Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          x+CzFk1jPjD8pHCMKg3FrN+wBUdVXfUTUwmNlCQ19zk=
Subject key identifier:   39:E4:A7:BA:03:63:9C:C9:33:12:A1:22:E2:EC:67:65:B6:99:BE:EB
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019356897AD0ED9434274FB5F289918A9690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          02CF
Signing time:             Sat 23 Nov 2024 01:01:10 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:10 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:10 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: wztdOBDmgwpB2roJJ2qdzAk25VKcuduZwD8FMktfX8Y=)
                          2: g_uwwu4cwJv41RJzLzJsLG7iYGc.roa (hash: BzuXZNsREhhcgP77eRePbtViTChfb3j2Bae4v6n6c0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:7a:d0:ed:94:34:27:4f:b5:f2:89:91:8a:96:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Nov 23 01:01:10 2024 GMT
            Not After : Nov 24 01:01:10 2024 GMT
        Subject: CN=39e4a7ba03639cc93312a122e2ec6765b699beeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:65:46:c5:6b:bd:f2:73:17:09:d9:8d:79:
                    7d:36:c0:d4:5d:b5:6f:0f:ad:bf:c0:ee:f1:a1:d0:
                    2b:38:e9:fb:69:61:32:ea:3f:00:1e:a8:51:09:aa:
                    d6:a6:0c:c9:9a:00:08:d2:8e:80:1d:98:37:f3:20:
                    50:6b:f3:5b:1b:5c:7f:91:f4:47:7c:16:38:10:57:
                    26:1a:c3:e5:cc:e4:82:e5:60:fd:43:27:66:c9:7e:
                    3f:f2:69:5e:ff:12:46:c7:4d:be:06:07:fd:c5:91:
                    83:47:67:09:6d:4c:35:fe:e5:12:cc:c3:1c:0b:36:
                    ba:1a:e1:63:bc:0e:6f:57:f3:b8:ca:51:45:db:e2:
                    d5:95:ec:76:c9:3a:3d:b3:01:60:c8:83:fd:62:2a:
                    82:9e:3c:b1:74:57:99:af:23:24:9e:4f:dd:56:c0:
                    39:fb:56:7f:ea:c6:27:69:51:8d:7e:a9:1d:7b:f0:
                    bb:29:b2:d6:3c:a6:29:60:1d:ba:0c:27:1d:86:fb:
                    78:8e:ec:11:2c:49:f5:33:d4:ff:f6:9d:ec:7c:d0:
                    92:ac:ad:da:54:e3:0a:f2:20:db:a4:1d:39:6d:77:
                    eb:16:56:33:58:fd:9f:6f:1e:bc:6d:18:8b:b8:8e:
                    60:85:40:4c:35:a0:f4:38:18:fd:51:47:9b:6a:ae:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E4:A7:BA:03:63:9C:C9:33:12:A1:22:E2:EC:67:65:B6:99:BE:EB
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:c9:cd:ca:27:6f:aa:13:2a:c4:26:df:9a:f0:01:ec:77:
         ae:3d:da:49:83:cc:81:8c:4f:8a:76:a4:2b:e3:40:ab:58:1a:
         38:8d:eb:a6:3e:a9:b5:a0:b5:62:64:62:60:42:db:08:b8:6d:
         1a:71:39:5a:03:ba:f8:c8:6d:a4:b2:72:dc:96:75:e3:7d:53:
         8a:12:01:2f:cf:d5:4a:0d:90:7d:4a:17:e8:e6:a9:06:81:6d:
         f1:e7:b8:7a:e1:3b:c5:79:16:c0:57:7d:28:10:06:88:6b:bc:
         65:af:bc:1a:d7:fb:19:08:6b:8c:5a:fd:4c:20:c7:58:47:2d:
         3c:c4:61:33:64:42:a8:79:c3:cf:26:a9:f5:f6:6f:9e:99:c0:
         84:cc:13:59:57:58:6a:07:f6:26:b4:4e:3b:a3:40:cb:b7:0c:
         b7:a7:e1:fd:d6:4e:98:69:84:af:ad:3f:19:a9:50:39:0f:64:
         9a:8d:24:9c:7d:61:7c:ab:e0:f8:a6:ab:e6:c3:bb:8c:60:f6:
         b2:68:11:33:22:16:c7:1b:ca:b9:43:0d:89:17:1b:6c:b2:b1:
         a9:8b:56:7e:7d:63:e5:75:1b:25:1e:85:ae:a8:97:d6:27:cf:
         02:63:9c:cb:ce:ad:8b:09:b7:cf:78:c3:10:00:a1:69:5c:d5:
         df:cc:d7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:36 2024 by rpki-client on console-ams.rpki-client.org