Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
File:                     e_OebrMTHs883c0MnjeMNS2kH8I.mft (raw, json)
Hash identifier:          iW3wbMNFtO4bwYHpwj+KLV7FYQuCkySdBbCqZ0cin9A=
Subject key identifier:   67:83:90:40:29:07:06:43:C8:86:6B:4A:4F:58:4B:9D:BA:75:27:86
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Certificate issuer:       /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial:       0193572DAE8BDFDD1193F8A0A74B59FE1AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
Manifest number:          0CE2
Signing time:             Sat 23 Nov 2024 04:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:31 +0000
Files and hashes:         1: DOMB3NefoLeOAabLVx1Qm6-nqOU.roa (hash: V3Oh9uWBYFjlKoVlOWJ5WH8JuWZChVnJYYXgreq5nyY=)
                          2: GK3Qbi4malnEDv8LTY235zmcNok.roa (hash: Qogbf4I5EuhYy8OORnWNgrOXlfkltB9jj0m4hbKHixY=)
                          3: e_OebrMTHs883c0MnjeMNS2kH8I.crl (hash: y/HMsBVdXwgCpxyWExUrmK1eFKS+LfFD6Fu3PTGCmxM=)
                          4: hDldz5etJnYF3ILsNaDkAwgpPdA.roa (hash: uuIwN5uK7lyqEEQbEtEKR2HNNiqDMbiemAPWbiSWa64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ae:8b:df:dd:11:93:f8:a0:a7:4b:59:fe:1a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
        Validity
            Not Before: Nov 23 04:00:31 2024 GMT
            Not After : Nov 24 04:00:31 2024 GMT
        Subject: CN=6783904029070643c8866b4a4f584b9dba752786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e4:16:79:37:00:05:79:58:c7:93:2d:fb:39:
                    05:98:99:5b:d3:f8:fc:25:ed:90:4a:37:db:0a:bf:
                    29:11:d6:43:e9:7f:8c:c2:db:24:9e:60:b0:f1:be:
                    8a:65:1a:d3:b3:c5:e3:f9:98:85:84:a1:6b:ad:a5:
                    82:13:1e:1c:8b:20:7d:ac:df:79:40:a1:e8:d4:75:
                    84:48:7b:37:03:4a:92:6d:7f:16:d7:ad:c3:13:4e:
                    b9:ba:07:4c:f9:6f:a7:5f:e8:e2:56:35:84:44:f8:
                    6d:21:f9:2d:07:31:8b:5c:b6:94:15:85:d3:6a:2b:
                    c2:40:57:f8:4f:3c:34:fe:28:5d:3c:8e:74:45:b3:
                    7e:73:79:e5:8e:22:7b:35:c4:b0:1d:ff:c6:ae:6a:
                    36:e5:e0:0a:23:ad:0c:45:c5:85:c5:73:95:e7:12:
                    c0:87:f3:55:17:da:b8:11:c7:7d:ce:5d:8b:48:d2:
                    06:fa:c7:26:0c:73:58:40:6a:53:f9:01:d9:3b:45:
                    27:a4:04:a1:84:42:c4:a9:56:bd:f9:a8:da:0c:69:
                    64:87:95:ab:7f:c0:dd:14:5e:66:e2:98:4f:58:6d:
                    54:b5:28:24:29:e8:08:a4:a7:e2:ad:8f:13:91:f5:
                    da:c5:da:eb:00:10:ea:90:cb:f1:36:87:4b:38:9d:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:83:90:40:29:07:06:43:C8:86:6B:4A:4F:58:4B:9D:BA:75:27:86
            X509v3 Authority Key Identifier:
                keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:ad:99:94:40:a6:a4:d2:90:b8:66:34:59:05:88:b8:af:
         26:b4:ca:32:5a:9b:19:7e:1e:fd:20:8d:be:5f:2e:01:a3:96:
         f3:20:13:cf:5b:25:f7:7c:75:16:e5:d7:fa:d6:72:6f:3b:4c:
         d7:13:f7:63:5c:df:43:1c:bf:63:7f:0f:fc:6c:e4:18:bb:3d:
         32:23:ee:3d:e1:6c:79:e3:9c:fe:47:04:4d:be:a6:5d:dc:fd:
         6d:11:88:db:5b:46:13:ac:5f:95:23:39:b4:76:2c:ba:85:c8:
         82:42:5e:5b:28:6e:f7:4e:15:11:1f:2f:e5:8f:dc:f5:10:f2:
         44:7b:1f:16:35:05:12:78:37:8d:c4:cd:71:06:26:50:f4:02:
         4b:c1:5f:f8:90:6f:12:d5:1e:4f:fc:14:a9:79:a3:50:2f:ff:
         cb:19:a9:6f:91:9c:2d:50:a7:b2:b6:fe:39:45:6b:76:89:d0:
         69:f3:f8:71:d9:4c:ab:50:ea:9d:d0:7b:b0:ca:1c:af:b7:09:
         c7:23:ac:77:db:92:b0:aa:1b:6e:4c:71:e8:a1:a9:65:39:70:
         14:d4:c5:9b:68:81:42:43:6f:a3:48:93:38:de:0d:15:66:22:
         3d:e4:62:e9:46:9f:2f:bd:a1:5f:da:8a:9d:b1:e9:06:dc:4f:
         38:d9:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:26 2024 by rpki-client on console-fra.rpki-client.org