Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File:                     obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier:          sk5TQZXDhp3XGo2QK7iZQuxvmfd3PqXZ2QRVUu3/DBM=
Subject key identifier:   DF:BD:83:FB:78:5B:33:E7:FD:80:B4:0B:0A:7B:BC:4B:A7:23:CF:E7
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer:       /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial:       019362C3AA161299CCFB45D2B51038F2E6A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number:          0855
Signing time:             Mon 25 Nov 2024 10:00:10 +0000
Manifest this update:     Mon 25 Nov 2024 10:00:10 +0000
Manifest next update:     Tue 26 Nov 2024 10:00:10 +0000
Files and hashes:         1: lF1iyyTecMer-VEWz6HQbJ1h-9c.roa (hash: nLmObfbfkjWCUPDsHMsXFEfQy+o26JLPtuqfyjE0XtY=)
                          2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: JF0wV9l4imyUWsykSNqOue1bZ7P2qMYo/YRkjzU99kc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:c3:aa:16:12:99:cc:fb:45:d2:b5:10:38:f2:e6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
        Validity
            Not Before: Nov 25 10:00:10 2024 GMT
            Not After : Nov 26 10:00:10 2024 GMT
        Subject: CN=dfbd83fb785b33e7fd80b40b0a7bbc4ba723cfe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:0f:87:43:5b:2f:f6:d5:0f:76:3a:28:37:
                    dd:43:e3:9f:19:3f:59:3c:df:d2:f8:ee:83:93:c4:
                    57:a1:16:d9:45:55:59:cd:3a:cb:f1:b3:99:29:c4:
                    89:34:79:20:1a:e3:90:9c:df:8b:73:99:d6:6f:66:
                    71:0f:58:9b:82:2b:55:9c:20:d1:47:ef:8e:41:f5:
                    bb:af:2c:7a:7e:24:47:76:eb:9f:0b:16:5c:c9:ef:
                    62:40:8d:c3:85:f0:79:94:6d:b5:33:e5:3e:b4:40:
                    c8:15:af:42:03:af:6a:bb:b5:34:0a:f1:27:4d:a4:
                    c9:15:2e:e7:86:8b:94:7a:f4:d0:fb:8c:53:12:d2:
                    cd:16:72:92:dc:17:93:a6:d5:b4:43:8a:86:6e:b9:
                    5f:e5:2e:f8:98:24:ff:ac:bd:f1:a6:b0:ee:d1:7a:
                    51:5c:83:32:be:1c:56:a6:9f:73:72:a2:37:05:5f:
                    e4:4c:b9:84:d2:22:39:13:ed:b6:98:2f:84:c2:0e:
                    0b:4e:ee:a3:eb:39:3f:1b:3a:ce:d7:f1:53:f0:c6:
                    2f:5d:91:72:9b:6c:63:21:97:aa:f8:4a:41:61:b6:
                    41:ca:23:6a:be:0d:be:a0:00:e8:e9:4a:6b:4b:4d:
                    07:63:d3:28:db:c9:4b:49:89:df:fa:d0:f4:f0:30:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BD:83:FB:78:5B:33:E7:FD:80:B4:0B:0A:7B:BC:4B:A7:23:CF:E7
            X509v3 Authority Key Identifier:
                keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4a:9a:30:bd:84:dc:8c:43:14:f2:de:ff:3f:da:75:80:e6:
         55:d0:14:6e:b6:7f:41:5c:38:f3:27:f3:54:12:50:ff:64:98:
         a2:82:b3:e7:d9:d2:93:df:f0:b0:03:0c:0a:0c:d8:43:bf:26:
         bb:b7:2c:c0:63:6f:bf:a0:30:d2:84:93:d4:42:ce:63:7b:b9:
         7f:7d:46:2c:64:1f:d6:71:92:5d:a6:18:95:bc:fc:ae:11:ae:
         f0:1a:ff:ee:92:b5:bb:35:90:41:fe:3d:d8:a8:59:fa:ba:bf:
         e4:98:8f:b8:98:0b:ce:e2:e9:e3:7e:34:ee:e7:7f:63:83:8c:
         74:5c:82:62:40:52:94:c6:f7:73:e8:49:76:09:0c:c9:6f:c9:
         1b:70:22:1e:fb:90:3f:62:ae:21:11:31:23:61:96:5b:e4:27:
         d2:2a:1e:12:44:76:67:bd:51:29:6d:86:8f:3a:27:99:8a:37:
         3e:d1:37:00:ee:48:ec:76:c5:0d:7d:d9:c5:b8:6b:68:4d:2d:
         12:8a:41:9a:f4:cf:6f:dd:cc:e3:22:5a:61:60:cb:5e:3d:81:
         20:f7:6e:ee:cf:ab:2d:51:20:a5:36:2d:a7:b9:5c:d3:76:0c:
         d2:3a:34:a2:98:1d:22:5e:27:03:ab:c6:59:e7:5d:fc:c0:25:
         72:10:f4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:09:36 2024 by rpki-client on console-fra.rpki-client.org