Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File:                     8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier:          cH0yMJGi+IKE71rl1RBt5vgl+uP+QHcZlQBGNzLk4MQ=
Subject key identifier:   56:B1:55:65:A5:87:47:9F:2A:BD:DA:FF:0A:6F:85:AE:8B:72:56:05
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer:       /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial:       0193568A3E3B61F25C0C055902BC13E1301F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number:          0570
Signing time:             Sat 23 Nov 2024 01:02:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:00 +0000
Files and hashes:         1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: AvSbUB93SxICCpPcQbeBRctUfY+z64pH0qw0KqToaDU=)
                          2: IuOISKZmqKTeC7vPWni8DXOhA8A.roa (hash: ObHgWL4nLXU8LOmAbCnUaarWdh6zHeXkPiqJGtqO+K4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:3e:3b:61:f2:5c:0c:05:59:02:bc:13:e1:30:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
        Validity
            Not Before: Nov 23 01:02:00 2024 GMT
            Not After : Nov 24 01:02:00 2024 GMT
        Subject: CN=56b15565a587479f2abddaff0a6f85ae8b725605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:f7:a5:1f:f0:af:aa:55:27:50:b2:c3:0b:
                    68:3f:6d:ab:d1:e8:79:dc:e6:88:b3:c2:76:6b:d0:
                    8d:e7:d4:2d:71:b9:fc:da:e6:83:e2:65:48:29:db:
                    26:d2:b4:56:68:5d:7c:3b:28:f9:50:f2:e5:da:b4:
                    4b:58:b0:97:8a:90:c1:5f:9a:75:61:9f:8f:f9:19:
                    a1:72:84:e3:fe:13:be:83:3d:cc:93:ea:b3:bc:67:
                    31:06:55:d3:17:63:a3:68:76:2d:33:26:14:99:68:
                    b7:38:38:4a:21:8d:20:0f:32:84:cb:15:9a:6b:9f:
                    b0:5a:96:11:9b:dc:31:0d:1b:69:5a:cc:c1:14:8a:
                    cf:12:5a:66:b1:b0:3f:88:5d:fb:41:ab:16:75:b8:
                    a9:7b:86:4f:6c:0a:e9:57:b0:0f:d2:16:c6:ac:f0:
                    6c:fb:16:25:c9:3f:5d:a4:7f:82:f5:84:b0:33:1e:
                    a5:e0:95:1e:fc:3f:11:d2:17:80:63:9b:f2:d4:34:
                    31:0c:f6:5c:30:d1:b0:be:f9:0b:fc:1c:61:db:bb:
                    e7:16:27:20:81:c3:66:63:af:b6:dd:8b:d3:d5:39:
                    f5:80:fa:48:8e:6a:74:9e:f1:07:d9:45:66:0b:20:
                    9a:f8:e8:c6:91:df:5b:ab:79:e2:fe:87:73:51:ad:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B1:55:65:A5:87:47:9F:2A:BD:DA:FF:0A:6F:85:AE:8B:72:56:05
            X509v3 Authority Key Identifier:
                keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:be:29:0e:58:bc:bc:6e:8f:ed:e6:a5:56:31:94:fe:98:cb:
         e7:e2:e6:15:73:7a:85:6b:87:83:93:40:30:7e:d1:71:fd:57:
         81:f5:fe:23:a6:03:70:6d:d4:dd:d6:fd:68:e8:08:22:b5:c3:
         5e:e6:e8:55:b6:39:dc:6e:d2:44:89:80:96:50:46:ef:b9:86:
         d3:3d:95:7c:33:92:5a:69:a7:8c:dc:d7:5b:7b:40:f3:f3:b3:
         5f:7f:05:f0:be:59:39:f4:3e:b6:78:cc:9b:fe:46:32:8b:0d:
         14:af:f3:9d:ac:bf:4c:d0:60:b5:f8:5d:1b:0a:29:77:f5:a7:
         95:b6:2b:e0:bc:a0:64:07:93:b7:75:76:49:32:ec:1f:cf:4f:
         09:46:06:72:22:e3:58:72:11:2e:e6:12:da:0a:4c:4a:36:29:
         5d:83:57:ca:8f:84:b2:66:0c:70:fc:81:eb:63:18:9d:72:3f:
         b7:fd:de:e7:fe:0b:f6:36:69:cc:41:46:15:0a:26:2f:a9:a1:
         b0:e4:23:9b:6f:71:68:62:d3:c5:2a:4d:a6:5b:1c:4a:ca:26:
         dd:01:be:67:d5:29:da:8e:11:c7:25:33:e3:dd:7d:9b:bc:fe:
         96:4b:78:3a:52:a8:6e:67:d5:18:71:f8:ff:a4:32:74:a8:f2:
         92:f3:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:24 2024 by rpki-client on console-fra.rpki-client.org