Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          hiaxFIVUpas/0vnnb00y4WzKz75O7GLleJ9ukSBVFHY=
Subject key identifier:   0F:3D:73:62:3D:5C:31:BB:5C:F2:8C:85:20:C1:E5:18:5C:25:F4:3C
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       019358091E318F7B2E34D9C8C1D979C61DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1387
Signing time:             Sat 23 Nov 2024 08:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:12 +0000
Files and hashes:         1: 0kG127HMx3Up7HwmoOkQuxb85fk.roa (hash: +RLBC+Xiypte8w3y9qGjAmW2PoXvZ77VA/iglOOFBnU=)
                          2: E-EyE74UGuFTFOCAg6Iq3uuDykg.roa (hash: ObmWxMPe7A5e1T7hl3Jeq41YKKrDu3w1pBn0Xn+M/Eo=)
                          3: YcwI2fZlMwxUA69CQFBEmIR733E.roa (hash: et8GDR6ngYKl0AZO8Wq7BvgLSkJvYviEhnike/pXqBE=)
                          4: _V4EtpOY4VuFJtOHbfZaqbTRckA.roa (hash: O/Jy8ZrPqzyoLRaVVKXm5fm6BNuqIsf9/MfdWhjCUBk=)
                          5: p5BDiMtYrJOu9wOM1VuBPYsI8cE.roa (hash: yNEIHu3jMD0k0ISqlt/OHoWcfB99X6uVZ5+eiOVA1vU=)
                          6: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: Ini9uexvqj/lfP6+11avXW9FnEODcBeic2AkKiogv7A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:1e:31:8f:7b:2e:34:d9:c8:c1:d9:79:c6:1d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Nov 23 08:00:12 2024 GMT
            Not After : Nov 24 08:00:12 2024 GMT
        Subject: CN=0f3d73623d5c31bb5cf28c8520c1e5185c25f43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:05:88:e9:26:15:59:83:0c:02:f0:11:a9:
                    19:f7:5b:a6:9d:79:77:1b:6d:8e:a9:69:e2:10:1e:
                    a0:aa:89:df:a1:aa:bb:1b:33:7c:72:8f:19:e8:bd:
                    0f:6b:d3:26:e8:12:50:51:91:d7:15:93:6e:8a:c1:
                    43:4f:f8:45:98:bb:df:3b:ee:97:13:e5:3d:52:a7:
                    d0:96:de:18:da:2e:de:1c:e3:eb:5a:59:e7:c7:25:
                    91:b5:37:ec:90:9c:d7:1f:72:aa:5c:6b:3c:06:01:
                    d6:f7:14:62:f8:f5:7e:56:4f:e9:0c:7b:e6:7c:31:
                    7f:8b:84:01:f8:52:e9:ac:c1:1e:39:dc:0f:6a:f4:
                    cf:5a:87:da:af:d9:3a:f0:49:ca:a8:bd:98:2f:e1:
                    ec:73:ee:94:4f:34:30:89:92:d0:34:70:e7:2a:7b:
                    13:29:5b:c7:d7:9a:08:8a:c9:79:18:f3:dc:67:15:
                    53:f3:9f:18:0a:60:04:3e:af:83:37:2b:d0:8d:75:
                    b7:28:bf:89:db:4a:db:f5:83:00:ec:ac:03:ce:2e:
                    86:e2:70:c2:31:86:27:0f:99:e5:f7:22:a9:a1:7b:
                    ff:2d:88:78:3b:91:d3:7f:bc:f4:4c:34:79:ec:9a:
                    06:d3:79:76:11:26:2b:82:d9:73:83:2e:f3:0f:cd:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3D:73:62:3D:5C:31:BB:5C:F2:8C:85:20:C1:E5:18:5C:25:F4:3C
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c2:3a:5e:c2:b8:2f:94:39:5e:0d:ee:e0:43:10:6b:4d:26:
         80:c5:c2:74:c0:ae:29:62:d7:15:00:63:42:12:0d:24:61:46:
         74:4e:c8:24:9e:87:29:1f:89:64:4e:27:87:b8:68:04:f7:97:
         2e:d3:ea:d7:92:ec:4a:1a:18:a9:b6:5b:58:6e:78:67:5a:a5:
         da:1f:0a:dc:73:b8:b7:ef:f6:25:f3:c2:22:33:00:5f:ec:49:
         d5:e9:0e:f0:43:18:32:a3:91:fe:ec:83:9a:96:65:d2:d9:5a:
         df:e8:47:cb:67:53:30:00:76:39:38:e5:ba:94:d6:8e:27:dc:
         02:61:d2:52:aa:f5:04:f8:ad:05:36:a7:18:91:02:8d:74:91:
         44:c9:33:0f:f0:00:9b:5b:b0:f3:4f:27:08:84:83:34:02:f1:
         52:f6:03:11:ea:8c:d0:24:8a:97:ee:e4:ae:1c:a1:78:61:35:
         bd:35:f3:70:a2:55:10:c5:c0:f7:10:c9:95:ec:f3:89:d8:75:
         54:76:53:f3:39:ef:d6:9e:10:f9:7e:da:d0:ac:e4:2a:fc:12:
         d4:a1:57:ad:c0:fd:e0:9a:e1:7b:93:48:0a:5a:c9:90:05:2f:
         71:02:d4:87:72:69:46:70:56:02:c8:ce:6b:83:49:91:c7:1e:
         d0:af:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:22 2024 by rpki-client on console-fra.rpki-client.org