Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File:                     BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier:          fDpS3kjw9thNJH5qCBNh9+UNDVAjJR4Hd0xuDFg3K0s=
Subject key identifier:   9B:90:7E:6E:1C:62:DE:06:D0:D5:E0:C7:A1:19:0E:46:7C:D1:A4:21
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer:       /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial:       01935A2EAD50593C14F113A75C1B6B70638A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number:          10E8
Signing time:             Sat 23 Nov 2024 18:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 18:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 18:00:28 +0000
Files and hashes:         1: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: c3CvcONiBsjVlM2+pddz5qx7XAv2XLi3i8QcyqAxvsA=)
                          2: LH4cJZ5S3NvpdiebArzyxtRiJU0.roa (hash: ytFwvzK4RhE2+j8BmSgLkWY7Grr9ScUdtauRKk1htr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:2e:ad:50:59:3c:14:f1:13:a7:5c:1b:6b:70:63:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
        Validity
            Not Before: Nov 23 18:00:28 2024 GMT
            Not After : Nov 24 18:00:28 2024 GMT
        Subject: CN=9b907e6e1c62de06d0d5e0c7a1190e467cd1a421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:26:1e:af:75:04:1a:ff:8e:fb:d6:95:fc:
                    c7:f6:3d:5a:18:07:aa:4b:10:34:fb:57:ba:68:5a:
                    b4:76:4c:fb:f8:c3:2f:db:e0:83:9c:2f:d0:ff:23:
                    d5:07:2f:12:ca:60:3c:35:4f:20:26:23:cf:55:fb:
                    90:5e:25:90:8d:c5:4f:29:55:b1:53:74:bb:d5:30:
                    7c:ab:75:0f:87:ca:d7:a4:64:5d:75:e3:b0:7b:9f:
                    23:8b:8d:42:6e:18:aa:f7:69:3b:38:b3:11:d4:ec:
                    5d:91:c5:9d:cc:de:67:fd:99:8f:ed:9d:80:57:8b:
                    de:54:4c:19:84:66:34:af:c7:24:6d:1c:4c:f7:ca:
                    10:13:5d:95:fe:af:65:a1:9c:fc:84:f2:e0:a0:b2:
                    fc:d7:68:2c:90:88:3a:2e:bf:81:ec:5e:9c:eb:87:
                    f7:5d:eb:c8:c8:dd:ec:be:a3:e2:65:68:ae:06:3b:
                    6e:a6:55:f2:73:fc:86:b1:f3:06:04:10:b2:b5:29:
                    45:bb:09:b9:09:fb:68:65:00:76:4e:01:3a:af:53:
                    46:8f:65:e0:b2:c4:d2:64:26:a2:f5:d1:ca:3b:ec:
                    ff:89:c0:ce:b9:af:32:73:f3:31:0a:92:d7:41:dc:
                    b5:22:92:38:87:2b:3c:7c:f4:7b:77:b0:44:93:c7:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:7E:6E:1C:62:DE:06:D0:D5:E0:C7:A1:19:0E:46:7C:D1:A4:21
            X509v3 Authority Key Identifier:
                keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:43:43:1c:b2:4d:23:41:10:80:4b:82:3d:63:a3:f2:7a:
         08:68:4f:1e:de:6f:20:f4:77:69:65:b3:fb:af:a8:ff:92:c0:
         29:55:9e:73:a6:c9:79:1b:42:9e:65:18:29:2a:a2:c2:cc:3f:
         35:32:7f:41:1c:0d:86:40:f7:ce:22:7c:7d:a7:bb:ad:f4:7f:
         d2:0d:9b:71:48:dc:83:50:eb:c9:ec:d8:75:bf:d3:87:79:fa:
         7a:86:9a:a7:f5:8f:4a:b9:a0:18:dd:eb:a5:f5:4b:4d:e8:49:
         ec:0b:0d:0a:03:39:53:ba:ea:d2:64:6c:8a:7a:fc:20:60:5e:
         e8:65:3e:2d:13:36:25:45:be:c6:dd:f8:b1:1f:4b:d9:bf:ae:
         a9:5c:99:c8:93:c4:90:25:44:93:fa:98:e9:a9:83:f9:a8:6d:
         5f:73:59:af:63:87:10:92:31:c6:9f:cd:31:d3:0d:9d:fa:ef:
         64:99:6b:03:e8:b8:3a:c0:4a:28:5a:8d:c2:a4:4c:4a:9e:70:
         f4:ca:2f:8e:a1:65:cc:e3:4c:b7:6f:c0:3a:bd:59:86:f5:f1:
         fa:76:bd:b0:a9:6e:d0:72:5f:50:47:fb:29:88:e5:ee:d8:c8:
         8e:0d:94:1c:8c:0c:42:33:98:74:93:6a:44:7f:e2:33:3d:b1:
         e3:35:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:59:40 2024 by rpki-client on console-fra.rpki-client.org