Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File:                     0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier:          7WgGoOxWwRLRQbbugZInAB7j5m59qvy5cN1XpQCzRU8=
Subject key identifier:   FE:8B:5C:7D:9C:FB:98:25:A7:4B:D4:5E:F3:2B:F1:51:72:8F:6E:26
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer:       /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial:       0193579BD3AAD79905D9B7519DAC68F2F9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number:          10AD
Signing time:             Sat 23 Nov 2024 06:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:50 +0000
Files and hashes:         1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: N3+R1aZBmbF5muZ3gCDXcdxjGong2eEq8G3Hjn4w8VM=)
                          2: TNVs-F9Gvccm1AOnRS34BWByzqk.roa (hash: FGcmZPP3CtlKUeuXkLg5vruq8Rbo2nWCDBQ7QzKmfEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d3:aa:d7:99:05:d9:b7:51:9d:ac:68:f2:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
        Validity
            Not Before: Nov 23 06:00:50 2024 GMT
            Not After : Nov 24 06:00:50 2024 GMT
        Subject: CN=fe8b5c7d9cfb9825a74bd45ef32bf151728f6e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:0d:30:1e:57:e8:7a:f7:bb:a6:ae:c8:cb:
                    19:31:ab:93:be:8f:aa:76:b3:ba:a1:3b:ad:65:c6:
                    a4:23:de:a3:8a:1e:a0:3d:ab:0a:e3:e1:3a:ca:6c:
                    6c:35:94:28:a6:9e:e1:68:9a:e2:cb:3f:c7:e7:d5:
                    8f:cf:9c:51:00:55:c2:95:bb:40:1a:84:59:07:58:
                    6b:e5:f1:61:26:9b:97:8e:b2:01:bb:21:e4:23:88:
                    2b:32:a4:8d:0d:c9:ac:d7:4a:61:b8:8b:d5:fc:cd:
                    d9:a4:dc:27:cc:8d:cb:0d:da:5a:c3:e0:22:fa:f6:
                    e8:37:89:96:12:e0:b7:4b:01:72:68:73:d8:73:58:
                    4e:55:84:56:af:a9:a5:5f:fc:58:21:d2:75:ed:a2:
                    78:0a:73:39:4e:d8:0a:37:93:67:06:80:b9:95:83:
                    0e:b0:f3:13:87:12:58:91:a3:14:07:9f:21:74:6e:
                    88:8b:c7:7a:0a:ba:09:1e:33:7c:d4:00:52:3a:ef:
                    66:72:ac:96:dd:8d:4c:de:c9:56:6e:53:48:b4:63:
                    85:36:bb:23:e9:99:9a:cd:64:40:c5:3f:ee:dc:df:
                    8d:4b:c2:f2:3f:53:7a:ee:a9:c2:06:cc:7b:33:fd:
                    82:6d:41:31:c9:36:d5:e5:f2:00:07:3f:ed:86:cd:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8B:5C:7D:9C:FB:98:25:A7:4B:D4:5E:F3:2B:F1:51:72:8F:6E:26
            X509v3 Authority Key Identifier:
                keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:4b:27:3c:f8:36:33:6d:45:4d:b2:e1:0c:07:17:a2:7a:
         f4:87:22:e1:1f:f7:04:6f:39:b6:99:b9:0c:39:51:75:46:c8:
         57:a9:c6:b1:61:eb:7f:d4:b3:af:64:13:f5:e7:f2:68:cd:6d:
         3e:a5:cc:95:df:a8:db:be:2c:07:17:d9:b9:7a:89:ad:78:4e:
         a9:df:65:19:12:c5:fe:f2:5a:a6:bc:c5:4b:85:4b:8d:58:59:
         38:83:fb:8e:e8:05:8b:eb:d8:b7:a6:14:db:a8:80:dd:c3:88:
         b9:73:b0:0e:3b:36:16:32:eb:db:6e:42:b2:8b:6e:ff:25:3d:
         a1:c9:9f:9d:c5:50:36:b1:30:14:2e:a5:7c:21:18:87:53:d6:
         82:bb:a4:34:5d:4e:1f:b3:0b:d2:69:77:2d:a2:9e:8f:8c:ad:
         2d:f3:4b:fa:cb:62:54:b9:3f:6a:e1:da:c6:ca:b3:09:77:8e:
         b8:b6:e7:89:4f:29:ea:65:6f:15:db:a1:d9:b5:f0:7a:8e:38:
         d1:79:fe:42:8a:63:99:9c:93:91:1e:3a:7a:0e:e1:b5:9c:b2:
         67:82:71:0c:22:ea:7c:65:e9:7e:dd:78:3d:14:2d:09:86:f7:
         14:c8:73:f3:7b:bd:5c:c4:f3:47:25:59:d5:a7:0b:54:5b:34:
         40:68:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:35:05 2024 by rpki-client on console-fra.rpki-client.org