Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
File:                     8l_UfYNvym90HKo4I5N_S7HxspQ.mft (raw, json)
Hash identifier:          4x/H1krAxPFUzkltYZstiNlF+zdpE/gX9ZZEUPE2afU=
Subject key identifier:   01:CC:10:AC:E2:8A:24:E8:2D:98:E6:43:08:96:BE:30:8D:F2:9E:C3
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Certificate issuer:       /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial:       01935689E0C7E07A61BF1117896EC7B9EF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
Manifest number:          055C
Signing time:             Sat 23 Nov 2024 01:01:36 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:36 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:36 +0000
Files and hashes:         1: 4Pz2Po1CJtFKP-ckISZDXoLJaPs.roa (hash: VtsQKFqbYWVvkscDWfGuL6Guv96ch//LFCXPi9/tkL8=)
                          2: 8l_UfYNvym90HKo4I5N_S7HxspQ.crl (hash: 3jKEyDVOQgVsXoOb2mwBG695nu2KM5S7BnBgga4n5qs=)
                          3: OZwMCfOFEZ9Ol0XWZKVEvpkCa8o.roa (hash: fin6P57EwUPuWQdyHM4rF7D7XdEJfZo9PAl8h6dB/U8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:e0:c7:e0:7a:61:bf:11:17:89:6e:c7:b9:ef:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
        Validity
            Not Before: Nov 23 01:01:36 2024 GMT
            Not After : Nov 24 01:01:36 2024 GMT
        Subject: CN=01cc10ace28a24e82d98e6430896be308df29ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:a8:9c:d6:4a:bd:5d:96:8b:7e:13:68:08:
                    19:a0:69:ea:50:69:62:27:ce:94:f8:40:61:46:72:
                    f0:8a:76:49:50:e0:b1:b0:be:58:68:2b:8a:a1:5f:
                    79:d7:f1:a1:16:5f:ab:b6:98:08:1b:d7:6c:b3:a7:
                    11:33:e8:35:be:1e:ac:af:d8:16:b7:e2:01:23:a9:
                    71:8f:3f:61:4e:99:94:cc:5b:71:2a:5e:46:8d:69:
                    f1:72:13:8b:ac:4d:75:f2:fb:0f:d7:8e:e9:9e:22:
                    58:18:26:3b:0e:7d:aa:0e:5e:40:ca:fc:e1:a9:00:
                    20:eb:dd:ff:90:e7:7a:f5:e8:72:09:ef:95:07:11:
                    36:e2:ab:dc:26:ce:85:95:53:36:eb:c1:67:32:76:
                    44:35:eb:b6:7b:3d:ca:73:e8:38:3b:f2:e4:4b:c1:
                    dd:67:c3:43:96:b0:d0:70:8c:6d:11:a8:2a:bc:77:
                    bc:aa:cc:fb:75:c9:bb:1a:bd:5b:40:cf:8a:18:c6:
                    27:81:11:ba:b1:cf:c9:2b:ca:fc:64:77:ea:36:ea:
                    92:5c:29:72:32:f0:5b:9f:10:62:1e:40:fb:32:3c:
                    1b:18:92:fb:53:ce:1f:af:0c:ab:33:7c:45:94:3d:
                    b6:44:dc:2b:99:bd:87:eb:d0:fb:51:b7:db:df:1c:
                    07:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CC:10:AC:E2:8A:24:E8:2D:98:E6:43:08:96:BE:30:8D:F2:9E:C3
            X509v3 Authority Key Identifier:
                keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:8e:04:db:c8:6a:12:4f:83:d4:db:0a:0a:c4:22:83:99:
         7b:90:be:94:76:b6:50:41:12:31:ce:db:95:27:a9:1d:31:45:
         49:fc:ff:9b:7b:56:d6:4a:a4:ae:68:f2:51:d9:95:07:54:e8:
         29:07:ff:4c:04:d2:f8:32:63:83:2c:63:e3:95:ff:d4:4d:73:
         12:f3:72:73:32:a6:f9:1e:65:0e:83:5b:bc:d7:92:ec:b5:87:
         f8:28:89:6f:6a:5e:d0:2e:0c:b0:5a:b0:b4:13:31:1d:76:f6:
         fd:61:59:04:a8:1c:5b:c9:16:64:f0:f9:d9:41:a4:92:0c:d2:
         39:f4:9c:5f:b2:07:91:27:0d:93:91:0c:3f:60:9a:cb:e1:b0:
         e9:c7:e1:be:37:99:4c:28:e9:f8:1a:5c:12:2d:6a:81:5e:2a:
         61:d3:81:b0:c2:dd:bf:2d:c5:38:5b:d7:ac:22:d6:44:05:b0:
         bd:f2:f9:39:db:07:0c:5f:7e:68:2b:2c:7a:4a:36:ab:ba:e9:
         b2:21:c5:18:e2:22:07:38:39:f4:47:73:41:3d:ea:f0:35:e5:
         2f:29:a8:54:ed:80:1f:d9:8a:63:c2:fb:02:aa:a6:47:b8:c0:
         00:0b:64:5c:70:33:8c:b0:da:78:a3:20:69:ef:c5:03:99:47:
         9c:eb:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:53 2024 by rpki-client on console-fra.rpki-client.org