Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File:                     DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier:          mSnZm5BhcJYJRbwLBuvXuMH40jNjnwBs2YX9BLI6CP0=
Subject key identifier:   B6:A8:FE:F7:EC:9E:23:80:9B:51:29:02:44:44:3B:C2:02:66:5E:E4
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer:       /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial:       01936BC93C9E257BDCE7CB63DA45C30D900B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number:          114E
Signing time:             Wed 27 Nov 2024 04:02:50 +0000
Manifest this update:     Wed 27 Nov 2024 04:02:50 +0000
Manifest next update:     Thu 28 Nov 2024 04:02:50 +0000
Files and hashes:         1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: m+Yp+dWnCd/GFxmUvblX1kw+tT7e/a7K0BZrze1WVf8=)
                          2: ZtQJs8_eQMeo6nOAoxa5nOfbbcQ.roa (hash: enn42o3Ym/kOxyHdmFmn6clJsf47uEFpc466xlwkd28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c9:3c:9e:25:7b:dc:e7:cb:63:da:45:c3:0d:90:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
        Validity
            Not Before: Nov 27 04:02:50 2024 GMT
            Not After : Nov 28 04:02:50 2024 GMT
        Subject: CN=b6a8fef7ec9e23809b51290244443bc202665ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:cc:b9:44:f3:e5:8a:98:c2:a7:f5:2a:68:
                    83:65:0a:a9:2b:46:ae:38:00:b4:54:d0:a6:90:20:
                    78:fb:bd:9d:60:cb:ac:cf:08:f4:27:56:f9:b8:7f:
                    b6:20:3b:e9:23:c5:f8:22:55:46:e8:c7:0b:06:4e:
                    b9:b5:1b:d3:16:c6:61:62:97:2b:63:03:45:ca:9e:
                    9b:1e:4e:53:11:e5:3a:80:30:64:f4:cc:ee:e6:9a:
                    9e:27:74:47:ad:8c:31:1a:8b:b7:44:f0:2f:76:1d:
                    03:2d:8c:83:bb:39:92:11:1e:10:79:f0:32:7e:bf:
                    fc:37:07:a7:d2:06:a0:2b:ad:0e:d0:86:e8:68:71:
                    cf:24:66:94:36:73:5c:df:aa:97:76:93:8b:41:e0:
                    29:ae:f3:ba:7c:8a:bf:ee:2d:31:7b:8e:e3:94:24:
                    8c:10:43:92:d0:e9:e9:28:2a:bd:f8:47:83:0b:47:
                    1c:88:88:13:18:f1:c1:f3:33:f3:84:60:29:32:44:
                    b9:b0:ca:fe:f8:eb:11:cd:9d:8d:fc:06:e7:d3:e7:
                    1e:3a:81:8e:10:8a:a4:05:c4:33:e6:b9:33:05:b0:
                    b3:91:70:d4:8a:c0:29:37:c4:ea:46:70:ef:b2:12:
                    ea:93:79:8f:80:d3:7a:53:79:e0:e2:88:e7:9a:c3:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:FE:F7:EC:9E:23:80:9B:51:29:02:44:44:3B:C2:02:66:5E:E4
            X509v3 Authority Key Identifier:
                keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f9:3e:8a:a2:27:f9:0d:68:4a:c2:5c:e7:98:08:fb:b7:71:
         80:af:c0:c1:75:5b:52:ae:e0:60:be:d3:9e:2e:5b:dc:f4:a8:
         ed:d2:49:07:db:ae:e1:4e:04:ab:9b:72:b4:31:1a:51:c2:db:
         fd:1e:76:ad:68:8d:e7:fa:8a:df:d2:07:9e:f7:4c:15:be:75:
         f9:d5:8e:af:56:02:a5:c0:ed:56:71:97:58:14:5a:38:c9:06:
         bf:47:75:0d:87:f5:40:b2:62:cf:38:fd:6b:39:22:9b:b1:67:
         90:ae:06:c1:76:36:d7:eb:f2:3a:67:5a:71:be:a5:83:96:f7:
         cf:38:e4:2e:27:88:fb:89:b7:e2:37:95:95:06:06:1e:82:f1:
         a9:d5:64:df:7c:83:08:78:d0:51:8c:53:18:a5:5b:56:33:52:
         c9:0e:bd:b4:e9:a1:0b:95:dd:89:72:e7:b4:e0:42:06:d2:6e:
         46:17:56:78:5c:50:ce:22:54:62:99:3a:b6:e9:4a:0c:3e:6f:
         e7:45:23:63:10:3c:ae:b2:31:c4:a0:8f:db:42:11:bd:be:ad:
         88:03:39:3e:0f:8f:e3:2f:3d:62:ed:08:40:da:ac:b1:44:53:
         8f:ac:b3:1f:fe:48:1a:fd:1f:91:ca:a2:8f:65:2a:d3:4d:d5:
         e7:39:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:23:14 2024 by rpki-client on console-ams.rpki-client.org