Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          itWc1AlrxU7jtaAWhk/PgCax0Ukvk12a1gp5MGNA/CU=
Subject key identifier:   59:CE:AB:3D:2E:65:71:C5:57:E0:9D:D4:5E:83:DC:BA:E4:1E:2D:0C
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       0193568A63BFD2D9F985271B983030479BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          0B8A
Signing time:             Sat 23 Nov 2024 01:02:10 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:10 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:10 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: NKC56NH+asyS04aS+itqQ+p1yVxJRX85G6onavqMy08=)
                          2: JU13NDDRrwLcrEM2tMUvzDJAyc0.roa (hash: S0WPTZ6NGalkN6BHcnWL+0XIZ5jOjXejVo0fr7j/Jaw=)
                          3: WH0ldTLoau8qR39hQszAm9F_p_A.roa (hash: ZbkedGsD+SeqTZ4FVwCeWoZj3QMMCpYRNInOdr5QSEI=)
                          4: Z8cChkJdSPCDS7aon6LJWCEUZmg.roa (hash: UAk1nCsbW7JKIHVGYC28zNeP6d1qpxa8fqEHSuxhw8A=)
                          5: bZbCHXFzaUzVLJWPf-iubNRS-CI.roa (hash: YctsaxnUZdagvmkeP1QrDezFdco7nF79OByhg7u3iPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:63:bf:d2:d9:f9:85:27:1b:98:30:30:47:9b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Nov 23 01:02:10 2024 GMT
            Not After : Nov 24 01:02:10 2024 GMT
        Subject: CN=59ceab3d2e6571c557e09dd45e83dcbae41e2d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:f0:93:74:b6:d0:00:25:fa:bf:91:08:3d:
                    2b:06:7c:b1:0e:a2:c0:cf:ff:dc:51:e8:01:a6:65:
                    fe:8d:bf:fa:1a:1c:6d:fe:7b:93:68:10:12:1a:cf:
                    6f:05:5c:4b:0c:77:76:66:df:48:b1:c9:ca:30:ad:
                    7d:18:c9:ed:e5:12:99:36:4b:bc:0a:4d:8b:5f:85:
                    d9:19:64:b9:9a:95:5f:b0:f0:e5:3e:59:04:2f:34:
                    5a:01:79:2c:68:c1:00:27:1b:b3:6c:da:e1:9d:75:
                    88:23:99:f8:8e:86:8f:b1:90:50:e8:c1:42:d4:1c:
                    d7:8c:ca:38:a2:d6:5d:da:7d:e7:be:4d:ea:d6:ac:
                    68:a6:a2:b0:c0:44:03:4d:bb:e6:46:b8:1e:79:bd:
                    5a:2f:39:bb:97:2e:b6:32:7c:75:4c:87:e6:c6:bd:
                    e2:ac:9a:50:aa:6f:2a:2f:db:14:40:02:88:dd:ca:
                    fb:c1:85:a5:09:f3:82:a8:9b:24:45:eb:bb:55:a6:
                    84:18:41:0c:47:81:30:29:09:60:fd:28:75:cf:90:
                    9e:79:c4:4e:3f:fd:09:cb:7d:33:3d:c1:3f:48:d6:
                    84:12:d9:78:3e:f8:54:0f:ca:5c:cf:4d:05:e2:e4:
                    a0:bb:db:59:58:55:34:c8:1d:59:23:6f:2b:d8:e0:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:AB:3D:2E:65:71:C5:57:E0:9D:D4:5E:83:DC:BA:E4:1E:2D:0C
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:30:c9:f2:14:12:54:d5:bc:2a:47:6b:4c:e1:32:ab:d6:
         db:6b:98:2c:e0:04:46:05:9f:ee:54:6e:71:56:7f:8a:4f:87:
         d9:fa:6a:b5:8b:bb:75:ca:03:1f:de:a2:91:33:ef:db:a9:15:
         bf:71:39:1d:71:74:10:6d:ee:6d:ac:08:ae:9b:f8:fb:f0:8f:
         f6:5a:c1:9d:10:07:ba:3c:21:44:58:81:9d:90:38:7e:b7:98:
         c7:d5:77:43:18:4a:85:ce:f2:65:ad:1d:88:a7:80:5c:f0:c4:
         76:08:12:22:95:35:00:1f:36:ec:c4:ab:51:a4:c0:8a:5d:db:
         21:7c:0a:80:b3:cd:b5:c4:65:cb:81:5d:c0:73:35:fa:8d:e5:
         2e:da:95:b6:b9:5d:58:6b:ca:4e:c7:47:3e:0f:26:41:c2:f7:
         06:95:6b:aa:69:e5:0a:16:13:30:da:5b:10:d0:fa:a1:8a:f1:
         76:3d:d5:9c:01:d0:56:82:bd:6a:f3:f6:fd:1c:bf:92:b5:72:
         6c:35:2f:e3:56:0d:89:dc:d2:1f:01:c7:6e:ad:da:35:8b:2d:
         bb:62:57:ef:ef:df:43:2b:c5:73:eb:1a:54:c5:d8:23:9d:15:
         85:12:d8:6e:96:32:29:30:0b:06:f1:0c:39:28:30:14:4b:23:
         e5:68:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:38 2024 by rpki-client on console-fra.rpki-client.org