Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File:                     Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier:          Tr0QK8nE+c5qlk+3OeaH1aOay6sL1ePtSgGZSxX0Ag8=
Subject key identifier:   BC:FB:9E:07:60:7E:CA:00:E1:38:AA:64:67:43:CF:2D:02:0F:09:E5
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer:       /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial:       019369DA30E55AECC786C29B0B820256C5A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number:          07F3
Signing time:             Tue 26 Nov 2024 19:02:07 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:07 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:07 +0000
Files and hashes:         1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: XCCpGHERMx7mqKdXUYVRHAU14sLE6PZ4aCdFc0NmRJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:30:e5:5a:ec:c7:86:c2:9b:0b:82:02:56:c5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
        Validity
            Not Before: Nov 26 19:02:07 2024 GMT
            Not After : Nov 27 19:02:07 2024 GMT
        Subject: CN=bcfb9e07607eca00e138aa646743cf2d020f09e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:86:e4:c1:88:69:6e:b5:d6:d3:c7:51:f8:
                    19:ae:58:86:0e:5d:e7:2b:35:72:1c:18:c9:a6:93:
                    f1:85:85:b3:8d:7a:94:a6:31:46:64:61:37:22:2b:
                    e3:90:3e:22:9c:c4:dc:75:f3:93:37:b5:77:a0:04:
                    20:ec:f8:c8:f1:6a:76:b3:33:a4:42:b9:3b:5c:de:
                    fc:49:d1:2b:34:c0:c5:e8:90:4e:66:d4:6c:cf:9b:
                    0d:93:c0:c8:35:54:a9:b9:fc:9c:35:8f:0b:bd:c4:
                    da:55:b6:2d:2c:75:4a:5d:1f:b6:b1:30:30:34:78:
                    37:70:32:5d:9d:9b:5e:7b:54:3b:a0:22:3b:e2:d6:
                    e9:13:fd:a5:78:19:6d:21:0d:03:e9:92:b7:d4:34:
                    39:4e:b2:61:07:79:58:ce:7b:b4:34:32:47:81:8c:
                    9c:1c:43:c0:37:d7:1d:a1:02:39:c3:d5:9d:b5:b8:
                    a3:84:65:80:43:74:7a:b7:1e:5e:bb:bb:8c:de:6a:
                    88:bc:36:34:0f:41:0d:91:f1:2d:06:e7:13:32:7a:
                    5f:77:0c:0f:c8:bd:07:12:00:20:53:06:b9:35:a7:
                    1c:e6:cd:e4:a3:d7:9a:85:b9:d6:9b:bd:93:c9:07:
                    47:c8:f0:19:37:61:22:08:86:18:0a:31:b4:d2:ce:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FB:9E:07:60:7E:CA:00:E1:38:AA:64:67:43:CF:2D:02:0F:09:E5
            X509v3 Authority Key Identifier:
                keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:61:6c:6e:7b:29:0e:a3:79:4f:66:96:1d:8e:9f:8a:10:70:
         17:03:41:58:ed:a2:28:fd:73:61:75:06:af:83:d5:ce:a7:63:
         ce:6c:66:db:e6:23:dc:f7:ae:26:b6:69:b3:1e:24:1d:49:b7:
         48:ed:60:a8:d9:71:c9:82:d3:11:f4:9d:a4:2f:88:8c:90:97:
         58:35:be:18:b5:50:d6:ad:75:07:80:87:10:fe:58:5f:8d:b3:
         5c:42:9e:a9:87:ad:58:d0:1d:80:09:f9:25:a0:5f:ca:3e:85:
         2b:6d:b3:d0:0d:d3:76:f4:cf:43:5c:64:b7:9c:eb:86:0f:37:
         8d:65:57:88:df:5c:d7:f8:76:06:48:ba:54:0b:fc:b3:e7:31:
         39:8a:d6:dd:6a:8d:6b:03:21:05:77:2a:c2:8a:8d:03:c7:2e:
         ce:ee:da:65:b7:7f:da:56:64:71:7b:b4:da:8c:06:8e:d1:52:
         7d:8e:76:c9:49:56:75:73:46:e6:dd:5c:f6:9d:13:c4:d3:4d:
         05:98:c9:08:41:31:34:39:a5:6c:c7:62:84:46:f5:cf:4b:04:
         e9:24:69:5a:7c:3b:e5:33:e8:5a:dc:2f:52:12:4d:e9:8d:60:
         0f:f4:39:eb:7b:f9:37:51:ca:c4:88:a0:94:0d:43:7b:dc:c7:
         cf:fc:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:07 2024 by rpki-client on console-ams.rpki-client.org