Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File:                     8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier:          k5fBl27tiqzUBEpWh5yMmZdVFr+HheC66gK9ZWXQuYE=
Subject key identifier:   63:3D:57:67:54:D9:B2:2F:83:38:2C:53:1A:13:EA:B6:BB:C8:3C:D9
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer:       /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial:       01936A7D974E3B586FFF309A8E78B19B6EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number:          0311
Signing time:             Tue 26 Nov 2024 22:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:35 +0000
Files and hashes:         1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: T8Kzye8rVaIif63AWIzu3TfUtlfnXeyNFtZ/op9LhEU=)
                          2: dba9pmNXHgwYKDT82ZWlLeSsahU.roa (hash: Pw/Ffyy+Ld5QeAcEoH/JIBZB0WSsLAhe2MW2OdDoXwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:97:4e:3b:58:6f:ff:30:9a:8e:78:b1:9b:6e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
        Validity
            Not Before: Nov 26 22:00:35 2024 GMT
            Not After : Nov 27 22:00:35 2024 GMT
        Subject: CN=633d576754d9b22f83382c531a13eab6bbc83cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f5:fc:c5:fc:d0:71:20:b3:e9:88:44:49:78:
                    34:83:fa:0a:06:37:e2:f3:b7:b7:5d:f7:ef:b6:e1:
                    e9:e2:49:dc:90:ed:a3:c0:4b:f0:b8:92:e4:dd:e5:
                    99:cf:76:98:6f:56:75:55:4c:82:0a:54:ef:e0:75:
                    34:3e:1f:9f:86:86:a7:17:4a:79:2d:91:6a:f3:21:
                    4e:57:46:9e:c0:db:c5:66:2f:9c:45:22:a8:30:32:
                    d0:67:80:a9:ba:b8:46:88:a9:fb:70:94:fd:9b:41:
                    ba:d5:7c:a6:3f:dc:99:42:7a:74:66:61:97:3f:cf:
                    de:18:80:ab:15:f7:25:2e:3f:ab:9c:d3:2b:a9:11:
                    67:2f:0a:e7:b4:07:8b:d8:ae:59:b8:6e:10:91:35:
                    50:dc:ca:54:68:4d:24:1c:f9:53:44:28:0c:8c:7d:
                    8c:2a:d9:8c:b6:65:da:9b:7e:54:8b:e1:37:c5:e9:
                    65:bc:84:72:5d:72:0a:45:35:90:68:8f:d8:07:32:
                    b3:46:5b:bd:4a:06:6e:0d:54:46:ac:77:ef:90:86:
                    68:e8:23:ad:b7:c3:35:8c:3a:53:d7:b6:0e:84:08:
                    12:83:0f:d4:fa:5d:1f:7f:37:cc:d0:ef:ae:02:b4:
                    ea:a9:3c:db:7e:33:07:ef:2e:42:67:52:20:44:c9:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3D:57:67:54:D9:B2:2F:83:38:2C:53:1A:13:EA:B6:BB:C8:3C:D9
            X509v3 Authority Key Identifier:
                keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2a:75:92:73:ba:56:55:d2:ed:0f:b3:80:42:f3:c1:8c:1a:
         b6:e9:a8:d6:4e:c5:e7:54:0c:6f:d4:c3:74:01:00:9f:2f:4d:
         83:41:6d:50:a9:f8:87:92:b4:9f:82:6a:c1:51:64:ac:c7:b2:
         db:91:8b:7e:ae:04:48:bb:4f:fa:6b:4e:c0:16:d1:fb:7b:b6:
         bc:ee:ac:ea:21:d8:b4:5e:dc:03:1e:ec:e7:d3:85:bd:f6:c5:
         9a:5b:f7:b3:46:22:f3:52:30:1d:43:4e:a4:d6:06:86:e6:14:
         11:8b:d6:7b:f2:66:46:9d:5f:c6:9b:c0:3e:66:a1:64:75:b8:
         96:83:a5:75:51:d6:50:1b:63:c9:be:3a:d4:4f:28:a1:f5:20:
         af:68:c8:e1:81:7e:fc:62:fd:78:7c:0f:2c:24:62:00:bd:aa:
         6e:38:a4:61:29:b9:a1:17:c0:e3:ea:44:47:8d:a2:29:ba:53:
         51:41:cf:f5:82:25:b3:c1:5b:73:4e:99:9e:9d:92:a5:0c:f6:
         78:28:45:ba:95:cb:82:24:39:e1:06:db:4a:6f:a6:c9:52:3f:
         ef:be:5d:c3:f3:61:37:bc:85:bc:81:f2:bc:38:0b:6d:7e:4e:
         15:7b:e1:79:82:f9:0d:f6:60:81:08:9f:47:7d:5d:a7:0b:69:
         a2:01:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:49 2024 by rpki-client on console-ams.rpki-client.org