Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File:                     8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier:          BDxdrbd4NLGDrgdFoEhIU9/6Fr1rBYOogTP6uS3wGIA=
Subject key identifier:   30:32:58:42:F8:58:F6:CC:34:63:B0:7B:10:08:90:68:53:BD:A9:94
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer:       /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial:       0193696ACF21FA80412B7450427E493C4C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number:          63
Signing time:             Tue 26 Nov 2024 17:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:27 +0000
Files and hashes:         1: 1T1aOqP3zdHjJM_CtV1UvaBL5mo.roa (hash: TLCSk1Z+liuD+SZ/aZSvjEV+pzC1RdmXVcxPJv46hqs=)
                          2: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: ELUDdvdPtU6bpJ7ZCqc5Q7NiapiPUn9qb9L6GD2Ewzk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:cf:21:fa:80:41:2b:74:50:42:7e:49:3c:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
        Validity
            Not Before: Nov 26 17:00:27 2024 GMT
            Not After : Nov 27 17:00:27 2024 GMT
        Subject: CN=30325842f858f6cc3463b07b1008906853bda994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:51:aa:4c:ad:fc:5a:24:25:7e:cf:af:ba:
                    8e:c8:ec:91:40:e4:dd:7e:db:06:41:d1:4f:3e:8f:
                    7c:82:85:d0:44:ea:52:15:ad:f2:3d:33:4b:75:7a:
                    ab:7b:98:59:04:0e:c6:8a:43:42:e1:21:50:16:f1:
                    3f:ae:f2:66:e7:f3:77:57:02:36:da:03:31:71:c1:
                    cc:9c:23:f1:2d:35:0f:38:07:56:b7:7b:a0:33:71:
                    de:a7:9a:2e:81:a7:aa:69:1c:ea:9c:8e:25:68:73:
                    19:60:5a:9f:d6:77:0a:5d:55:b2:3e:84:e0:7d:ff:
                    62:b6:87:ce:ff:04:c2:ef:5d:f2:fd:5c:56:11:38:
                    c8:a8:8b:71:12:26:ae:e8:d8:53:0d:d5:85:81:f1:
                    bb:49:7d:60:3b:6c:b2:53:49:3b:f7:87:d6:28:99:
                    42:7d:d6:1c:9f:89:8a:54:72:a9:b6:b1:b4:52:fa:
                    f1:a0:79:2e:0d:d9:60:f3:ba:ee:46:05:20:e5:3c:
                    e5:8a:ba:55:ae:ef:c0:06:ef:a9:18:01:20:b7:ce:
                    cf:25:43:1d:29:63:6e:e1:de:bd:51:32:72:b7:d1:
                    c6:74:3e:3e:44:18:16:fa:fc:52:c6:55:32:4b:4d:
                    01:c3:e2:2e:f1:a8:a8:7b:c9:9c:0c:5c:18:eb:f0:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:58:42:F8:58:F6:CC:34:63:B0:7B:10:08:90:68:53:BD:A9:94
            X509v3 Authority Key Identifier:
                keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:db:df:d9:df:43:80:43:1d:eb:45:c0:42:71:a7:eb:2c:47:
         7d:e8:9c:59:c8:a4:0e:55:9e:1f:dd:ac:16:2d:e5:ed:53:ee:
         d9:77:44:dd:b1:3f:e4:56:e4:6c:19:b6:58:99:10:1e:d7:29:
         5f:57:c4:49:8e:5b:b6:3f:ac:11:02:db:c6:57:13:2a:ca:cc:
         f0:a9:01:6e:d0:ba:e0:1c:b6:b7:fc:c7:8b:ba:01:b5:49:04:
         18:9c:db:5d:56:85:44:93:f0:92:44:99:05:17:6f:4a:23:20:
         06:a1:c6:36:6c:bc:38:26:dc:fb:a3:6e:1c:9f:0e:ee:7d:fd:
         40:86:e3:ed:05:a9:23:3b:79:10:24:3e:61:e5:87:a5:77:92:
         59:cf:c7:d6:c3:9b:a5:ef:5d:7c:97:65:a7:9c:50:96:04:cc:
         d0:d2:bd:20:b6:30:88:98:95:06:3c:9c:d4:f9:74:4f:d9:8f:
         b4:82:c7:b0:ad:79:1a:63:98:e5:90:fd:d2:51:ed:77:f9:29:
         f8:f4:5b:67:5f:80:86:a0:6c:08:c2:54:88:6d:18:41:ee:ac:
         68:45:8b:fa:da:7c:cd:4c:2b:80:3e:c4:5a:72:26:c1:15:fa:
         ca:20:4b:aa:7f:16:71:5a:e5:88:ef:8e:41:1e:d6:51:fd:08:
         e3:4f:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:11 2024 by rpki-client on console-ams.rpki-client.org