Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File:                     oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier:          8pcXUj1m/+a5ev4nmyu28lt7OMKnrDB6auw4VtXmCRE=
Subject key identifier:   4D:2C:57:AE:35:68:65:68:D1:0C:44:1F:07:D3:B2:0A:75:5C:C8:43
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer:       /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial:       019356F6BD45CA5E10A27F4D491131B1E9AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number:          0544
Signing time:             Sat 23 Nov 2024 03:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:31 +0000
Files and hashes:         1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: xD66pXOWdLcz9eRG1X5QC9Jcs3XOiuqPTbelYEMx0wM=)
                          2: zUDpMoUENJRnQuWywPmLnxm_ARc.roa (hash: gpv2HNX4sL7HtqvCE+pWJlCYulUtu7U+IHwQnGcjVFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:bd:45:ca:5e:10:a2:7f:4d:49:11:31:b1:e9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
        Validity
            Not Before: Nov 23 03:00:31 2024 GMT
            Not After : Nov 24 03:00:31 2024 GMT
        Subject: CN=4d2c57ae35686568d10c441f07d3b20a755cc843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4c:35:78:ef:1f:07:e5:a5:2a:f5:ec:0a:b0:
                    6f:83:03:83:c5:fd:ca:37:19:f0:d2:3b:7e:2f:1c:
                    1e:de:c0:d6:d9:c0:79:19:1f:0d:e7:32:c9:93:f9:
                    f8:e8:2f:28:41:97:87:58:7f:4a:27:ff:d8:28:9e:
                    41:5e:aa:14:89:13:fb:9a:5e:b5:e4:06:46:81:9d:
                    a1:ba:43:b3:03:47:34:15:96:28:74:10:34:58:ca:
                    b6:7c:5f:d5:0f:34:9b:88:cd:04:f3:fc:fb:b7:0c:
                    10:a1:8e:e8:43:7d:89:48:8b:35:93:b8:15:45:76:
                    6b:a1:ab:a5:ca:1b:ad:d4:e5:fa:cc:22:57:fa:e0:
                    1c:e9:ec:e5:10:48:8c:0b:6d:92:59:63:20:64:36:
                    9e:88:1a:26:7d:da:b8:11:a4:c9:fb:52:da:ef:17:
                    62:df:1c:b0:4c:a6:db:8e:70:2c:27:97:d4:7f:f8:
                    07:8c:60:af:16:10:c2:9f:bc:55:c6:05:90:ad:0b:
                    fd:e5:99:2c:b4:e5:ff:18:4f:4a:50:79:19:fd:37:
                    77:bb:f5:ee:47:c7:8e:26:cb:ae:17:f5:9d:59:7c:
                    4e:c4:a1:af:00:ed:ae:fb:de:2f:bb:3c:42:9e:2a:
                    31:75:58:99:48:7d:91:fd:5f:bd:2d:a7:60:d5:3a:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2C:57:AE:35:68:65:68:D1:0C:44:1F:07:D3:B2:0A:75:5C:C8:43
            X509v3 Authority Key Identifier:
                keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2a:5a:ce:0d:a0:ad:ef:70:4c:8d:62:25:bd:a3:93:43:ac:
         61:9c:3a:67:50:08:f3:5f:d2:36:df:74:6a:6a:e6:7e:bd:60:
         0a:bd:ef:e6:c8:a1:02:7f:88:0a:6c:05:d3:73:04:63:2f:60:
         c8:ab:de:68:ff:05:f9:ee:20:4f:99:90:c3:11:fd:39:ea:5c:
         65:9f:ee:43:9e:bb:50:90:9d:ce:8a:3f:01:79:9b:80:01:1d:
         b6:49:ff:67:ea:0d:39:a3:2a:c6:06:02:7a:fe:ee:4b:5e:f2:
         6e:f9:4e:ce:98:ea:31:32:75:4e:55:2f:d9:33:e4:1f:d8:98:
         ba:14:d5:30:be:ae:14:72:b3:90:31:b3:50:cf:8e:29:c4:cc:
         02:32:5f:84:46:98:14:c6:7d:88:f7:9f:92:b7:12:9d:48:d2:
         8b:c7:09:b1:41:a5:56:73:5e:fd:49:bd:66:a5:12:99:0e:bc:
         5a:43:90:d8:6d:3e:a6:dc:1c:3f:65:57:53:12:a3:b4:36:0f:
         ef:89:30:0a:0c:58:ba:f5:e3:60:8b:09:40:29:7a:d2:4c:6d:
         1b:2a:83:09:e1:1a:16:03:34:59:fa:b6:1f:ea:84:ff:50:8c:
         bb:f8:ab:35:09:ce:75:1b:d7:22:37:a0:4c:02:9d:00:d4:cf:
         66:c9:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:43 2024 by rpki-client on console-ams.rpki-client.org