Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File:                     8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier:          ngbG8A+VbiQnFj9GcPvHNSszV2EZMBIzeKfG++ChH4Y=
Subject key identifier:   6B:F7:BC:CE:E7:FF:5A:FE:E4:37:6F:BC:CA:57:BB:D0:46:CB:C2:AE
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       0193579B8871AD6994308A7B6AD6B76091D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number:          0771
Signing time:             Sat 23 Nov 2024 06:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:30 +0000
Files and hashes:         1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: zY4SCMGOZO7AI/5KXp12Nbjl9uOPaoQD+vBzHWajXg4=)
                          2: h5FQOS5ERlEirzhpib9nvJDaoIM.roa (hash: XdWJx/KbXDwDnj5v/YPQ9AGVduc2tUZsyG9lb02T5Tc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:88:71:ad:69:94:30:8a:7b:6a:d6:b7:60:91:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: Nov 23 06:00:30 2024 GMT
            Not After : Nov 24 06:00:30 2024 GMT
        Subject: CN=6bf7bccee7ff5afee4376fbcca57bbd046cbc2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:0a:a6:0a:13:35:10:10:0d:18:47:fb:a3:
                    d1:83:bd:df:ad:25:40:1d:2a:7f:f0:e7:07:27:0d:
                    cb:9f:7b:fa:cc:03:6b:7e:48:2d:41:cc:64:38:38:
                    85:07:2b:28:5f:4e:8d:0a:1d:7e:6c:3b:cf:90:01:
                    96:4a:b5:ed:8f:78:ea:9e:ca:ad:17:b5:8d:02:fd:
                    bd:9f:8a:7b:8e:be:a7:3b:79:48:b5:3e:71:6d:83:
                    a3:07:bc:92:34:7e:9e:df:08:33:12:35:c2:ec:f1:
                    fa:4b:5c:d4:0f:1b:37:9d:f0:ee:cd:23:57:36:b7:
                    65:cc:bc:f0:f7:61:1a:3c:41:7a:31:a0:96:12:99:
                    e0:d3:c5:e5:be:7e:fd:85:fb:8e:f7:df:2f:c9:4f:
                    11:ed:52:00:0d:bf:0b:e7:8a:7b:60:43:8a:d5:d8:
                    bb:9a:33:4a:da:26:da:bc:22:db:da:4d:b4:5f:4c:
                    ff:25:4e:86:9a:0f:5a:32:30:a7:e3:db:c2:84:91:
                    6b:67:cf:f6:08:22:eb:7c:af:a4:55:45:28:47:bc:
                    f7:54:15:f9:8c:f4:fe:5f:ce:ae:3a:f3:76:a5:c0:
                    55:98:3d:13:37:c2:1e:46:0c:24:a1:2d:e9:82:e4:
                    35:db:10:f8:4c:3b:ca:a0:d3:d6:54:69:53:4b:17:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F7:BC:CE:E7:FF:5A:FE:E4:37:6F:BC:CA:57:BB:D0:46:CB:C2:AE
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:33:29:64:bc:b4:6b:0b:08:de:c2:4a:21:a0:aa:49:b7:b1:
         a3:b7:63:6b:7c:39:87:c0:df:4c:64:19:9c:af:10:f0:d8:fc:
         df:2f:3b:2c:ac:9f:0c:f8:77:c3:ab:98:b0:8b:d3:33:34:4e:
         d1:e8:e4:e7:a1:28:2d:18:99:56:c8:eb:10:2d:55:45:0e:2f:
         03:47:98:c7:47:7f:6f:28:08:dd:ac:8f:bd:74:49:ed:6a:24:
         c6:07:4c:bf:76:65:67:63:6b:d4:e7:49:d4:d2:82:67:b6:e0:
         6d:58:f7:84:fe:2e:76:83:37:69:4e:d6:d1:6a:35:f8:64:c5:
         8c:0d:62:af:dc:41:dd:ec:bd:09:c2:5d:2b:f8:85:e3:6d:4a:
         ca:46:32:cb:26:06:87:6e:2d:94:e0:b3:9d:4d:b0:36:85:e7:
         d8:5a:75:60:fa:fe:1e:0c:f7:05:f0:de:eb:b2:53:11:0e:4a:
         89:0a:4d:99:d9:22:e6:0e:56:c8:62:19:ba:b2:eb:33:00:07:
         3d:8b:cb:ef:d3:b5:db:d2:aa:3e:ce:7b:97:4d:8b:f5:00:f7:
         da:8a:c7:17:30:e7:67:55:4b:f5:24:5e:e5:89:c2:1e:f8:46:
         4b:bf:b6:32:fd:eb:cc:84:2b:ec:f9:6d:8a:7a:06:74:a6:0e:
         db:18:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:30 2024 by rpki-client on console-ams.rpki-client.org