Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File:                     8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier:          jkFPCM9e26QzEXBRhqDWqMHXXeHeXUP5V/Kt55MBwKk=
Subject key identifier:   AA:EE:54:71:15:0C:6F:FB:DE:18:66:5C:03:F6:7F:C3:9E:8F:7D:B3
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer:       /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial:       01901DECDC0479B31881A249FDDC5F9DD2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number:          0953
Signing time:             Sat 15 Jun 2024 22:03:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:00 +0000
Files and hashes:         1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: T6BFjzrfVMQPFCuhkcppTmGCMxdvMevAuJpOXjCerBI=)
                          2: qWj1lixQS_dOpQe0u23TprWVCsk.roa (hash: CQVKtI7zMt/dRaac/fM1mLh6HwLZzNsgWbyDT90FgCA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:dc:04:79:b3:18:81:a2:49:fd:dc:5f:9d:d2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
        Validity
            Not Before: Jun 15 22:03:00 2024 GMT
            Not After : Jun 16 22:03:00 2024 GMT
        Subject: CN=aaee5471150c6ffbde18665c03f67fc39e8f7db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:ab:3d:db:a9:00:02:74:03:35:bc:91:b3:
                    9f:30:78:a3:48:72:1c:24:34:26:79:e2:cf:d9:c7:
                    3f:c8:c1:db:4d:38:6b:af:ed:07:48:f2:70:3c:7e:
                    b6:c1:06:d8:ba:96:bc:da:be:82:cf:ba:60:33:ce:
                    10:e6:1d:6a:c4:8b:25:95:45:74:60:d5:8d:5b:3d:
                    c9:da:01:a3:58:70:a0:96:a0:fe:56:4d:6a:15:8f:
                    6c:01:1c:6b:85:66:49:a1:c8:d4:2a:e2:73:a7:68:
                    03:df:fb:b3:8c:3b:80:79:b8:26:a8:9f:1f:1c:69:
                    9b:67:6c:bb:e7:51:f6:2e:72:88:6e:b5:a7:05:e9:
                    b8:c9:50:c5:10:03:c4:be:c7:0f:6c:7e:5b:fc:a1:
                    28:3b:51:f9:b5:a0:f8:f6:1c:18:11:89:25:1a:2b:
                    42:85:ef:c4:33:09:06:00:90:13:aa:f4:ce:4f:30:
                    b9:67:b5:74:e9:51:05:20:91:5a:e8:b5:a6:7f:96:
                    e0:3f:00:19:9d:8c:ee:d2:9f:10:d4:37:fa:af:23:
                    0e:92:eb:eb:d3:47:3c:08:60:ce:d5:f8:3c:90:6d:
                    19:c3:ab:7b:ac:de:25:4c:db:e9:f9:eb:85:d2:a2:
                    d8:ec:8b:62:17:87:6d:c9:d6:f9:22:52:a4:d2:a7:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:54:71:15:0C:6F:FB:DE:18:66:5C:03:F6:7F:C3:9E:8F:7D:B3
            X509v3 Authority Key Identifier:
                keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:55:a2:13:27:a9:42:ee:9e:65:1e:3c:a8:38:bc:7f:64:
         ec:88:14:68:41:8a:c2:0c:f8:ef:fb:7c:d2:ee:9f:7e:5b:24:
         2f:88:ec:6d:92:ee:e4:ea:1c:05:73:bb:85:47:a1:7a:a3:ea:
         c5:90:7e:25:09:eb:ca:11:8c:85:a3:e7:cc:77:50:ac:f5:8c:
         71:f7:1f:6d:86:1d:25:49:a0:e8:2c:d6:95:d7:05:4a:d6:a4:
         2d:02:52:9a:b8:8f:51:b0:38:5b:8c:e0:d8:3a:00:6f:2b:18:
         23:c3:d3:be:df:29:85:0f:42:c9:2e:da:af:e1:43:78:03:fa:
         09:8d:17:99:f1:db:58:7e:a5:01:56:33:66:a4:3c:69:0c:b8:
         ac:1a:45:af:fe:92:86:da:e9:59:30:07:5f:6c:7d:90:d9:35:
         29:39:f6:d8:6c:08:10:6b:94:33:54:b5:c1:c9:24:68:ef:c0:
         66:b4:5b:3d:f7:98:3a:f3:b2:f3:be:71:5f:3a:e1:0c:34:48:
         3b:bb:a3:b3:6c:e0:3e:5d:e4:eb:57:41:79:53:6f:19:9d:bb:
         da:3f:9b:21:ef:81:6b:17:cc:f1:fa:aa:6f:51:55:d2:16:92:
         a6:6b:0e:5f:c4:3e:83:3f:aa:6b:7c:ad:db:46:bb:c4:e7:15:
         9a:f6:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:02:19 2024 by rpki-client on console-fra.rpki-client.org