Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
File:                     8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft (raw, json)
Hash identifier:          u0TqcQYzPi+aFgUrqCh6X5DK9jfL5w+kovKfw4oqwFQ=
Subject key identifier:   A7:D1:11:40:37:CD:F4:A4:71:4E:70:7D:46:F8:70:B1:C8:8E:42:6A
Authority key identifier: F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
Certificate issuer:       /CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Certificate serial:       019358093739DA89EB3A9BD8F9CAD7B8397D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
Manifest number:          E8
Signing time:             Sat 23 Nov 2024 08:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:19 +0000
Files and hashes:         1: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl (hash: klOccoKSFu3TTd5ZcDbUJiuoBtGGUjrvWxPzwlao1To=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:37:39:da:89:eb:3a:9b:d8:f9:ca:d7:b8:39:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
        Validity
            Not Before: Nov 23 08:00:19 2024 GMT
            Not After : Nov 24 08:00:19 2024 GMT
        Subject: CN=a7d1114037cdf4a4714e707d46f870b1c88e426a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:df:54:61:c7:96:ba:d6:e2:d3:26:c2:80:
                    7a:c9:f0:f2:09:ed:51:03:05:20:37:bd:b5:19:1a:
                    61:81:47:2a:1a:72:2c:a9:78:05:a1:37:5a:9e:c1:
                    e0:5b:2d:9d:26:bd:c4:2b:31:61:99:95:64:45:48:
                    38:03:1c:c6:bd:36:86:da:27:95:81:90:e1:94:f2:
                    8a:47:25:10:c6:68:ea:cd:32:4e:9f:9c:c5:74:11:
                    db:ff:bf:77:40:d3:63:d0:de:bb:dd:ec:dd:25:a4:
                    59:8b:c4:29:df:ea:a9:7b:39:70:bc:61:2b:d8:09:
                    6d:e5:19:e1:7b:a3:c7:7e:63:91:24:d2:15:24:4c:
                    57:5a:1e:50:22:3b:8d:c5:c4:bf:f7:d8:90:f4:1c:
                    3b:42:5e:54:7a:df:f9:f7:1f:3b:75:52:ce:79:53:
                    e5:0d:9f:1b:ce:2a:fb:9d:10:a1:d8:15:d3:4d:67:
                    26:d2:0e:aa:bf:5d:50:17:54:d2:ae:0a:05:b9:ad:
                    40:e4:aa:8f:80:d4:c1:24:7a:05:26:26:50:22:24:
                    8b:06:61:1a:ab:d7:9e:ba:3a:30:0e:18:0b:79:fa:
                    03:d4:e4:38:bb:b0:f3:eb:8e:85:c8:4c:95:0b:7a:
                    6a:26:c6:e4:f3:b2:5d:01:72:66:54:29:c9:fe:c7:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D1:11:40:37:CD:F4:A4:71:4E:70:7D:46:F8:70:B1:C8:8E:42:6A
            X509v3 Authority Key Identifier:
                keyid:F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:67:e1:6a:ec:63:df:a2:79:cc:3a:c6:0f:e3:9f:7d:2d:2b:
         60:77:25:cc:b9:ad:4c:11:58:c0:9f:a8:dd:22:23:11:c0:27:
         f0:25:93:7a:8e:66:0e:72:bd:dc:51:5a:06:fc:ba:51:fe:6c:
         18:09:ab:3f:fb:77:a3:4c:2c:1c:30:26:c0:05:c7:af:0e:4a:
         33:96:a9:b1:73:16:cc:d0:53:3f:8f:6b:76:2c:57:8d:69:17:
         f0:bb:eb:17:15:3d:80:0d:0b:fc:1b:cd:69:37:b8:57:5f:c1:
         b8:63:7c:c3:69:28:86:69:94:36:5d:dc:61:aa:50:e8:75:2f:
         ad:e2:51:87:3e:1e:ba:77:4a:e8:3b:e6:5b:66:b1:7e:c3:44:
         ef:ee:db:42:72:03:5b:c0:1e:f2:92:0d:26:74:bd:1c:ec:f9:
         aa:5b:80:a3:f9:40:86:9f:92:2a:e8:a0:83:6b:6d:8e:9b:5b:
         c3:26:c3:c0:6a:ea:57:18:9c:de:2f:4d:51:3a:c5:00:68:cd:
         04:d8:51:30:db:8e:0e:9b:d9:c2:ea:1b:61:cb:97:51:47:8c:
         3d:13:e5:3c:1d:c6:89:6c:5c:ed:16:02:49:93:52:35:26:3b:
         31:f8:32:b2:98:c2:5e:a9:67:4b:a6:df:8b:b0:c5:f3:8d:e5:
         d6:87:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:44 2024 by rpki-client on console-fra.rpki-client.org