Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File:                     o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier:          H9U+X3MKYLhspXBLEfMWGjeQwIslAO0miv5WmDmQeZY=
Subject key identifier:   34:DA:F0:12:1D:FE:82:C7:5D:A3:33:54:5E:97:BE:EF:03:A0:EE:C2
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer:       /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial:       01935A2EC21CBE6232424991838A3BD2339E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number:          0263
Signing time:             Sat 23 Nov 2024 18:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 18:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 18:00:33 +0000
Files and hashes:         1: 1RoA426X5sTVF2X7zHjBvibaJKE.roa (hash: ZA2zpF05BxMDUkvGDpFi2Dt5h4zc5tX17PxdutZuMhI=)
                          2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: iJem7XGLYeF4kEAti45df3oLMQKmfZHF7O5pk6PlMzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:2e:c2:1c:be:62:32:42:49:91:83:8a:3b:d2:33:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
        Validity
            Not Before: Nov 23 18:00:33 2024 GMT
            Not After : Nov 24 18:00:33 2024 GMT
        Subject: CN=34daf0121dfe82c75da333545e97beef03a0eec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:16:fe:22:26:77:ef:ed:67:1f:d6:82:25:2d:
                    c5:fc:28:c7:60:ca:a7:3a:53:ab:43:23:f9:9a:c7:
                    13:3c:5a:a0:7c:50:11:62:6c:c4:4d:88:4f:72:eb:
                    55:4b:e9:9a:bc:99:5a:5c:c8:45:5a:60:cc:e5:48:
                    19:a3:c8:20:8b:ad:65:08:ea:88:29:78:44:ac:d1:
                    e1:10:6b:82:6b:ae:cd:d5:74:4a:1a:ff:93:e3:d6:
                    46:e3:ba:6c:7d:17:c8:b2:53:6e:6e:f4:84:d4:5a:
                    d7:b5:0b:d2:9f:c0:65:66:0d:b0:34:05:cf:b1:ce:
                    69:b5:43:8f:86:cc:84:32:a2:54:6e:ff:5d:12:4c:
                    91:2c:f6:a4:8e:d9:77:c8:bf:97:84:f1:cb:2f:25:
                    b0:79:57:12:14:ca:61:0a:43:d6:e4:e9:a3:bd:3f:
                    4f:bb:74:ae:7b:27:63:d1:c6:8d:39:6f:47:f6:5d:
                    2e:c6:be:07:ce:23:58:5b:60:d2:a6:4d:ed:0a:b1:
                    e3:79:4b:28:0a:2e:9e:1a:21:c7:30:9c:09:36:26:
                    8b:77:23:52:d2:47:ee:33:35:ca:f8:a8:97:f1:e1:
                    ea:aa:6c:6d:e6:48:0c:77:ce:4f:36:11:0d:de:aa:
                    81:7e:92:8b:05:50:5f:7a:65:7d:3e:2b:47:36:99:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:F0:12:1D:FE:82:C7:5D:A3:33:54:5E:97:BE:EF:03:A0:EE:C2
            X509v3 Authority Key Identifier:
                keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:ef:67:bc:68:28:2d:96:fc:96:eb:fd:82:c9:be:a9:ec:
         b1:11:98:b5:b3:56:31:21:2a:1d:16:52:de:e9:bd:88:6c:76:
         be:c0:30:36:29:b6:b8:c1:66:63:49:29:c6:31:a7:2d:c5:f2:
         3b:99:42:62:79:5c:ad:9e:a2:3f:b9:d0:a0:a6:7b:84:9f:ed:
         8d:99:83:df:6b:5e:ae:cb:de:b2:e9:45:4a:c8:91:fb:8b:1d:
         3e:cc:6f:dc:4f:f9:53:ac:57:07:a9:01:29:d3:65:c6:80:6b:
         ed:11:24:85:b5:91:2b:60:74:ab:b0:f2:8f:53:08:bb:39:12:
         a2:ee:27:07:2a:c8:03:42:c8:fc:a2:a7:74:9d:b5:ee:eb:67:
         e4:74:d8:0d:b4:af:06:62:d2:4b:ed:22:02:f6:82:21:44:c7:
         ba:a3:50:41:49:27:ee:7b:50:c1:d6:20:d3:9a:37:a1:78:cc:
         1d:1e:5e:72:f7:18:44:f6:29:30:a7:cb:63:07:f6:0c:36:be:
         17:54:ed:14:92:fa:01:36:36:37:fc:2e:2c:0d:93:97:f4:b0:
         5c:2d:2d:73:00:76:21:a2:72:7b:2e:40:b5:5f:ff:5d:5e:ef:
         fe:fa:08:37:a8:74:d0:ef:0e:60:3f:5c:59:c2:3a:6b:29:b6:
         cb:a4:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:35 2024 by rpki-client on console-fra.rpki-client.org