Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File:                     oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier:          hWU5eNXI9dzJxgxZqrvBcF0pTQzhUWrtZyAJMYHHol8=
Subject key identifier:   88:CF:51:D4:3F:A1:90:C8:62:32:1D:57:D1:6C:13:56:25:0B:63:14
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer:       /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial:       01936A7D65C5BEFD35CF1248CDBC5505CEDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number:          0453
Signing time:             Tue 26 Nov 2024 22:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:23 +0000
Files and hashes:         1: EbnXqL3LPXy8tvB2Ymq5Y8XveJY.roa (hash: CCmiIVz8L+sMr/jVqW23OVPVPA6qOrjKxAxUhj9wVbs=)
                          2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: tIzlT24ovUtBHO4Ypfkz5GHVboghZOs/d6+f3IHPysQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:65:c5:be:fd:35:cf:12:48:cd:bc:55:05:ce:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
        Validity
            Not Before: Nov 26 22:00:23 2024 GMT
            Not After : Nov 27 22:00:23 2024 GMT
        Subject: CN=88cf51d43fa190c862321d57d16c1356250b6314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:25:ed:35:a3:73:21:18:a2:a8:5d:82:0e:
                    8a:49:2f:63:83:56:d8:00:ae:fd:96:43:4f:ad:86:
                    cc:f2:17:3c:63:a7:fe:8c:fd:bb:4b:41:8c:5a:b8:
                    6a:5a:03:ad:4d:b8:7c:90:6b:a4:35:66:99:87:31:
                    37:f7:c2:3a:4d:f1:30:20:76:3b:40:57:92:cf:90:
                    49:4e:de:29:29:38:6c:d1:ec:94:ea:7b:0c:9b:0d:
                    c9:67:d9:9d:82:06:e0:0c:98:de:d5:cf:45:8a:54:
                    8d:64:0a:f3:cd:a9:39:46:bc:20:e0:95:ea:43:f7:
                    3c:30:e9:ad:37:8d:12:eb:61:25:e4:03:dc:3b:d0:
                    be:fa:54:09:1e:59:d3:6a:81:39:ee:69:c5:41:59:
                    d7:35:dd:26:ce:da:1e:91:71:b9:43:39:9f:82:c6:
                    60:71:79:cb:67:7d:ba:0f:49:8f:37:3e:86:d8:f5:
                    82:a1:90:6f:c8:03:b0:08:cf:3c:97:8c:1d:cd:42:
                    2b:d2:3a:d3:51:52:4e:d8:ce:78:35:c1:80:0d:2c:
                    f7:9e:b8:82:c4:a1:5c:52:04:5c:35:81:56:bb:26:
                    ea:0c:56:aa:3f:3e:8c:2b:11:6d:9c:20:5e:cd:2d:
                    e4:ec:37:9b:5e:c2:a4:62:f2:0d:c6:cc:32:f4:59:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CF:51:D4:3F:A1:90:C8:62:32:1D:57:D1:6C:13:56:25:0B:63:14
            X509v3 Authority Key Identifier:
                keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:73:15:6c:0b:dc:57:be:67:81:4f:86:d0:b2:ea:cb:f4:
         83:38:1e:cd:c8:1a:8e:b7:21:e9:89:6c:7e:51:fb:60:06:d4:
         77:7c:c6:48:07:86:41:e1:a7:25:ee:ec:41:1e:7a:b4:51:d6:
         fb:5f:9a:7a:d6:4f:21:42:af:87:41:78:4a:09:b0:e8:ff:a8:
         68:6e:2b:8a:2a:8b:56:91:6d:b6:87:d7:75:d1:a1:41:ed:fc:
         50:cb:de:38:ec:a4:a5:ab:1c:ed:8a:f3:e1:13:96:e8:16:1a:
         e4:27:ec:31:b2:ce:24:e2:50:35:b8:7d:14:e8:e7:21:79:d0:
         8d:ed:dd:32:59:f5:bf:a8:ed:11:6f:10:0f:30:0f:a5:cb:98:
         6a:8b:c9:7c:c8:c1:0e:1c:ab:82:9b:90:a7:ce:b2:a4:3a:dc:
         a6:37:62:44:4e:10:b6:33:5b:30:17:b1:3e:2d:58:af:58:77:
         18:1f:91:1d:43:42:d5:83:2f:f7:b3:f0:45:f0:16:83:4a:c9:
         4c:56:20:1b:49:a6:aa:f1:b9:66:8c:bc:e1:07:a0:36:d8:e1:
         1f:ae:e4:75:8c:af:8e:5f:1a:16:8b:2f:33:5d:ce:93:d7:3a:
         2c:ae:a9:da:6d:8a:6d:f1:57:d5:b4:d9:1d:63:80:cd:8a:0c:
         f5:c3:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:41 2024 by rpki-client on console-fra.rpki-client.org