Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File:                     8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier:          NcZxqz8aHCSgimuVtuOdwRE1fhqMec4n4fbjliobFXw=
Subject key identifier:   75:2C:FD:0B:CF:13:BD:3E:9E:E9:08:47:15:B9:C6:F2:D3:AE:8F:E5
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer:       /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial:       019364B29B5764006A44ADAFB1AFA085CA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number:          1377
Signing time:             Mon 25 Nov 2024 19:00:46 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:46 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:46 +0000
Files and hashes:         1: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: TeWebbfkoq8Ut3iiUlCcMac1Iw/lBrZEjAJvJntXs3I=)
                          2: P6maaB14uj_2MhPHvoYR5mLgExo.roa (hash: WsQJToEfp5tWgII+VRVWKNUMeFCQt85a+oCgB+gM/P0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:9b:57:64:00:6a:44:ad:af:b1:af:a0:85:ca:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
        Validity
            Not Before: Nov 25 19:00:46 2024 GMT
            Not After : Nov 26 19:00:46 2024 GMT
        Subject: CN=752cfd0bcf13bd3e9ee9084715b9c6f2d3ae8fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:11:76:2f:9c:9a:0e:24:28:f5:52:f6:bf:
                    cc:59:05:ff:70:d1:e4:c2:f9:75:50:03:b5:3b:b9:
                    18:fd:bd:0e:41:d2:66:91:98:83:3d:26:f9:92:ee:
                    37:04:9f:89:e2:2b:23:02:58:2d:28:ce:f1:64:ed:
                    e7:40:d0:c8:d2:23:2f:99:74:fe:43:74:20:b1:39:
                    d5:78:25:a7:39:0b:22:87:6b:ff:98:46:78:14:7d:
                    9d:a4:a9:8e:b3:2d:c5:b1:c0:33:17:77:19:57:58:
                    e6:86:5d:24:65:ac:7e:eb:43:f8:da:4c:48:9a:67:
                    1f:67:a6:cf:4d:ca:ea:e5:10:6a:19:a8:08:65:09:
                    c2:f2:d6:af:ad:90:06:2a:08:87:a7:c9:8a:e7:a1:
                    51:2d:9e:d3:40:70:d5:cb:0b:a6:ed:b4:a6:c4:94:
                    04:7d:c8:9a:29:19:06:13:7b:51:a0:47:fd:0e:cd:
                    06:bf:00:d6:6c:01:08:5d:58:8e:93:f9:bc:e0:81:
                    27:1c:35:8b:98:cb:02:c3:a0:97:a7:f8:49:fe:ed:
                    cc:70:95:22:57:3c:7c:ed:2d:b6:33:0d:43:82:55:
                    35:34:a1:53:5a:1c:d9:54:5c:8c:cb:3e:a5:fb:e9:
                    69:a0:83:a7:4f:13:5f:31:7c:5d:ea:5c:06:79:0f:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2C:FD:0B:CF:13:BD:3E:9E:E9:08:47:15:B9:C6:F2:D3:AE:8F:E5
            X509v3 Authority Key Identifier:
                keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:08:b9:94:95:78:9e:50:d7:26:d7:0b:75:8a:a2:cf:39:
         aa:10:19:17:6e:72:0d:af:97:02:c3:8f:39:b9:42:75:ac:9e:
         81:8d:d3:7f:84:e9:b7:ea:99:54:e2:c7:a0:23:46:43:db:d6:
         6a:1d:2f:6d:1e:97:3f:51:d4:90:54:1b:2c:2a:d7:52:2b:a7:
         c8:45:3f:2e:0b:21:29:a7:3f:ee:a6:1b:9d:d2:61:b6:30:fd:
         7f:07:a3:58:58:ee:fa:d3:7e:c3:36:ed:cc:e5:fe:59:48:d6:
         cc:4d:5e:14:c7:cb:48:81:47:6a:dc:30:35:42:ba:e1:34:f1:
         92:f5:90:58:6d:62:c3:bb:0a:29:32:6e:16:5f:70:f1:c5:40:
         04:e1:4b:b2:bb:b5:1d:ca:84:98:3b:9c:d9:1a:91:21:68:26:
         76:f5:7a:0e:52:37:bc:a0:f9:40:de:e1:81:fd:47:37:d1:d4:
         21:66:15:15:38:c9:1c:e4:e7:4d:1a:67:0f:e7:87:4a:ea:55:
         6f:6b:29:86:33:74:13:54:2b:79:69:a4:37:41:fa:8a:ab:cb:
         7a:9d:2a:66:a9:92:a7:32:0e:66:20:df:6c:09:db:6f:c7:24:
         5b:d3:01:11:f9:d7:77:46:2e:61:fb:e1:ac:b6:73:b3:5c:39:
         c7:32:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:08:48 2024 by rpki-client on console-ams.rpki-client.org