Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File:                     Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier:          c8nYDh88d6xmaJUwKn2Az1sJR/QKatg9WZVqvc8rKZM=
Subject key identifier:   77:37:93:94:A3:EA:C3:D1:F2:61:30:31:99:F6:16:F7:C2:5D:A3:8A
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer:       /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial:       019365FE0DC515BC6891F03A3E28AC8D101F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 01:02:48 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:48 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:48 +0000
Files and hashes:         1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: xDG79J5l6imq9wDmthq29QjvncvcQAtBdHCSlFqXLQc=)
                          2: sCvusdcpE4Nn5mK8ee5Jqc0Ki5o.roa (hash: XqTyK80dlLiPEdJMw0jJ0DvNCwSDd0vaLqsmxtxgZo4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fe:0d:c5:15:bc:68:91:f0:3a:3e:28:ac:8d:10:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
        Validity
            Not Before: Nov 26 01:02:48 2024 GMT
            Not After : Nov 27 01:02:48 2024 GMT
        Subject: CN=77379394a3eac3d1f261303199f616f7c25da38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:60:d2:ed:37:99:54:e4:0a:ed:3e:e0:eb:00:
                    13:6d:93:ba:61:81:cd:1c:fc:ae:95:30:1d:38:c7:
                    ca:8d:3c:be:c6:b4:00:a7:79:54:4a:d7:f5:a7:9b:
                    cd:7e:28:30:fb:0a:63:9b:e8:ae:e1:75:0e:3a:22:
                    f0:35:3e:1f:8d:ab:31:13:b5:52:d9:13:e3:f8:77:
                    a2:05:1d:d6:5e:3d:73:ff:40:c0:f3:49:fb:20:df:
                    62:51:af:54:e9:f2:d9:c4:e0:4b:ce:fa:a3:ba:2e:
                    c4:c8:08:bd:84:17:14:3b:bf:5b:a7:be:b7:a4:31:
                    f6:69:89:69:71:8a:cf:0a:72:ca:49:9b:0c:ca:9e:
                    dc:14:f7:0e:ba:0c:02:99:01:9a:ce:cf:fb:c1:fe:
                    2c:dc:e2:d7:87:ba:1a:df:5d:e9:95:73:91:19:ae:
                    72:9c:be:80:a4:43:88:87:e2:51:00:ee:bb:ac:f8:
                    d5:e6:a5:58:90:a3:99:01:c6:a3:06:6e:e9:96:63:
                    8e:87:f6:26:fc:17:1c:46:2f:03:1b:70:51:ed:6c:
                    0a:8d:42:46:50:eb:ae:4c:98:d9:ed:5b:e0:6b:e7:
                    aa:cc:78:87:b5:b2:2e:e9:d9:cd:3b:46:fb:15:1d:
                    8d:54:67:d6:ac:7a:bf:f7:06:df:fa:d6:a4:77:ea:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:93:94:A3:EA:C3:D1:F2:61:30:31:99:F6:16:F7:C2:5D:A3:8A
            X509v3 Authority Key Identifier:
                keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:cd:08:2c:9f:27:0b:93:be:a7:de:64:6e:61:00:e8:55:f8:
         f2:47:d4:1a:c0:de:10:81:f0:1f:8c:3a:64:e1:5c:69:42:8b:
         71:e3:53:75:b2:89:b1:c0:f3:1b:7a:be:b9:59:b7:b9:4c:34:
         b7:1d:55:df:24:69:1e:7a:1f:70:05:05:15:23:17:39:c2:f8:
         ae:c8:7d:f8:e4:0c:28:10:95:31:ee:a0:d4:e3:ff:99:c2:fe:
         49:93:42:1b:b3:a1:f4:24:b4:5c:09:9f:f5:5f:1f:ee:c1:1d:
         5a:70:5e:3b:59:6b:8e:fd:96:e2:b5:95:ad:fb:0b:25:2b:22:
         16:6e:9d:69:c3:c0:af:ff:54:ce:ea:66:bd:a7:0e:a3:95:5f:
         30:b0:34:2a:71:1a:ef:9b:94:cc:42:a8:32:87:9f:0a:86:64:
         88:b5:9f:26:0b:ad:c2:e1:e4:85:c9:32:04:1e:e3:86:82:fb:
         dc:2c:0e:a2:04:6c:bb:c5:74:3b:37:f0:2f:cd:8b:ee:5b:a6:
         bb:a9:97:02:ae:54:d2:7e:e1:47:a5:ca:40:3a:94:7f:da:3a:
         1d:1e:66:c6:4f:70:c9:23:e4:d6:13:b7:7e:57:1c:51:76:05:
         76:d4:01:0d:5b:f4:72:48:fa:f1:3a:ba:4f:28:53:64:de:a6:
         08:bc:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:23:18 2024 by rpki-client on console-ams.rpki-client.org