Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File:                     8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier:          eWgdtYmBB0hkl0CN4pOxoAR+INBqITA1rTxY5fTw0D8=
Subject key identifier:   29:24:32:87:5C:80:C5:91:A4:15:50:55:F9:BC:FF:F1:67:A9:6A:73
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer:       /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial:       019359535DF2C73BC6840FCC6957F612C7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number:          0282
Signing time:             Sat 23 Nov 2024 14:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:55 +0000
Files and hashes:         1: 03h7-9SxDq0PRtH161uaGptMvW0.roa (hash: BrscDSEj1RITwVaB2YnZPxeRu98tJl4kEIq3Lous9NI=)
                          2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: baCLA3bY5gQxVcAHlFYfWyJjjC3cDBww2VpnXoeaUqQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:5d:f2:c7:3b:c6:84:0f:cc:69:57:f6:12:c7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
        Validity
            Not Before: Nov 23 14:00:55 2024 GMT
            Not After : Nov 24 14:00:55 2024 GMT
        Subject: CN=292432875c80c591a4155055f9bcfff167a96a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:01:7b:f1:d3:fd:7d:78:ed:bb:10:61:a6:
                    7f:3a:bc:36:06:a5:cc:30:bf:f9:32:c1:da:fa:42:
                    40:39:14:f1:02:a8:7c:28:c8:3d:7e:b2:37:6f:ef:
                    93:04:f0:b3:ea:8b:08:53:fa:06:b8:d1:22:52:58:
                    59:57:56:32:89:8c:11:a7:2a:dc:d9:ba:64:92:15:
                    c8:0b:42:93:32:8b:13:c6:40:a9:e2:7a:e4:fa:ca:
                    90:56:b5:01:ef:c9:df:77:be:0e:22:ba:0d:4f:88:
                    5e:b9:c9:bc:15:5a:4d:4f:4f:42:81:7e:89:ae:da:
                    d5:8f:5a:5b:ab:2b:0a:68:28:94:0e:24:81:2e:66:
                    bc:7a:a2:00:de:09:2d:ad:23:38:8a:4c:46:fc:fc:
                    a2:cf:f6:09:6a:26:0f:0b:50:00:4b:91:53:ee:e7:
                    73:b6:78:ae:a8:00:05:ec:34:79:7f:b7:df:6c:5d:
                    7a:bf:c4:5f:d5:13:51:4f:ad:4b:9d:61:d9:3b:50:
                    89:43:30:84:60:55:ef:17:a9:04:fb:a5:62:8c:25:
                    f1:88:c2:f3:f4:71:b8:65:47:9f:55:07:60:4d:12:
                    3f:61:27:e1:bf:ec:b2:34:d6:be:9e:c7:e1:c7:10:
                    ed:38:b4:54:f1:a0:ba:35:b2:51:9f:9e:cc:ab:20:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:24:32:87:5C:80:C5:91:A4:15:50:55:F9:BC:FF:F1:67:A9:6A:73
            X509v3 Authority Key Identifier:
                keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:42:89:97:c6:69:cf:17:52:57:4b:ae:ea:59:92:8a:75:dc:
         a6:74:cf:b2:ff:7c:c5:ae:69:d8:2a:d0:83:2d:a2:8c:7d:e3:
         af:99:10:aa:c4:02:d5:96:98:87:6c:8a:27:0b:61:f8:9f:0e:
         97:97:7c:95:6e:3c:c0:48:0a:b9:78:a9:5f:ae:0f:7e:36:92:
         53:b2:77:c6:d5:d1:75:e5:77:37:39:56:de:3e:bd:40:2d:91:
         d2:ec:ff:9a:04:a0:43:d2:9d:c1:95:26:5f:e5:87:26:31:0b:
         5b:84:95:7b:03:a2:4f:5d:4e:d4:0e:6b:71:49:c7:31:eb:a0:
         3b:f5:8e:07:6f:fb:84:3b:9e:77:f1:c5:1c:61:41:71:9f:2e:
         ca:8d:53:e5:46:7a:c5:d5:a2:ad:b1:86:41:ef:c2:78:82:32:
         da:5e:01:09:6c:7f:cb:e1:f1:bd:a2:f1:97:38:59:80:a3:59:
         c5:e7:de:52:33:d6:77:2b:b1:f0:0e:62:0e:e0:a1:f4:cb:c4:
         df:04:e1:73:f0:e9:eb:f5:81:c2:14:99:bc:2d:69:fd:19:08:
         fb:46:83:44:5d:39:99:8b:fb:f1:93:45:80:56:1e:e7:ae:9d:
         ba:47:6c:53:b4:0b:a7:b9:23:bf:52:f8:6c:04:79:8d:7e:9b:
         9f:08:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:11:23 2024 by rpki-client on console-ams.rpki-client.org