Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File:                     oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier:          eIQpXvuMe35qALrvz39uyvTQmK1EXEx9p08+GJevapY=
Subject key identifier:   13:7F:11:54:95:A3:12:A4:09:1A:22:63:69:A2:73:21:4D:4C:2E:70
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer:       /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial:       01936AB4AEE09382315324AFE57FD235D6F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number:          0DCC
Signing time:             Tue 26 Nov 2024 23:00:46 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:46 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:46 +0000
Files and hashes:         1: cHHMv5BIz46FvPGMMMjUWqnPpMY.roa (hash: aPFV2kTNi+hLzM09RgNReb2q2nYYTCgSO1CbGaIZWjg=)
                          2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: ISSHtAvZneTZA4C+FP6bRWW/ZwXu/C0JpXwNQjIh0x8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:ae:e0:93:82:31:53:24:af:e5:7f:d2:35:d6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
        Validity
            Not Before: Nov 26 23:00:46 2024 GMT
            Not After : Nov 27 23:00:46 2024 GMT
        Subject: CN=137f115495a312a4091a226369a273214d4c2e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:3c:89:f3:0c:a9:cb:0e:5f:20:89:99:b2:
                    37:1b:66:d0:9c:32:df:ac:90:76:5e:44:95:f4:d5:
                    dd:84:eb:c2:f2:5d:89:5d:3c:1d:b0:2c:29:9b:2e:
                    ab:7d:b9:e4:49:82:a8:9e:e0:33:b5:05:20:f5:89:
                    3b:d0:63:8e:5e:61:23:5f:b3:3f:08:87:70:03:5b:
                    d1:4d:a0:42:1c:2f:f3:cd:59:e5:21:d1:e4:d2:70:
                    e0:37:61:98:c3:f0:e9:5c:82:6a:00:e7:6c:27:dd:
                    79:99:fa:da:0c:9a:6b:55:4c:5e:82:98:7e:81:06:
                    da:50:b0:d7:3d:f5:94:96:84:1d:54:cc:21:9c:c6:
                    9a:5a:3d:ad:ae:f5:c2:63:8e:09:b0:91:bc:b8:5c:
                    16:2d:d0:e1:03:a0:a2:55:be:91:c0:f8:d5:19:38:
                    4b:a4:99:1a:c2:45:bc:4a:16:55:3e:cc:c0:a6:69:
                    2b:99:4a:ba:0d:b9:92:e3:96:46:cb:00:62:9f:54:
                    4a:26:24:5b:c8:6d:cd:74:fc:51:71:96:99:ce:82:
                    61:5d:56:32:e3:1d:ec:76:e2:da:27:8b:3d:d3:ef:
                    e8:d1:96:3a:6e:2a:80:99:43:86:71:a5:e2:50:6b:
                    05:ca:c5:83:a3:cd:5d:29:fa:b7:54:c7:e0:19:a5:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7F:11:54:95:A3:12:A4:09:1A:22:63:69:A2:73:21:4D:4C:2E:70
            X509v3 Authority Key Identifier:
                keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fe:52:ee:79:3b:e5:de:e1:77:78:f0:df:25:6d:b2:96:21:
         98:a0:ae:fe:93:83:60:7f:46:5b:27:00:5c:30:ef:87:0a:35:
         08:ce:5a:2f:20:04:ce:47:3a:04:e3:34:cc:e1:36:ae:7d:c4:
         bd:41:02:9e:90:95:cb:03:12:6c:66:06:16:a7:d9:1c:93:09:
         c8:43:51:2c:b3:a2:14:c7:ad:4a:ba:0e:af:c1:fe:a6:b4:45:
         9f:32:b4:d0:71:aa:55:64:73:f7:7e:e8:58:61:46:64:81:e7:
         56:cc:59:88:0c:2d:ae:8e:0d:24:40:74:b4:39:97:b3:b4:43:
         b7:8e:dc:e4:98:1f:6e:e3:80:a2:63:c2:ab:c8:29:a4:85:4e:
         5a:e5:53:92:21:56:b3:96:94:95:21:eb:ad:32:78:dd:65:8b:
         6b:d4:a8:86:1f:cb:23:30:58:38:9c:63:0b:cf:aa:d2:fc:51:
         64:2f:02:3e:fa:18:3b:55:4a:a0:8b:fb:52:ea:f7:cd:aa:67:
         b2:58:a6:21:8d:2c:88:fa:ac:49:b5:7f:17:20:86:0e:13:a0:
         d9:45:d0:cf:45:ff:a3:dc:80:49:9c:b4:92:d5:29:31:13:3b:
         f8:5a:3b:c1:c5:17:f6:5a:5b:9c:60:d4:76:fc:62:82:26:c5:
         c3:46:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:25 2024 by rpki-client on console-ams.rpki-client.org