Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File:                     oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier:          alqFZFVdWmjlCGHDubvvHpHGiQkoHM9YXMKaXmHSlHc=
Subject key identifier:   4B:0D:FD:C5:C1:D7:A7:4A:0A:42:7D:B1:85:89:56:F0:F4:E9:F5:00
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer:       /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial:       01935989E1D466F68E83875FCD09AACEB4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number:          08B8
Signing time:             Sat 23 Nov 2024 15:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:28 +0000
Files and hashes:         1: RnvGmnup0S1s46jnEYfY4VK86Mw.roa (hash: tQ+t9CUXc9PzCfIy1qg5r7bsWYPHHCH56G3kORtV4zQ=)
                          2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: ikVQ83wKbQsN6S9Lh06/V00jxZjowTSJcLHAelgZs1M=)
                          3: zmt9eHpRJa7PuxPm0_85An8iRVA.roa (hash: R6+jR3yHTTElk0RHcqex3IqsMXUNl1K4RWqQPiXT3sU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:e1:d4:66:f6:8e:83:87:5f:cd:09:aa:ce:b4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
        Validity
            Not Before: Nov 23 15:00:28 2024 GMT
            Not After : Nov 24 15:00:28 2024 GMT
        Subject: CN=4b0dfdc5c1d7a74a0a427db1858956f0f4e9f500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:2d:15:6c:f6:3d:be:ac:07:1d:98:4f:e1:
                    77:56:32:a1:d0:b6:db:ee:c4:16:4d:ba:e4:08:d9:
                    ee:69:69:a3:29:3d:f6:f7:3c:86:f0:f3:61:cf:e5:
                    95:b1:4a:1c:11:46:85:c9:1f:ae:3b:4c:03:d5:df:
                    43:ff:5a:19:a6:8e:b0:a7:cf:5f:d2:8e:98:b9:05:
                    90:e5:c0:28:9f:94:1b:5e:0f:f7:39:d5:ae:f3:59:
                    d9:80:82:dd:27:b6:f6:e5:1e:c1:9d:62:f6:6a:3e:
                    06:82:26:bd:68:86:ca:25:06:09:9d:12:46:68:42:
                    b5:9f:6e:85:88:64:27:c6:80:f9:8f:e3:f2:8a:31:
                    77:10:46:6a:82:d7:0e:a9:da:61:61:e4:cf:7c:ed:
                    14:70:d3:12:7b:44:05:d3:15:d4:aa:ad:20:fb:49:
                    b2:14:4e:a3:06:31:44:af:d2:44:96:80:13:cd:43:
                    37:1c:87:9e:d6:b4:3e:c5:2f:20:07:66:b8:30:ef:
                    fe:a7:12:5b:e8:8d:94:34:d3:84:1f:fe:62:f7:f6:
                    d4:a6:e8:c8:7b:cd:d7:a7:10:aa:3f:47:ec:07:98:
                    03:69:d8:11:8e:9c:27:ae:23:dd:f4:b2:ea:44:e7:
                    ef:f9:46:9a:43:25:57:c0:e2:3b:98:02:e4:ed:24:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:FD:C5:C1:D7:A7:4A:0A:42:7D:B1:85:89:56:F0:F4:E9:F5:00
            X509v3 Authority Key Identifier:
                keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:3f:30:84:ef:3c:45:42:d2:8b:93:65:e0:c2:fd:ff:73:
         d8:f1:39:d8:d2:32:cb:be:59:08:25:c6:61:b6:0f:12:99:0c:
         b8:f0:c8:2a:0c:81:2a:29:49:1c:ec:08:a1:f5:74:3a:59:5c:
         3f:62:06:23:7b:d8:38:36:da:ad:64:64:cf:31:61:44:f0:38:
         c5:93:f6:33:c1:ca:77:e8:4e:9e:db:5c:1c:25:d4:99:7a:ee:
         2f:e9:05:c1:c6:d8:2a:79:9c:df:50:13:6d:01:4d:26:4c:4b:
         d0:e0:46:0b:c6:6c:39:54:ad:ce:59:39:55:f7:32:66:60:e4:
         99:4d:14:5b:e8:e5:3b:48:97:f2:e2:7a:3c:bf:72:68:17:16:
         9c:f2:ef:88:00:ae:b2:f9:bc:f5:f4:f5:d6:d6:97:2c:f6:7a:
         dd:70:ec:f3:33:f4:63:58:ca:09:47:4a:db:32:eb:04:59:c3:
         22:c8:18:05:08:5b:b9:2a:a2:7b:69:0b:0a:92:90:ec:70:1b:
         02:4f:89:9a:d4:b0:ac:c3:72:d0:fc:5b:ef:81:46:f4:e7:6d:
         e5:a7:2c:cb:ec:cc:f5:2a:74:12:29:c8:ad:75:5d:17:51:3b:
         20:c2:e2:9b:4c:ab:c7:19:a1:23:ef:80:0d:92:75:3b:c3:7a:
         4c:21:f4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:19 2024 by rpki-client on console-ams.rpki-client.org