Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File:                     oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier:          48ALWHN62QKOky7TDzKddxckE+jRxAAVOdr6SLuKlRU=
Subject key identifier:   C7:64:ED:A6:E5:D1:09:36:D2:93:5B:D4:8C:AC:79:31:7C:27:DC:B0
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer:       /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial:       0193584032C978B671F8919F8D589FE49178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number:          0211
Signing time:             Sat 23 Nov 2024 09:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:22 +0000
Files and hashes:         1: WeTNKnlahpzr3uTQzFaCJppe1F0.roa (hash: wpMQUGsEnArKUwaSnjxpHCHbUKP6Vp0u5RsE3W/uZkA=)
                          2: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: uJMyISO+3rOSSGIisA3v0kDKYT2dLM+kUMY4j1Y+/FE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:32:c9:78:b6:71:f8:91:9f:8d:58:9f:e4:91:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
        Validity
            Not Before: Nov 23 09:00:22 2024 GMT
            Not After : Nov 24 09:00:22 2024 GMT
        Subject: CN=c764eda6e5d10936d2935bd48cac79317c27dcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:53:33:f8:2e:c5:17:31:89:c5:6a:6e:49:
                    e0:5c:56:5e:ab:89:fa:9d:ce:0a:fc:bf:75:dc:9c:
                    df:26:c3:05:ee:8e:23:5d:5f:d8:59:59:74:10:3d:
                    55:bb:aa:88:e7:40:cc:82:7e:51:c4:5b:fa:6a:47:
                    01:30:7f:54:31:4d:c6:cc:14:25:99:16:4f:57:e9:
                    33:b1:af:fb:e5:de:c3:e8:f7:65:d6:36:c4:e5:58:
                    0d:bf:13:60:0c:9e:8c:ad:e4:2d:0a:aa:7f:e4:74:
                    ae:15:5c:17:20:20:9e:ca:25:6e:bf:c3:f3:d7:6b:
                    cd:a1:34:78:06:e3:19:79:47:31:cc:b0:89:d2:33:
                    64:4f:aa:99:27:80:fd:48:3d:a3:68:9d:b5:9f:ad:
                    9f:a1:be:50:b0:ae:f2:5a:05:0c:b0:6b:cd:55:bd:
                    1b:26:89:d4:c5:72:92:fd:28:36:ec:84:17:50:84:
                    86:98:4e:64:27:d7:5e:0b:fe:f0:9a:f2:91:f7:f7:
                    4c:7c:d3:31:28:fe:07:20:f0:83:7e:34:b2:94:57:
                    cd:62:68:e8:7c:a6:bc:b6:b2:e7:34:65:0d:90:f7:
                    d4:29:3b:84:27:9e:17:eb:1e:7c:e4:ab:d4:59:85:
                    8b:02:14:aa:5f:4f:af:6c:9b:28:96:06:2e:ac:a1:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:64:ED:A6:E5:D1:09:36:D2:93:5B:D4:8C:AC:79:31:7C:27:DC:B0
            X509v3 Authority Key Identifier:
                keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:82:c8:d1:ac:d0:9a:f1:9e:80:93:6f:3d:1e:2e:34:18:47:
         4d:f0:b8:db:1a:59:2c:51:5e:9f:39:70:b7:b4:ea:32:07:92:
         ff:aa:4e:b7:e5:73:9d:ec:f1:ea:07:74:dc:ec:2b:d8:68:72:
         0e:3e:a4:b5:dd:ac:be:b8:22:38:28:b6:d2:bb:45:2b:fe:bb:
         43:c3:38:71:bd:78:67:9e:3b:e6:7c:d7:c7:af:c7:8e:5b:c0:
         13:a1:fa:e4:1e:9c:86:f0:29:39:1e:20:e5:3e:c3:c1:d1:6b:
         a5:07:4f:76:20:17:94:c6:80:70:79:19:0a:0f:87:5f:20:6a:
         cd:75:c8:1c:2a:8e:92:84:6f:94:81:3a:ce:c8:a9:90:bb:dc:
         63:67:86:86:64:88:c3:2b:20:14:2f:b0:50:79:a4:77:d3:d4:
         6e:8e:da:41:a7:c6:55:8a:ca:c2:45:65:ed:4d:ba:42:87:c9:
         af:80:c4:7e:72:13:c8:e2:8f:7c:6e:3e:67:10:e6:1e:0b:1f:
         8e:f1:b8:0a:dd:df:b8:ee:48:13:87:f9:dd:be:18:65:ff:18:
         bb:f6:33:ad:82:fb:c9:76:c7:7e:78:31:0e:00:38:db:e0:54:
         9b:bd:97:ea:1f:83:ce:9b:38:eb:7f:a9:74:c6:9e:67:3e:d9:
         e8:56:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:01 2024 by rpki-client on console-ams.rpki-client.org