Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File:                     _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier:          CHARsgsJ81DB8XPagIjGvYasQlFJz/FOiHwh6jZNOfk=
Subject key identifier:   7B:5E:82:DF:EC:37:6A:C1:D1:A2:F7:93:FA:97:BB:D4:3D:1C:67:ED
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer:       /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial:       01938BF6B134894A15F25BE420023BD9A70A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number:          138F
Signing time:             Tue 03 Dec 2024 10:00:20 +0000
Manifest this update:     Tue 03 Dec 2024 10:00:20 +0000
Manifest next update:     Wed 04 Dec 2024 10:00:20 +0000
Files and hashes:         1: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: 6H3YrWgSR7qfJ9mhrioeP2XxmWzAVYaNnr4WDoknnPk=)
                          2: mJ7HdLkkIFRzQlKkjwVqJxOFF0Q.roa (hash: OBTQsHeutAbhggxgCcwwaekU7XUnz7SmblYZIVYx7YQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:f6:b1:34:89:4a:15:f2:5b:e4:20:02:3b:d9:a7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
        Validity
            Not Before: Dec  3 10:00:20 2024 GMT
            Not After : Dec  4 10:00:20 2024 GMT
        Subject: CN=7b5e82dfec376ac1d1a2f793fa97bbd43d1c67ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:78:a3:00:13:4e:f0:1d:ea:bb:0a:64:1b:
                    7d:b8:1c:08:cb:0b:3e:84:bd:13:fb:35:78:65:e7:
                    fe:ac:29:99:41:4e:f3:57:84:a4:b0:52:6e:c4:8a:
                    95:82:56:b0:00:b5:7d:d3:41:63:79:9d:88:63:21:
                    e5:89:7b:36:bf:a3:c8:e1:41:9c:94:10:68:d3:cc:
                    ed:69:e3:c8:83:1a:6b:d5:e9:1e:82:8c:aa:44:54:
                    90:34:d2:4c:6f:eb:79:f8:9d:2a:78:2a:63:6c:38:
                    be:0e:f7:9e:bf:ae:d6:7b:4d:f1:e8:1a:77:df:fd:
                    86:05:ca:83:1f:d9:4d:1a:0b:c6:eb:c3:1c:d3:81:
                    c0:1f:39:9b:08:1f:4b:e4:b0:2d:21:40:29:29:13:
                    ca:d5:15:4c:17:d6:a3:8e:fc:d8:ea:60:54:a1:0b:
                    4f:d3:7a:7b:3a:5f:54:56:d6:44:c5:5d:b7:ac:1c:
                    82:c4:38:59:df:36:ff:5d:ba:3a:83:09:45:79:fc:
                    3d:27:7f:59:0c:c8:70:38:5d:39:68:ce:62:aa:d4:
                    f0:81:7b:81:22:5f:26:71:74:da:1c:03:0c:02:53:
                    c0:67:5b:fa:a1:9f:9d:d9:f9:8c:47:ce:80:9a:47:
                    16:2f:67:2d:8d:14:35:b0:27:a9:06:f7:9f:6e:1c:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5E:82:DF:EC:37:6A:C1:D1:A2:F7:93:FA:97:BB:D4:3D:1C:67:ED
            X509v3 Authority Key Identifier:
                keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:69:a7:ae:ed:e4:c7:48:1e:0d:5b:6a:a2:3a:e9:b0:3e:e4:
         38:e3:16:21:44:33:67:e7:de:79:49:68:73:92:85:63:bb:f6:
         62:13:f1:b5:27:7c:26:f5:14:a9:f3:91:19:9e:f2:cb:6a:09:
         d9:ab:90:16:74:ee:b5:6f:50:cb:f2:6f:90:20:8b:a1:26:46:
         03:80:ac:24:a6:fd:b4:03:ea:70:d9:8b:a1:c8:4c:d5:d5:c4:
         a0:1c:9c:ca:38:50:a6:62:78:6d:a6:bd:65:3d:e1:eb:80:9c:
         4f:f7:2b:5a:bf:b7:78:fd:ac:3f:08:8e:14:2a:da:61:d7:9e:
         01:c8:ce:0c:9d:e7:d7:30:2e:79:a7:bc:eb:f1:f0:5f:9c:8e:
         8c:77:db:ab:d4:64:17:3c:8b:bf:0a:5c:07:95:b9:bc:9c:26:
         90:23:8b:3e:d6:12:1a:be:83:20:58:84:67:81:70:09:df:c3:
         fa:9b:6e:41:4b:e4:ba:45:ae:84:8f:e4:d0:15:dd:cd:31:b7:
         e4:ec:19:6b:53:13:b3:23:95:07:a4:73:a9:c8:b0:fe:5a:11:
         8e:e6:cb:5f:c0:a5:d6:7b:6e:45:dd:bb:7e:a3:25:b9:0f:19:
         69:bb:d1:d5:c1:c7:b6:c3:b8:85:5d:5e:24:21:b5:84:14:d8:
         0e:54:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:53:54 2024 by rpki-client on console-ams.rpki-client.org