Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File:                     otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier:          wgB5KFgt2m+T7jZ3xK3d33ZLXyJ5YMNeojL/3MdzfWI=
Subject key identifier:   88:83:DB:56:D9:B1:0A:EB:8F:73:D2:CB:A8:CE:61:3D:D3:63:D8:C3
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer:       /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial:       01935651CD64546D651F52EEDEC7622206A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number:          01CC
Signing time:             Sat 23 Nov 2024 00:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:21 +0000
Files and hashes:         1: emVE3TWvPI4mjfy2k9dAVHXNYRY.roa (hash: vCYA7gO/ILKKHL/FyHAM8xgc9Q8kYxoSTahsd+W6wUU=)
                          2: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: JNKQrR6bSHGF4rmFkxnu2fL2XvoOjiVWf8pFxYXYG5Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:cd:64:54:6d:65:1f:52:ee:de:c7:62:22:06:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
        Validity
            Not Before: Nov 23 00:00:21 2024 GMT
            Not After : Nov 24 00:00:21 2024 GMT
        Subject: CN=8883db56d9b10aeb8f73d2cba8ce613dd363d8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:d6:a5:82:a1:11:ed:f9:34:4c:db:5b:03:
                    f8:79:ac:e0:44:f3:e2:95:f3:c1:a4:fa:7b:49:25:
                    98:32:43:13:d4:52:ec:c0:93:6c:01:e7:0d:76:b3:
                    a7:3e:14:13:61:03:18:65:be:e7:ba:28:d1:c6:bf:
                    0e:8f:a5:03:6e:69:09:b6:43:f4:83:50:83:d6:2d:
                    77:c7:7c:b2:8c:ae:17:10:e7:16:0f:be:3d:09:fe:
                    d2:11:0a:7a:85:1a:d7:d6:1c:21:fd:fc:3d:c6:50:
                    5a:07:af:55:4c:cb:0c:d1:84:50:d3:b3:74:98:8a:
                    ea:ea:17:80:a6:eb:00:4c:21:6d:92:ea:6d:56:c2:
                    1d:ed:f1:88:65:da:ac:53:8c:c4:88:2a:dc:9d:1e:
                    c3:90:46:64:a7:ed:73:8d:6b:60:81:79:e4:43:3f:
                    fc:b0:5b:d7:1a:89:94:4e:34:2b:e9:12:bf:05:52:
                    5e:13:bb:69:c9:6d:bb:03:94:6b:de:47:38:d9:d6:
                    a5:e9:9c:8e:54:48:d6:48:c6:d8:9f:aa:33:2a:1f:
                    7a:00:ce:d6:cd:f6:6c:89:a6:dd:6e:5c:23:92:8f:
                    ff:f3:94:00:43:f4:a4:98:0c:a0:3f:15:1d:3f:ab:
                    55:cf:cf:c4:a1:78:6f:ec:dc:d5:bc:75:0d:d9:fb:
                    6d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:83:DB:56:D9:B1:0A:EB:8F:73:D2:CB:A8:CE:61:3D:D3:63:D8:C3
            X509v3 Authority Key Identifier:
                keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:da:6b:68:43:19:0b:db:d0:15:98:7e:bd:90:2b:af:f8:d3:
         b0:be:2f:9a:ff:67:fb:fc:30:4c:20:ec:b2:71:e6:79:1a:1e:
         1c:8a:af:f2:d7:7f:64:78:32:bc:21:65:9e:e8:67:56:56:07:
         af:78:fd:7a:10:e8:93:bf:de:c9:fb:0d:25:f7:bc:d0:e5:bc:
         48:1c:db:96:ac:dd:30:78:f9:b4:48:6a:1f:41:98:cf:15:09:
         74:c4:5d:c0:b2:2d:59:18:78:8f:04:e2:7c:14:9d:32:f2:0d:
         4f:b3:a9:11:a6:77:f5:ba:5e:f4:38:33:a9:75:86:35:56:04:
         24:c4:19:dc:7e:53:63:6e:e9:10:8a:fe:7f:6e:e8:bc:bf:9d:
         3a:3a:0a:f5:c3:f8:84:46:1a:fa:54:86:60:2c:e6:bf:27:61:
         e3:32:cd:0b:ff:be:42:48:cd:ae:f0:b8:74:bc:07:d6:26:1e:
         da:22:4f:36:9b:ad:5e:e2:d3:e9:60:a7:8b:93:dd:c2:60:56:
         ff:dc:19:57:0e:22:9b:24:f0:cc:e5:76:f4:7c:cf:14:a6:68:
         da:18:40:91:74:1e:05:f1:14:19:bb:d7:a2:be:3f:77:a2:e6:
         4a:e8:43:f0:f2:de:0d:14:f2:b0:21:9b:14:b2:71:67:d5:4f:
         32:ff:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:42 2024 by rpki-client on console-ams.rpki-client.org