Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File:                     oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier:          0A9Ty/mERkGqr7HnwKNuMDAw/u56/LYuy4w6BEtiyIM=
Subject key identifier:   CE:A5:45:4F:25:81:73:C5:DB:18:6C:E4:D7:64:C4:2E:65:71:F4:92
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer:       /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial:       0193523E3464692806F656D61629F82F6CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number:          1375
Signing time:             Fri 22 Nov 2024 05:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:28 +0000
Files and hashes:         1: Car55AZkoV_56qAs9nimGo8iFm0.roa (hash: GAiDk1MUIgFEEnuHIXAEHctvsPeypZwOBJFkgArn8rI=)
                          2: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: eqz2DeBZPuM+wec5xlvsM+jamsssKY0jfZE6qIqNh6Q=)
                          3: r6ZNOKoszuhl0B14014rL1QAqEw.roa (hash: JBwBen/o/HPAmkJLZg5gdeCN8QNZ90VDjQSQdL9ihyo=)
                          4: vVfGpvXe6VcoH-Pg4-An20H7lT4.roa (hash: ZcczrnlbKxCINPXpoVK/obxgG15lEApnULA1+eRBvtU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:34:64:69:28:06:f6:56:d6:16:29:f8:2f:6c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
        Validity
            Not Before: Nov 22 05:00:28 2024 GMT
            Not After : Nov 23 05:00:28 2024 GMT
        Subject: CN=cea5454f258173c5db186ce4d764c42e6571f492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:c3:15:ee:26:92:ca:aa:7b:9b:9f:00:1e:
                    9f:76:99:93:33:61:81:c9:cd:f2:18:39:8e:42:ac:
                    28:95:fb:1d:f1:99:17:bc:82:8d:00:5e:49:23:db:
                    7c:0a:0a:32:47:de:30:8c:28:44:b5:b6:1e:0f:91:
                    24:72:7e:9f:b1:50:1f:d8:80:a6:f7:63:20:77:87:
                    a0:e2:c0:29:9b:ad:01:a1:e3:27:3e:66:8b:d6:6c:
                    71:54:f8:be:66:72:c2:0e:e1:65:ca:26:70:43:6f:
                    60:dc:9d:57:82:c3:71:85:a5:85:51:48:a3:5a:ea:
                    f5:90:55:d3:7b:56:d1:97:2d:cf:f2:00:59:6f:81:
                    6c:a2:89:33:3e:74:ff:b5:ee:31:59:08:2f:a1:b4:
                    ba:1b:ff:2d:eb:62:cd:db:c9:c7:ca:29:d2:11:be:
                    1e:10:0d:91:cc:48:bf:1f:22:4d:98:fb:05:6a:fc:
                    ab:81:b4:7e:88:d3:b2:0e:7e:6a:4b:5e:86:92:6d:
                    51:b2:42:73:81:bf:f3:0a:1d:55:7c:1c:7e:61:b7:
                    7c:3b:3a:3e:ad:d0:66:8c:b9:61:9d:9a:46:bc:3a:
                    f5:fa:d8:d8:49:e0:e8:69:f3:3f:98:41:9c:25:4b:
                    71:47:87:ab:cf:13:9a:cf:ab:f2:03:ae:a5:37:f5:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:45:4F:25:81:73:C5:DB:18:6C:E4:D7:64:C4:2E:65:71:F4:92
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:70:d1:eb:5b:3e:54:88:ca:6f:33:bf:c5:c4:f0:a6:cb:2a:
         c3:8f:0c:2f:b0:2d:a7:ed:92:dc:3a:69:b4:e5:a5:ae:13:5d:
         db:5f:1a:0c:53:2f:80:11:12:04:73:ea:b0:e0:ac:bf:2a:b3:
         42:e5:48:5f:75:5e:6a:b6:18:87:83:f7:6b:31:b1:ad:54:ab:
         11:70:26:da:8c:a5:32:5c:2f:3b:2b:89:82:e6:8b:cb:44:24:
         e2:bc:1a:c8:78:49:e1:f7:94:a4:2f:cb:07:7c:94:c0:35:a4:
         0d:ae:03:99:c1:fd:dd:21:14:7f:74:8f:6a:9c:50:fc:6e:8e:
         87:54:14:8a:00:5c:aa:4d:84:9d:44:ce:78:7a:6f:1f:84:c5:
         00:30:42:83:ed:45:99:64:28:be:f0:2b:6e:3a:12:00:8b:6b:
         55:0b:c6:87:37:c0:1a:2e:cd:bd:0f:70:bf:21:45:ad:09:c2:
         5e:20:0e:f8:65:3e:df:de:08:f5:99:eb:4f:dd:11:5c:39:88:
         b8:41:68:1b:54:54:3e:94:bb:3c:2a:c5:43:c4:31:0f:94:e4:
         57:79:08:cb:25:63:8b:3f:18:02:f4:d9:95:f8:69:f6:72:cc:
         99:0e:8c:96:fb:93:fd:90:a7:a9:1d:81:42:ff:bb:82:b6:a6:
         2b:35:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:30 2024 by rpki-client on console-fra.rpki-client.org