Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File:                     1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier:          Ei2FtTKPQFW4jn7Bp/pzIlEAzAUsAaISO+Lbwpv/L2Y=
Subject key identifier:   62:D2:3C:E1:D3:0A:7D:4E:98:4C:99:67:86:93:32:2D:F0:66:36:D6
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer:       /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial:       019352AD3D0FE60DAC491A30E41D2B69C8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number:          088E
Signing time:             Fri 22 Nov 2024 07:01:45 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:45 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:45 +0000
Files and hashes:         1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: funAFXnNXKfoFeb5js+iXXiy2UFUBqPYfcDO+LP/SPs=)
                          2: oRUxzVoH-ecaccAJbQnwtoBC8Jk.roa (hash: 3kWzs7eGQFJBiG0oD7/nKwti5bqZvVRKsEMCom1QtY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:3d:0f:e6:0d:ac:49:1a:30:e4:1d:2b:69:c8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
        Validity
            Not Before: Nov 22 07:01:45 2024 GMT
            Not After : Nov 23 07:01:45 2024 GMT
        Subject: CN=62d23ce1d30a7d4e984c99678693322df06636d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:a3:32:cd:9a:ab:83:7f:df:ea:f2:8e:88:
                    8a:27:e5:d8:79:e1:42:00:b7:d3:ea:8b:b6:e0:34:
                    9a:0d:b3:fa:a9:e4:04:9d:c5:fe:2d:18:02:96:25:
                    d2:81:3b:f5:d9:75:eb:07:de:2b:7a:26:80:03:3a:
                    07:38:69:5c:52:7c:67:82:56:58:12:eb:2f:a4:03:
                    14:c4:4d:3d:fa:a6:76:09:79:ee:5c:74:61:c7:d7:
                    e0:f6:0b:4b:ce:e0:af:dc:da:73:c6:e5:b7:46:9a:
                    4f:fb:3e:41:fd:95:19:8b:e0:97:03:5b:07:52:b3:
                    1d:7f:95:d8:97:30:29:be:d9:36:9a:71:0b:7d:16:
                    ca:a5:e2:91:0e:5f:3c:b5:e0:e6:81:6b:62:15:dc:
                    7b:95:90:1f:9e:a1:0c:09:b7:0c:ef:b4:18:e9:8e:
                    9a:5b:c1:8e:da:ea:59:1c:c4:8c:e8:b9:b7:3f:92:
                    51:95:00:8a:af:4a:bb:9d:3c:6e:e8:5f:0c:0b:05:
                    87:a1:c8:4b:ac:fc:56:04:16:bb:5c:c1:20:fa:ea:
                    7c:88:f1:37:ca:9a:ef:63:d6:ec:bb:20:ce:df:ad:
                    ee:e7:98:93:30:6c:a0:b7:39:a0:95:f4:08:00:af:
                    07:ec:24:44:c8:42:1f:44:3f:2d:7e:95:d8:81:2c:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D2:3C:E1:D3:0A:7D:4E:98:4C:99:67:86:93:32:2D:F0:66:36:D6
            X509v3 Authority Key Identifier:
                keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:33:56:e3:76:ed:25:c7:ac:21:2d:ec:6d:b2:23:1b:0e:ef:
         b9:66:e0:38:09:aa:2e:2f:56:c7:5b:67:4a:6b:d8:ad:f5:47:
         82:a0:42:4c:c0:61:9b:5e:24:8b:2a:ca:99:a5:54:f6:2a:32:
         8c:24:a0:b7:bd:43:48:ee:4c:91:27:e9:74:d4:17:10:f3:9a:
         78:9d:e5:d5:89:aa:9f:96:9f:ac:8e:99:bb:eb:06:ec:5d:f3:
         8d:1b:1a:65:87:bd:21:a7:9f:49:25:ca:91:6a:75:17:3f:64:
         f0:87:43:42:9f:08:80:12:a5:06:4f:cb:d1:7f:7b:a0:d5:fe:
         8c:1b:f9:a4:1f:95:4f:b5:14:30:bd:99:41:94:3b:6e:f7:b0:
         86:07:d8:10:2f:44:37:0d:c0:5f:d6:80:ee:e0:41:b3:2d:8a:
         65:a8:c0:3d:a1:8f:7c:51:1f:8f:3a:4b:23:15:aa:36:c1:a7:
         32:ee:d3:06:3e:f4:81:e0:36:87:3e:09:c8:a6:5a:87:f0:3c:
         06:67:04:99:a5:d0:32:1c:f9:12:d8:67:17:ec:ad:48:c8:1d:
         f5:72:2d:f0:49:64:ca:f4:6c:ca:bf:fb:95:9b:98:26:c7:c8:
         c9:08:4b:3e:22:23:52:ad:5a:ea:3f:c6:88:54:20:e3:35:8b:
         5e:ca:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:16:21 2024 by rpki-client on console-fra.rpki-client.org