Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
File:                     OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json)
Hash identifier:          4/zhN4w2xy8jBCJP2OVXsOxyEFO0n1NOCLUezS0zMqc=
Subject key identifier:   B3:8A:CB:7C:7D:49:FF:56:27:8C:67:8B:C4:0E:D5:55:0C:F8:2E:E7
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Certificate issuer:       /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial:       0193610CE2CE9BDC29A34F39EC8ACD3D24D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
Manifest number:          0119
Signing time:             Mon 25 Nov 2024 02:00:54 +0000
Manifest this update:     Mon 25 Nov 2024 02:00:54 +0000
Manifest next update:     Tue 26 Nov 2024 02:00:54 +0000
Files and hashes:         1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: j9WdLYbATCf521tlVlNcnvQhT/yVkrz6F/Xr271wAqI=)
                          2: oWuAATVKlvlp-KPSl65na1x3ojM.roa (hash: tzyJ2ujSWiXOq6uYaWMeSfswlCWmClYhYSuDcQogXPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:0c:e2:ce:9b:dc:29:a3:4f:39:ec:8a:cd:3d:24:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
        Validity
            Not Before: Nov 25 02:00:54 2024 GMT
            Not After : Nov 26 02:00:54 2024 GMT
        Subject: CN=b38acb7c7d49ff56278c678bc40ed5550cf82ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:e3:5a:d2:73:7d:5a:c0:37:00:31:d5:c2:
                    36:59:39:65:9c:88:02:9c:1a:46:3e:3e:3a:65:f0:
                    54:bf:96:0b:dc:88:1c:c9:3b:00:4d:2c:30:06:e2:
                    7c:28:c7:66:a5:5f:da:ed:90:91:f5:1e:8b:29:b5:
                    ba:a7:23:0f:3b:ce:65:7b:f8:a4:2d:87:69:c4:d3:
                    7b:ed:5a:4a:0a:77:03:fe:47:0f:31:37:48:7f:84:
                    d7:46:9c:c3:c4:d2:1d:2b:6b:f0:9e:78:54:79:5d:
                    ae:ad:2b:69:26:98:2e:02:6c:1b:e4:f2:89:c5:ff:
                    7d:33:6a:d0:8c:48:ee:e4:51:77:74:80:fb:48:7a:
                    52:ef:0a:cd:74:c9:c7:28:1e:10:b6:66:dc:4b:33:
                    91:04:f8:c1:94:96:0b:d5:30:5b:fe:3a:3a:9b:d6:
                    61:0a:5a:25:e0:46:c9:47:e4:45:b6:f5:73:97:6a:
                    5a:11:88:39:ad:aa:fb:77:36:59:90:12:c0:6b:0e:
                    aa:1d:bb:3f:fd:ea:b4:74:b2:57:1a:65:2d:6c:ad:
                    ba:f1:ba:29:fc:ee:73:d1:16:c5:4a:24:8d:69:7f:
                    df:86:de:b8:6c:d6:78:f0:3b:bc:87:5f:5c:2f:90:
                    7c:76:ad:94:4b:a5:0c:c3:cf:36:07:a9:94:91:51:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8A:CB:7C:7D:49:FF:56:27:8C:67:8B:C4:0E:D5:55:0C:F8:2E:E7
            X509v3 Authority Key Identifier:
                keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:98:20:19:07:e2:14:f9:81:f0:2b:2b:00:55:5a:64:43:a4:
         57:cf:fd:ed:a4:88:e9:36:fd:ac:86:90:08:68:be:50:da:45:
         fd:3c:32:c3:d4:e1:e1:8c:c1:07:b0:92:73:09:ab:fb:6d:37:
         09:8e:a9:f2:a9:a3:e9:32:dd:40:94:bf:87:02:ea:9b:0f:3e:
         c6:f8:e6:dd:6f:5c:58:40:55:e6:3d:1b:a1:f9:a6:e6:2e:38:
         86:06:35:a0:a8:f5:fd:b4:a3:33:bb:68:51:e5:82:45:7f:02:
         c4:4f:3d:15:9d:d5:c6:d0:c3:67:fa:7b:94:85:94:88:1a:6f:
         b4:80:c7:23:05:ae:2d:3e:8e:89:07:6d:f4:78:61:8a:7a:f0:
         9e:f3:ab:4d:8a:f2:4a:e7:3a:e7:ac:dd:ff:86:af:26:0e:e6:
         d3:cb:33:98:e4:eb:45:bc:19:ac:b6:3b:6c:e8:cc:74:18:e8:
         23:56:96:91:d8:63:7d:89:61:a2:23:49:37:d8:1f:7f:ad:ce:
         e0:0b:1f:7e:ab:22:43:dc:2f:6a:f6:e0:f6:a8:47:28:fd:1e:
         3c:cd:d4:ce:8c:dc:86:ea:a3:7f:79:b6:00:f5:66:75:27:2d:
         85:b4:66:2a:6b:27:05:d9:d1:81:82:f6:b0:6d:3b:fe:68:cd:
         7b:ce:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:19 2024 by rpki-client on console-fra.rpki-client.org