number:          124C
Signing time:             Mon 25 Nov 2024 12:00:38 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:38 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:38 +0000
Files and hashes:         1: 44whc6aRXwGDbnrDOy4tA4YzgVU.roa (hash: RZE2kkEhM5GYOllx8ePYyXfl88kxzxsJYku6YVwkMoo=)
                          2: LJN-Q6_cA7EHl3tl0JilNBul6l4.roa (hash: d3kDJJ83pI+gu4UalpKpd0PvEmc3jP11DfMPKuf2Uns=)
                          3: cF8aPLwBYlzSs2jar2EQFc8n4pg.roa (hash: aSledVkEtPZhx3ueeiEc64iKivvsjbA4E+aXG+iUFrk=)
                          4: cPkr4mGd7cz-lM0OfqIN9tj0sxE.roa (hash: s2FgGcJNH5yrJvtIB6AJdYbcop/rJ71EWNNKetny6Ds=)
                          5: n5O-mHc_VJj57SFujoXPV6yQUKc.roa (hash: Cxq0auNWG+q5hy6oEx1zaRrN4fRyHIaWu+8cbkXJ1cA=)
                          6: p2E_ScsQXXdT1MxZO55K6CtmzrY.roa (hash: fGpe9OtsNeQytigT30u3aAc7sPj2sI9nW3eRudjFGNk=)
                          7: pSDUQP1b5o3nPX7ow0f9EhAxn_c.roa (hash: Rh10inA0ISfz2+kdDo6jZ1yv7uyvCL+KqzVv6El2/lc=)
                          8: qwlSxtg4NYCE6t4YqCVQOXVgQyM.roa (hash: Gy6OgymR1Psb7gVauOJqAMNP96Bmu7EkYfBG/5js3f0=)
                          9: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: Z5ECn6frqwbjqhCI3ZQslnhB/ELGfl216RVAZ8wxJQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:31:f3:7f:7c:c1:58:b9:83:48:d2:ff:26:bb:6e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
        Validity
            Not Before: Nov 25 12:00:38 2024 GMT
            Not After : Nov 26 12:00:38 2024 GMT
        Subject: CN=b74824c7167bcce197a68e2a245d29a3c689595b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:45:fd:51:34:e8:d8:a1:52:5a:b3:0a:a7:
                    7e:78:cd:f7:b7:37:99:ca:f2:2e:65:84:bd:6e:fe:
                    86:5c:45:0e:07:8f:bb:44:aa:1d:ae:fc:fd:a6:30:
                    35:93:9c:09:1b:fc:99:86:c3:85:54:fe:9b:9f:f8:
                    af:63:72:4f:db:73:81:bc:e1:29:18:78:32:8d:e5:
                    69:98:3b:ea:bd:20:aa:7d:64:5b:0e:8e:eb:3e:0e:
                    49:67:d4:97:d9:ee:9a:c2:cb:41:4f:d6:41:3d:b4:
                    ca:5c:42:14:67:ba:e7:6c:17:37:0b:6d:42:d6:01:
                    d5:8d:59:d3:97:db:bf:dc:27:33:9b:ce:2a:fe:65:
                    a7:07:1d:69:30:ef:64:3a:83:76:ec:cf:3a:20:40:
                    d5:20:79:8c:39:63:f9:3d:2d:1c:0e:e4:3b:c1:c0:
                    ea:79:47:98:1b:2a:57:20:2c:39:d7:c2:8e:c1:7f:
                    aa:66:53:14:e7:1a:30:b0:38:83:16:b3:20:af:2c:
                    47:58:e4:4a:5e:e9:23:ce:50:35:d4:a6:da:6b:0f:
                    c1:ad:90:87:df:09:e2:3c:de:5a:5b:4a:ba:d9:34:
                    83:7e:49:c8:0d:71:5e:c7:a7:02:63:79:7f:df:98:
                    58:48:f0:34:c7:12:fe:3f:3b:b8:bc:30:9d:b1:d0:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:24:C7:16:7B:CC:E1:97:A6:8E:2A:24:5D:29:A3:C6:89:59:5B
            X509v3 Authority Key Identifier:
                keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:83:74:65:bb:98:75:d0:e6:ad:7f:39:4d:9e:eb:3c:96:
         d3:e0:74:67:65:c5:20:38:7f:0a:87:4e:b8:40:ec:f8:ee:93:
         94:c5:50:d1:9f:07:82:63:f3:2e:31:f7:63:8e:2b:1b:c3:cc:
         c0:32:07:ef:3f:b5:2c:9a:dd:15:96:fb:22:b2:dc:a8:89:c3:
         d2:ed:59:5f:e1:0e:61:0e:1b:d2:9e:99:a3:df:10:5b:7d:74:
         d0:98:54:98:37:19:f3:d8:6c:4d:df:e1:c5:40:b0:9d:61:af:
         3f:a0:a4:37:c2:04:b3:2f:07:e9:55:76:02:74:89:f7:13:8a:
         ac:c2:79:5a:37:ac:b7:45:06:7f:99:2f:33:f6:f2:dd:34:c9:
         ab:42:05:ce:30:07:cf:2d:b5:22:e4:85:ee:fb:6f:8c:76:67:
         df:fb:ac:4b:54:19:a4:a0:c8:33:97:6f:ba:7f:81:c2:3d:50:
         d1:0d:ed:d9:87:33:1a:7a:5d:42:5a:58:e6:8c:dc:f6:4c:cb:
         0e:6f:fb:80:b2:c3:b0:7f:7d:19:1b:94:a8:f6:57:92:e7:45:
         cd:76:01:11:5e:16:41:77:a9:17:75:7c:69:a2:c6:eb:2e:5c:
         85:d3:49:3b:75:4e:64:19:2c:71:89:8e:41:21:ff:58:94:ca:
         d9:c9:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:52:09 2024 by rpki-client on console-ams.rpki-client.org