Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File:                     o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier:          ZafmWSLTE4GFTiqXpwTLKKtwQu/WI6k3FKDPOSJPOvI=
Subject key identifier:   C6:30:D4:4F:69:D3:BB:E5:9A:C1:3F:0B:A0:C0:92:B0:00:7B:7D:09
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer:       /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial:       0194BB972669FB2DAF36F28EC129CA9F7CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number:          0CDC
Signing time:             Fri 31 Jan 2025 09:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:32 +0000
Files and hashes:         1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
                          2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: Wn586IFABtdvPickmClJRO9dxCEuTn4brQRcl9LkSNU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:26:69:fb:2d:af:36:f2:8e:c1:29:ca:9f:7c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
        Validity
            Not Before: Jan 31 09:00:32 2025 GMT
            Not After : Feb  1 09:00:32 2025 GMT
        Subject: CN=c630d44f69d3bbe59ac13f0ba0c092b0007b7d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:d9:6b:92:1a:c2:1c:f8:7f:eb:8b:82:bc:
                    b9:00:36:5b:a3:a3:3d:19:10:4e:7f:f8:5c:ac:cb:
                    e1:b9:35:06:24:01:aa:13:47:80:6c:c1:3a:f6:f3:
                    6b:77:f0:79:41:26:36:96:ca:da:3e:1c:99:5a:9a:
                    0e:29:0e:7c:97:91:e0:80:0c:24:0c:da:0e:a5:46:
                    18:9e:f6:74:d4:c5:4a:59:6a:fa:b4:25:3f:6b:21:
                    a3:7c:31:b2:e1:5c:f4:49:82:7a:2c:69:7b:27:13:
                    c3:0a:1d:61:e8:c0:29:75:6b:e7:7d:1c:57:80:47:
                    6e:62:0d:53:05:fa:e8:a5:cd:87:22:db:0d:63:44:
                    ba:68:7b:e3:d9:a5:d7:c4:88:2c:3c:eb:e2:90:5f:
                    23:40:d4:2b:d4:fb:6c:a8:cb:7c:dd:b0:02:39:bd:
                    1d:56:2d:d6:d4:d9:31:e1:dc:53:61:53:98:04:8a:
                    62:f2:a7:7a:e0:10:ea:73:9f:bd:9e:5c:bf:51:ca:
                    a4:25:5b:fe:6b:04:1e:e1:dd:81:4a:9c:f3:83:1e:
                    c6:3e:21:e1:b0:5f:6c:0c:87:45:6d:d5:87:09:a3:
                    3e:d0:62:9e:a1:ef:f9:34:95:6c:91:36:cb:da:5f:
                    1e:97:9a:ca:23:2f:fe:90:3d:62:16:96:f0:18:5a:
                    f0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:30:D4:4F:69:D3:BB:E5:9A:C1:3F:0B:A0:C0:92:B0:00:7B:7D:09
            X509v3 Authority Key Identifier:
                keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e2:4b:b3:a4:6f:1f:ea:7e:94:16:6f:46:14:3b:07:0f:1a:
         d1:a9:92:fe:79:4b:3f:81:08:20:01:7c:a9:94:fb:dc:d1:f4:
         81:36:2e:0b:4f:84:1c:72:eb:5c:09:65:93:16:95:ac:f6:56:
         cd:20:eb:24:fa:a7:18:5d:d9:5b:9d:df:1e:bb:27:81:1e:c9:
         3d:08:2f:84:03:cb:af:55:09:36:ea:c7:04:8f:e9:8f:c8:cd:
         d8:b4:fd:2f:1e:d8:b8:45:b7:f2:4b:f3:df:e8:09:b8:a2:2d:
         3b:e8:98:c8:27:19:e9:fe:24:56:67:5b:0c:c2:01:2f:bb:e4:
         f6:76:02:7f:fe:9b:4a:a1:76:0d:77:35:68:c4:95:82:6c:01:
         52:c4:96:ed:79:d3:d4:87:51:73:86:09:0f:b1:be:e8:76:b8:
         73:c8:bc:6c:53:c4:ec:c0:01:0c:18:5e:cf:4b:8d:af:61:91:
         64:6e:ed:4a:08:35:bc:88:e9:ca:7f:3d:b1:99:b9:70:73:24:
         14:0d:57:b7:34:a8:a2:70:4b:6c:7a:89:14:d0:8c:b6:83:48:
         6f:ee:b7:75:98:e5:ac:4d:5e:fc:d7:8d:9a:d2:43:32:e0:e1:
         28:dc:d4:6a:b2:12:f5:00:3d:fc:3e:79:82:33:ed:c8:ae:6b:
         bc:66:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:53 2025 by rpki-client on console-fra.rpki-client.org