Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File:                     8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier:          JfB8E3FP+THeSKXlzL/vXhHW1YiFXLrpkcYug7D/8IE=
Subject key identifier:   68:07:1B:0A:E1:67:E2:16:D0:7C:CE:3E:50:1F:18:70:2E:71:88:EF
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer:       /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial:       01936556DED83C886AD59ECAE130A4B0848F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number:          0D8B
Signing time:             Mon 25 Nov 2024 22:00:11 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:11 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:11 +0000
Files and hashes:         1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: W9+pHg33JbgmmSGHL3H1dPpx8rpiEHzaS+h6IXnMeIU=)
                          2: G3g_VknYR8hFrcEKzJDq0iQ_dOo.roa (hash: DVG7z9VLNzu7uAI8GaegKxyhZMjWpBA3DDdbk12IXMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:56:de:d8:3c:88:6a:d5:9e:ca:e1:30:a4:b0:84:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
        Validity
            Not Before: Nov 25 22:00:11 2024 GMT
            Not After : Nov 26 22:00:11 2024 GMT
        Subject: CN=68071b0ae167e216d07cce3e501f18702e7188ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:c4:7e:53:d4:a7:64:28:6b:b2:cc:e9:de:
                    71:92:2b:4f:ff:fe:1f:71:cc:4c:30:92:ae:b5:02:
                    66:98:17:55:bd:f5:f3:c0:0c:ef:03:ae:c0:90:78:
                    e0:0f:e4:9d:42:ca:16:e0:87:cf:fd:82:7b:cc:bf:
                    fa:bf:10:fe:72:e8:b2:59:af:a1:99:4b:53:d4:58:
                    0c:bc:2f:64:60:af:8f:23:51:2f:ae:b9:15:71:00:
                    de:61:cf:16:1d:e4:08:fd:2b:db:93:6c:3f:e1:64:
                    d2:78:af:b7:7c:9f:3f:ef:2b:0f:00:7c:3f:93:29:
                    9a:ba:1d:b4:4e:42:52:a1:6a:cf:d3:5b:9b:87:97:
                    97:5e:95:60:f1:9b:c3:d6:2f:c4:b5:a0:b5:df:fa:
                    b0:fc:df:bb:f4:4d:42:a1:df:4c:ec:62:0c:b2:17:
                    b2:7f:f4:7d:f2:9e:d8:2b:eb:74:4e:00:80:bc:11:
                    ac:41:b4:dd:43:71:f6:ee:0d:a0:c9:da:47:a0:24:
                    ca:d2:b6:91:e9:9d:87:07:e0:7d:88:d9:75:70:e1:
                    0b:c6:7d:74:14:74:41:77:92:39:41:1e:f7:e9:c9:
                    61:0b:f7:de:bc:76:f9:3d:a0:b1:7e:06:0f:98:bd:
                    76:0a:02:42:8e:f7:17:f0:e9:dd:83:ef:e6:0e:84:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:07:1B:0A:E1:67:E2:16:D0:7C:CE:3E:50:1F:18:70:2E:71:88:EF
            X509v3 Authority Key Identifier:
                keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d5:a3:d7:97:af:52:b9:df:de:0d:5e:f0:c3:76:9e:df:7b:
         99:ca:dc:83:bc:88:fe:0b:84:b9:79:30:ea:a9:68:4c:5d:e0:
         94:62:c4:ef:81:41:ac:94:2f:65:de:79:fe:9f:75:17:03:5f:
         79:94:07:ca:e3:6b:21:8a:54:af:3a:20:60:30:76:4b:49:d5:
         de:ec:7e:22:5a:9c:c2:62:3a:c0:11:9c:78:d2:88:4d:5e:08:
         24:f4:43:13:12:ce:65:8e:55:ac:93:ba:a8:26:16:63:9a:c1:
         f8:23:39:d2:73:71:63:78:0b:6b:40:23:ef:4b:1d:a8:9d:95:
         b7:38:2c:a1:d2:fb:61:bd:c6:c2:6b:ee:81:3d:89:ea:24:b0:
         63:8f:89:fa:ba:cc:14:97:41:d8:10:ee:9a:fa:c1:64:89:bb:
         ff:d1:1d:df:34:b7:74:0c:14:72:90:4f:02:a6:10:f9:77:f0:
         df:c2:2c:23:cf:1f:65:ec:6c:39:d2:03:3b:c8:bd:38:3c:b3:
         8c:ac:99:35:61:a9:30:8b:2d:c8:8d:46:6e:be:be:bc:32:20:
         c3:dc:26:10:4b:ff:12:d2:ef:d2:20:4f:b3:d8:90:63:b7:c8:
         f1:31:a9:d0:2c:c7:90:d0:81:74:b3:44:f8:c0:57:3c:81:fa:
         b6:0f:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:05 2024 by rpki-client on console-fra.rpki-client.org