Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File:                     hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier:          ZHDFuk5nXCAm+trrtVlaTX3+z/l8nONWFfoUk2eAVnQ=
Subject key identifier:   56:F3:DA:8C:16:BF:83:EE:E0:24:30:A8:4C:2D:FC:E9:43:F6:80:27
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer:       /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial:       01935688CF512054B550F7B7649B624D6547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number:          093E
Signing time:             Sat 23 Nov 2024 01:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:26 +0000
Files and hashes:         1: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: V9RAcjqrCrU36H6u4YJospybChven/lIMG3dnn6o1Oc=)
                          2: uaGqAzc_tBlkPvBy0oFfp-2YLqY.roa (hash: jdNWstjOH0nHedHxByTPgAXjtoCXSC9+MQhlZDV/Z2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:cf:51:20:54:b5:50:f7:b7:64:9b:62:4d:65:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
        Validity
            Not Before: Nov 23 01:00:26 2024 GMT
            Not After : Nov 24 01:00:26 2024 GMT
        Subject: CN=56f3da8c16bf83eee02430a84c2dfce943f68027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:31:84:db:57:04:b8:75:62:97:0c:5f:cf:
                    40:57:d5:ef:3b:16:2f:3e:b4:12:e0:c7:84:32:8c:
                    58:15:fb:90:0a:08:06:ba:9d:94:1b:c7:84:ef:34:
                    e9:09:fa:6f:d5:44:3c:bc:c6:f6:52:97:21:5e:e5:
                    bc:87:5d:9b:87:35:11:81:94:ed:cd:6e:d4:f6:13:
                    32:0e:89:50:b2:d9:8a:19:4a:7a:69:57:b5:3b:55:
                    6f:98:25:b0:86:cc:41:13:58:ad:cc:dd:0c:74:f9:
                    29:92:0a:8d:3f:4c:69:ea:9c:32:03:06:9e:5c:30:
                    29:af:69:14:ab:8e:b7:cb:57:7c:4f:fc:2d:01:d4:
                    f2:ab:45:0f:4b:04:f2:8d:d2:d6:65:06:ad:c8:73:
                    bb:52:51:1a:f8:5e:20:85:d2:f8:4a:df:7e:ac:95:
                    68:ae:74:db:0d:1f:38:27:be:a9:f1:9b:0b:ca:4a:
                    1b:c3:a4:d8:8f:0f:41:68:c9:7d:3f:73:7b:b5:31:
                    4c:dc:7d:37:77:86:4b:1d:c1:8c:2c:bb:6c:8f:d1:
                    58:de:10:3a:e4:7d:b1:1b:60:0a:10:63:0e:98:f6:
                    d7:35:ba:76:46:a5:3a:d8:68:ec:6d:03:c8:06:b1:
                    d7:86:36:ab:2d:b9:80:ca:cf:95:ca:a2:fd:a7:34:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F3:DA:8C:16:BF:83:EE:E0:24:30:A8:4C:2D:FC:E9:43:F6:80:27
            X509v3 Authority Key Identifier:
                keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3b:56:b7:eb:ab:4a:34:a9:be:d2:80:5a:39:99:85:c6:ee:
         81:2f:56:eb:e4:41:77:33:9f:ff:bd:a5:96:f1:46:fb:88:5a:
         49:e7:d1:95:9f:08:28:5f:4e:7d:c7:74:50:ad:6f:8b:b8:b7:
         9c:49:2a:fa:28:cd:8e:f9:04:eb:76:5f:c0:e4:ea:5d:72:07:
         79:10:70:23:55:2f:a0:6c:15:77:4b:54:82:30:92:ca:71:0a:
         a8:4e:66:ec:fb:8c:5f:d2:69:34:4e:e0:83:6e:db:c8:fa:49:
         76:3f:26:bc:6e:4a:21:7b:77:99:12:eb:57:b4:c5:e5:d0:16:
         c6:d7:fc:4c:5f:75:9e:f5:4a:26:3a:6c:88:fe:6a:6e:b4:e2:
         9b:13:3e:6a:55:3c:ff:3f:5b:fe:19:0e:82:a4:7b:58:ac:a8:
         5f:49:c8:a5:48:a8:2a:96:1a:e0:aa:9d:b8:d8:8d:c1:eb:db:
         84:f0:3e:7c:1d:f0:f3:45:ee:4b:28:58:36:ec:1a:74:61:bc:
         4c:87:54:e3:36:80:e5:18:cb:41:52:45:66:d0:a7:14:4b:f7:
         6c:c7:bc:75:8a:a6:8e:4d:56:6e:c1:d8:14:14:39:cb:66:16:
         5b:ef:fd:c6:09:ec:6c:bd:a6:b6:df:93:2a:bf:b3:1e:fc:43:
         a3:07:8f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:35 2024 by rpki-client on console-fra.rpki-client.org