Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File:                     o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier:          uXHIDNsQUisR6tfMVUbcRyBXstShdCz8s3stgRJoPPs=
Subject key identifier:   65:32:81:1E:5A:ED:48:73:88:AB:53:1A:DE:4A:59:EA:F9:22:F3:7D
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer:       /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial:       019239265F6E4E346115DF0B8FB581458C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number:          0C5B
Signing time:             Sat 28 Sep 2024 15:01:09 +0000
Manifest this update:     Sat 28 Sep 2024 15:01:09 +0000
Manifest next update:     Sun 29 Sep 2024 15:01:09 +0000
Files and hashes:         1: 5jspvKShOwsdtbECS6a0xbzszew.roa (hash: 554zPy5ZLU/sOjhjrEHk/6M3RPjgsZZUBEOalaoPXGM=)
                          2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: MJ+TkVEpNc4UcnemsOADxllE4Fp9Io+2+j7r3BJwH9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:26:5f:6e:4e:34:61:15:df:0b:8f:b5:81:45:8c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
        Validity
            Not Before: Sep 28 15:01:09 2024 GMT
            Not After : Sep 29 15:01:09 2024 GMT
        Subject: CN=6532811e5aed487388ab531ade4a59eaf922f37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:aa:8b:92:ed:47:8c:f6:06:b3:2d:20:f1:
                    7b:90:3d:62:3c:7a:85:54:77:8d:23:80:5d:ee:01:
                    8f:92:4a:6a:d0:ef:1c:67:f8:86:e1:f4:55:d1:c1:
                    e5:15:2b:62:8a:47:0e:c0:bd:e3:6d:39:fa:a7:44:
                    d9:18:8e:af:83:78:ff:43:35:eb:11:dd:57:af:2f:
                    5b:69:21:53:1c:9e:b3:7f:b7:e4:b4:cc:fb:e0:13:
                    e2:25:db:f4:03:a3:15:e3:7d:71:42:2c:62:8f:27:
                    ad:ea:e5:67:30:93:5a:18:9b:16:ee:43:fe:00:59:
                    cc:62:0f:bc:66:a2:08:fb:1a:80:88:91:14:a6:16:
                    86:35:8e:b0:c2:8c:e7:de:27:fa:d0:6d:bc:17:90:
                    b5:01:a7:a9:43:97:b3:90:0e:8b:e9:ee:ce:2a:cc:
                    b3:cd:a9:c9:9f:b8:4d:ba:39:ea:6b:9b:12:48:36:
                    f5:33:2f:e9:51:d7:0a:57:f1:a1:54:cd:a6:86:22:
                    4c:b4:cf:18:7e:ab:3c:11:83:26:53:26:50:97:02:
                    ed:d9:c9:5c:3f:2d:3d:20:d0:06:2c:ae:b6:79:1b:
                    d8:a9:f7:38:0c:80:d6:8e:f7:69:f5:6b:85:e6:e6:
                    06:70:c4:a4:78:c6:84:8b:69:c7:a4:5a:4f:0f:40:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:32:81:1E:5A:ED:48:73:88:AB:53:1A:DE:4A:59:EA:F9:22:F3:7D
            X509v3 Authority Key Identifier:
                keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:8a:2c:03:47:ea:fe:70:36:86:6e:e8:da:09:3c:af:47:
         c2:e5:7a:e6:4e:13:ef:73:30:22:55:d9:7f:2e:6b:f9:3b:30:
         9d:f5:7a:2c:1a:d5:68:58:4e:74:59:4e:ac:ff:7d:44:7b:97:
         b8:e1:b3:57:0c:c0:60:a7:52:11:0b:57:f5:d6:9b:97:ef:93:
         55:dd:82:94:cd:12:26:fb:ad:8e:5f:cd:d0:9b:70:50:de:9a:
         d2:92:02:81:c8:55:01:20:60:f3:16:7a:31:26:c9:8f:06:06:
         f7:c7:33:62:80:86:70:ae:4c:96:91:56:57:c8:08:b8:8c:39:
         ca:d0:8f:41:e7:9f:73:72:cf:96:6c:61:d8:a9:ac:f5:1f:e1:
         5b:ef:13:8b:2c:65:f6:7c:9d:dc:d0:78:70:7c:ca:3d:2e:e6:
         4f:a9:55:b4:83:cc:4e:13:13:45:18:88:37:aa:ee:11:91:37:
         91:ef:3a:35:71:e5:84:af:83:93:79:b0:b8:0c:01:71:b9:d7:
         60:f3:4b:96:f4:0c:a8:2d:26:89:be:5c:5f:6b:e8:a4:a8:b0:
         0f:da:41:4f:a9:de:53:ac:70:d6:13:32:f9:b9:60:07:77:f3:
         ab:38:76:95:a0:ee:b4:ce:fe:51:a4:c7:b2:82:75:9b:72:0f:
         3b:f7:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:34:40 2024 by rpki-client on console-fra.rpki-client.org