Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File:                     h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier:          EUautdxcY1k8RfMn46yAfbVQ9WFoVEHYbhNP6pHn+Ew=
Subject key identifier:   E7:E5:6D:3B:BB:57:46:60:4F:40:9A:B5:C6:E8:93:37:04:20:F8:AD
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer:       /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial:       019369DB0B2382F5CDA09D1D84DCB7730238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number:          059A
Signing time:             Tue 26 Nov 2024 19:03:03 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:03 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:03 +0000
Files and hashes:         1: Wd13vMZJlV8KJZb8O8n4mXNAg08.roa (hash: 8gdqJnUZa4fGpbPFYppn0ofYh7qm/ilA9+2RjUofZWs=)
                          2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: 8Dg7jQrTfRFRN31yvxTTfy+thsFWMjTETCfNWqAhktc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:0b:23:82:f5:cd:a0:9d:1d:84:dc:b7:73:02:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
        Validity
            Not Before: Nov 26 19:03:03 2024 GMT
            Not After : Nov 27 19:03:03 2024 GMT
        Subject: CN=e7e56d3bbb5746604f409ab5c6e893370420f8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:08:b7:73:64:cf:99:f5:28:46:3f:68:40:
                    ed:58:c5:be:3a:fe:4b:c1:ba:b5:6c:46:74:67:5d:
                    6f:54:77:0b:51:42:e7:e4:c8:ca:49:0b:59:79:57:
                    ca:88:be:34:b0:af:fa:6b:e7:6b:07:ca:47:1c:fb:
                    69:73:ae:e2:3e:49:a6:36:84:e0:1b:fa:91:ac:de:
                    d0:10:d0:0f:e9:be:fd:c6:ff:cd:4a:7f:8b:78:04:
                    52:d8:97:c0:08:43:37:45:00:1d:e1:82:40:82:ba:
                    2e:d2:f0:1b:b8:62:75:f2:15:65:c5:8a:06:04:1b:
                    55:c7:7a:7f:c7:c5:31:fc:e8:6a:c3:cb:24:6c:98:
                    9c:d9:a3:f0:94:62:63:e4:fd:ef:20:17:f1:75:a8:
                    9c:77:63:b0:4a:e6:19:e7:12:9e:ad:e6:76:96:4b:
                    d5:1c:e7:ed:4f:c2:5a:3b:26:0c:d4:e0:ef:f1:9b:
                    19:49:79:b8:0a:c3:b2:0a:8b:18:08:bb:dc:c3:85:
                    12:70:f1:8d:f9:76:58:44:da:44:6e:92:a0:9f:57:
                    fc:66:26:11:53:ca:33:6a:ee:50:b5:19:a6:fd:20:
                    ab:69:c2:ca:b3:67:4d:26:1d:01:ee:58:12:45:5e:
                    6e:6b:da:da:af:a1:79:d3:cb:d6:f5:5f:c2:6f:e1:
                    93:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E5:6D:3B:BB:57:46:60:4F:40:9A:B5:C6:E8:93:37:04:20:F8:AD
            X509v3 Authority Key Identifier:
                keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:58:08:2f:e8:1d:a7:d8:ed:49:74:53:a4:26:0f:1b:88:fb:
         db:3d:bb:dc:15:83:98:6f:a7:ef:c5:07:c4:04:08:25:7a:40:
         ac:87:c8:2f:3e:40:04:ab:57:09:9a:da:55:be:6c:be:20:e2:
         18:3b:79:9f:16:9e:ae:b2:2f:3e:05:85:56:b3:f4:c7:6b:6a:
         5b:de:8a:fe:6c:73:c3:69:3a:5c:ae:00:02:51:f4:46:49:94:
         e2:22:56:82:9f:36:5b:0e:96:6c:99:ff:93:5e:74:f5:08:8d:
         5d:0a:83:b8:8e:10:83:fa:4f:77:0c:1a:e1:84:fa:10:67:fc:
         65:ab:2e:2e:90:2e:60:7d:04:31:63:51:1f:40:1e:28:ac:35:
         5f:95:c0:0c:d2:53:7c:b3:7f:38:14:b4:95:24:52:5f:11:ad:
         9a:a5:de:31:56:8d:6c:46:2b:e2:e9:e3:7f:48:d5:ca:e6:ce:
         6d:22:30:26:d6:c4:88:8f:e8:a1:40:0a:5e:ee:65:81:4e:e9:
         05:44:1b:e4:61:89:54:7a:af:03:d1:2a:40:22:8b:3c:5a:e9:
         81:57:11:65:e4:54:9c:79:80:8e:df:e3:e2:87:c4:0e:ff:da:
         7c:a6:8c:02:df:40:5a:37:b5:15:10:31:08:d2:dd:4d:1c:14:
         a0:7d:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:05 2024 by rpki-client on console-fra.rpki-client.org