Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          5rHBTLYh6G6GiITzsyLTYphO1YMbMIryEYF9akbcNI8=
Subject key identifier:   FA:5C:FC:AA:97:FF:E2:87:7B:61:56:03:5D:64:20:87:EC:B0:86:15
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       019356F71F066259D1BBEAA55E49B5A7B5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          0830
Signing time:             Sat 23 Nov 2024 03:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:56 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: fC9GliK+GoJ576Puzqfat133iUJLKslwmLWy187Lp8U=)
                          2: WjCdVaJCFqlaafBE5DCKQJGUfeA.roa (hash: 8YmqQXkyaN9cnZwzuDTZET9z//RslE8q5nbkAoOMORQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:1f:06:62:59:d1:bb:ea:a5:5e:49:b5:a7:b5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: Nov 23 03:00:56 2024 GMT
            Not After : Nov 24 03:00:56 2024 GMT
        Subject: CN=fa5cfcaa97ffe2877b6156035d642087ecb08615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:ab:ac:8d:37:ff:3a:6d:4b:54:e4:29:d1:
                    94:ff:23:db:c8:a3:00:48:7d:63:c9:92:5e:29:ab:
                    bd:57:a8:ff:05:1e:e0:32:a5:0c:f9:8f:7b:b2:53:
                    06:a4:33:5c:67:40:ce:6c:9e:47:84:1d:ab:98:a8:
                    92:3d:2c:54:8d:c1:84:05:19:d3:7b:26:ee:0c:a1:
                    34:91:59:c2:45:fc:37:93:34:64:db:93:83:2e:7c:
                    f3:c5:4a:8a:eb:c8:1c:2a:bf:08:42:c0:be:41:95:
                    d5:01:ca:a2:e3:39:b6:d0:d2:cb:6a:13:a9:4d:1f:
                    6c:5b:f3:66:7e:9c:ec:40:72:24:4f:5e:fd:5e:2d:
                    0d:86:7f:28:75:ea:14:60:8e:12:4b:25:be:47:f7:
                    5e:36:fc:0b:cc:62:02:e2:c8:a5:64:b3:05:4a:e8:
                    31:cd:f3:c7:84:b8:8b:a9:e2:ba:a9:79:2f:26:5d:
                    b2:0f:23:84:a1:3b:71:7e:ad:7c:b2:2b:3c:72:bd:
                    39:52:d2:dc:27:19:c5:10:89:6d:25:22:79:f6:53:
                    d7:9e:7c:50:a9:a8:68:6e:44:38:df:1c:22:2c:99:
                    63:2d:e8:88:b1:f7:0e:2d:7d:59:ab:fa:16:b6:fc:
                    34:db:d8:e9:cb:a1:ee:cb:82:23:fe:f0:22:43:46:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5C:FC:AA:97:FF:E2:87:7B:61:56:03:5D:64:20:87:EC:B0:86:15
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:f2:b5:9b:01:65:5f:97:38:d9:ad:23:4f:73:da:b3:9b:5d:
         1d:04:cc:15:88:3f:d0:a4:2e:d6:0f:88:09:a7:08:af:a5:31:
         4b:f4:10:ce:aa:11:31:54:cc:87:75:01:b7:c8:99:f2:b9:5f:
         2d:13:48:d1:85:dd:ff:ff:82:f1:54:a2:66:d7:eb:c8:df:90:
         97:e0:ce:1b:f1:63:14:8f:a0:a9:67:fd:66:1a:11:dd:fe:2b:
         86:f3:37:01:80:5d:ef:c8:5c:e1:af:58:f2:68:41:1f:9c:74:
         82:86:33:9e:10:52:aa:da:4e:39:70:c9:d5:1d:9b:9c:03:04:
         5f:8b:ce:ae:9a:4b:85:c7:9f:c5:ac:bf:a7:7c:0d:d6:a7:3d:
         23:29:e1:a9:f8:5d:30:6a:28:31:6c:f7:6a:87:73:03:13:29:
         13:4d:85:f4:7f:b6:43:45:1f:ad:ff:41:fe:6a:27:1d:65:16:
         5e:de:eb:c0:a4:8c:92:53:69:ec:f9:ed:4e:76:73:2b:05:34:
         6f:c9:aa:bb:bb:d7:10:c5:db:41:9c:8b:fd:fa:7c:a1:80:7a:
         b0:6b:e1:85:f2:70:88:e2:d6:f2:45:97:71:de:04:cd:04:39:
         5b:5b:d2:d7:9b:3e:dd:a5:a6:a8:18:e0:b7:6a:82:be:5f:e4:
         78:89:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:47 2024 by rpki-client on console-ams.rpki-client.org