Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File:                     T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier:          FbE8OhN6OGt+fGdosHd0bMlxzP2k7uQJpKeAxk+uelU=
Subject key identifier:   56:FD:EB:B3:77:56:FE:03:A8:3F:52:92:98:52:99:75:91:D4:40:A3
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer:       /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial:       019352ACE3ED2FA4EE51AC8427695AD4195B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number:          0CD0
Signing time:             Fri 22 Nov 2024 07:01:22 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:22 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:22 +0000
Files and hashes:         1: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: VwODl3Qj72hbcbRxaa0nuarUfztM6GiaahYagSw8oLI=)
                          2: jOc0ecsXOziuXjVhUqQk5KKH83I.roa (hash: Fwzx+oDsgbY27k3YfWy7qu2SIlgEGEi9ln2JbJ0VSXI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:e3:ed:2f:a4:ee:51:ac:84:27:69:5a:d4:19:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
        Validity
            Not Before: Nov 22 07:01:22 2024 GMT
            Not After : Nov 23 07:01:22 2024 GMT
        Subject: CN=56fdebb37756fe03a83f52929852997591d440a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:a1:ba:22:a9:fa:35:42:37:c7:3d:23:6b:
                    5f:8e:d2:98:21:18:28:75:d3:10:11:b7:00:96:5c:
                    b5:cc:ec:af:f9:df:11:ca:01:d7:01:ee:ff:25:24:
                    84:83:c5:8a:84:2d:25:7a:b5:b3:42:ea:e7:7c:50:
                    27:e8:65:a8:9b:26:94:bb:95:b7:76:b5:26:74:58:
                    d2:2a:29:7b:94:78:41:79:46:e1:22:da:18:bd:8f:
                    0a:51:ab:db:2b:3f:71:91:c4:b6:27:eb:80:8b:e4:
                    0b:4e:9e:73:98:82:ea:e3:bc:cf:9c:ce:fb:c5:cf:
                    43:6f:20:8f:d3:eb:9b:c7:9a:48:06:94:bb:2a:8a:
                    a4:3f:c1:6e:db:e0:57:24:2f:1c:43:95:0a:10:61:
                    56:25:ee:b0:ec:35:a3:01:4f:34:b5:ae:2a:26:df:
                    75:78:84:a5:2c:58:fd:5f:93:c6:3b:c6:08:ab:cf:
                    dd:25:14:3b:33:a3:06:f3:42:2d:55:89:42:19:bd:
                    f6:6d:12:88:0f:7f:05:66:e9:56:7b:b0:47:b2:08:
                    89:88:64:9b:2b:41:33:0f:29:6b:cb:55:66:b8:9b:
                    e3:20:14:49:01:38:95:8e:1d:4c:b4:1a:e2:7c:c5:
                    81:d2:9a:11:6d:53:96:d7:a1:66:8c:db:9d:34:ac:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FD:EB:B3:77:56:FE:03:A8:3F:52:92:98:52:99:75:91:D4:40:A3
            X509v3 Authority Key Identifier:
                keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:5f:6f:98:3a:88:de:1e:67:cc:dd:0b:2c:e1:c2:09:74:
         74:0b:54:a6:4b:26:fd:56:5e:e0:73:d4:24:1e:58:ba:8a:ff:
         f9:f3:bb:97:0f:1b:3f:ac:b2:94:13:54:75:b8:30:98:44:7b:
         55:cf:67:6b:33:48:b7:74:25:26:20:64:ca:73:10:f4:0c:60:
         74:2f:7c:47:70:9d:83:d8:9b:00:d4:bc:c3:b7:9b:44:e3:4e:
         53:92:1a:dc:44:a3:04:61:af:c8:1f:8b:6c:f9:35:61:b7:9e:
         87:8a:e1:db:8a:53:76:7c:c5:c6:0f:03:f4:48:29:e4:25:6e:
         96:78:2b:5f:26:1c:8a:8f:86:84:af:7a:b7:20:bc:fd:84:7d:
         60:28:83:da:dd:5d:ae:6f:5c:91:cb:07:9e:da:fa:1c:37:16:
         50:0d:88:cf:1d:6f:b2:f7:5c:6a:77:56:e6:ed:a1:bb:4a:14:
         eb:a3:6b:ee:75:73:67:c6:d1:36:3c:b4:00:20:31:ce:fe:c9:
         dc:8b:ce:bf:e6:67:70:48:5b:0d:6e:1d:6d:61:01:f7:ba:04:
         5f:82:89:92:77:cf:4f:2a:ec:98:dd:94:33:2e:77:d4:5b:f8:
         ed:90:57:60:68:f6:cc:f2:f3:71:d5:e8:89:2d:13:6a:d7:a0:
         e0:f1:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:40:39 2024 by rpki-client on console-ams.rpki-client.org