Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File:                     FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier:          nrrv+yFklPnoporyT+7+c3cLy01CFHFoutIYNHVoQZM=
Subject key identifier:   0E:A6:C6:4D:1F:35:8F:C9:8D:2B:8E:56:FA:93:F8:2F:61:9B:18:CD
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer:       /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial:       019356F6DF68767C12722E1530AD35BE0CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number:          08AB
Signing time:             Sat 23 Nov 2024 03:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:39 +0000
Files and hashes:         1: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: Tqv2uUDZIcmBmFYqJAB9uxV8B9neYDSxaSMdUBJMDYo=)
                          2: S1p_VxBkBz0wMVV5bF9FXhaSIuI.roa (hash: KrJ4Jyg0UlnkQMhJ+0sGkubjJYL61R52OT0yjHdq+V8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:df:68:76:7c:12:72:2e:15:30:ad:35:be:0c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
        Validity
            Not Before: Nov 23 03:00:39 2024 GMT
            Not After : Nov 24 03:00:39 2024 GMT
        Subject: CN=0ea6c64d1f358fc98d2b8e56fa93f82f619b18cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:b7:94:d5:59:1b:c5:91:1b:c2:c1:dd:66:
                    a3:b9:3b:a1:72:9f:b8:6b:ee:b5:02:a2:f5:25:ed:
                    92:2d:1d:3f:24:9d:a4:08:ff:f9:b3:3a:1c:11:f6:
                    f0:ce:f3:85:3e:76:9f:7b:0d:9e:cc:f4:33:2d:d2:
                    87:29:e2:2a:f5:3d:a5:ed:5f:09:46:ae:67:4d:ce:
                    dd:23:81:c4:19:a2:ce:93:7f:bc:4f:51:bd:a2:19:
                    ee:bd:f8:4d:cf:28:fc:99:00:b7:7c:9f:9c:ce:07:
                    50:65:db:1c:60:10:c3:65:83:f4:f3:08:96:b9:3d:
                    30:14:a8:4a:52:68:32:30:84:8e:78:41:e0:a8:10:
                    2f:49:ed:95:ab:b5:41:53:a5:91:c7:1a:b1:b1:bc:
                    11:be:1e:aa:e8:f6:1f:bf:e6:88:38:90:5a:f7:b2:
                    45:95:d1:09:65:05:3d:55:d3:45:df:60:9a:13:19:
                    30:de:73:1e:31:7c:f9:cc:5f:90:26:e6:ae:de:e9:
                    23:78:d1:ba:cb:07:ab:6b:bc:0d:0d:c2:6b:b5:9f:
                    dc:90:d8:05:29:4b:40:ba:e9:aa:24:5d:7f:ba:83:
                    d9:cf:9e:47:91:75:e8:dd:07:e8:09:53:81:cd:18:
                    99:48:1a:37:31:62:a7:af:72:98:ba:b7:cd:10:5a:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A6:C6:4D:1F:35:8F:C9:8D:2B:8E:56:FA:93:F8:2F:61:9B:18:CD
            X509v3 Authority Key Identifier:
                keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:0f:8c:9b:6f:a0:f4:e3:3c:4e:e5:61:4d:73:d6:2b:4a:
         7f:56:71:4d:ca:6b:32:e3:8f:eb:1e:58:24:56:6a:18:6c:4b:
         bf:87:9e:f8:dd:d4:be:92:76:7f:0b:1a:6b:9d:f8:f0:53:2b:
         ca:66:a3:2a:ca:01:07:d6:93:c1:c1:30:cd:19:a0:3e:75:57:
         97:d8:f4:35:55:9e:4f:65:6d:2f:12:32:c2:d4:9c:a9:ce:c3:
         68:f1:aa:9d:96:4a:a3:85:8b:6a:b0:95:4a:89:6f:16:b9:57:
         aa:81:af:35:c6:72:f3:8c:ae:2b:87:b7:d1:34:8d:a0:b3:94:
         20:62:f6:1f:b3:72:80:03:77:84:25:b7:09:50:02:2b:36:59:
         f0:11:c7:d1:46:77:86:52:ea:a5:80:8c:3c:de:86:f8:97:96:
         b8:c9:bf:94:4c:ee:4a:c5:9d:cd:af:ba:3b:27:d5:bf:24:72:
         0d:12:2b:68:23:04:a6:04:78:f8:3f:23:db:ab:1c:b5:bf:b4:
         2d:70:1a:69:bb:4f:18:28:b5:9c:6e:ef:e9:67:90:cd:41:0e:
         73:18:61:66:71:14:22:ed:52:d2:e3:f2:e3:21:3b:27:97:db:
         5b:01:23:98:6c:d4:b6:65:ad:92:34:86:83:e6:01:8a:43:87:
         f9:c3:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:14 2024 by rpki-client on console-ams.rpki-client.org