Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File:                     8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier:          1oKRdgwGxk9cpoAVtJB2rqTPnmHci6Qoj4HOTmDAHeA=
Subject key identifier:   8D:8A:12:93:C8:52:C8:81:8F:6D:B2:FC:1A:93:8B:49:A7:5F:13:78
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer:       /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial:       0194064807FD2583252A657BC1BBAEE9BD9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number:          078F
Signing time:             Fri 27 Dec 2024 04:02:51 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:51 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:51 +0000
Files and hashes:         1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: JYtdDN7WBwHCBUwoy4fk9YUXx2eSCTT+eUaQeK4+JxE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:48:07:fd:25:83:25:2a:65:7b:c1:bb:ae:e9:bd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
        Validity
            Not Before: Dec 27 04:02:51 2024 GMT
            Not After : Dec 28 04:02:51 2024 GMT
        Subject: CN=8d8a1293c852c8818f6db2fc1a938b49a75f1378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:93:41:d2:ba:43:c4:52:99:d9:26:55:a8:
                    10:27:65:7d:6e:0f:64:ed:61:d3:28:4b:5e:6d:46:
                    0f:f7:d6:95:81:e0:eb:e6:1b:2f:98:66:6c:5c:68:
                    5a:f4:ce:8c:81:e5:e4:3b:92:e8:11:b9:ed:88:43:
                    40:4c:af:ab:af:dd:42:35:50:7b:3e:e7:cf:71:f9:
                    9f:fd:04:0c:55:a0:2b:23:b1:8e:72:b8:49:26:56:
                    22:32:b2:01:e1:a6:94:f2:e9:7a:6f:a4:c2:3d:ca:
                    9b:d3:ad:8d:b7:15:44:2f:aa:5b:db:39:9d:89:31:
                    38:5f:71:13:e6:35:79:80:76:20:2a:f5:cd:38:73:
                    06:e4:6d:68:7c:e1:7e:76:ee:9b:57:b0:30:47:c4:
                    2b:8c:76:37:38:d5:5c:0a:4d:84:4f:96:0e:d6:b5:
                    5d:31:7e:86:3f:3f:04:f5:59:b7:de:54:f9:ad:d7:
                    69:14:31:f5:ef:65:98:99:81:c1:2e:62:67:d9:e4:
                    57:00:14:1e:f4:3f:e4:86:ba:cd:e2:1b:e5:c7:ec:
                    a4:26:5b:2c:c7:fb:07:24:20:56:ac:a8:e2:13:ed:
                    30:86:a6:09:f3:5d:58:27:61:b5:ef:d8:23:49:fd:
                    17:24:af:84:f3:89:88:e2:05:58:85:91:a5:d7:63:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8A:12:93:C8:52:C8:81:8F:6D:B2:FC:1A:93:8B:49:A7:5F:13:78
            X509v3 Authority Key Identifier:
                keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:77:ec:69:80:ff:55:19:70:e9:df:f7:06:61:9a:46:95:98:
         4b:a5:ed:bf:ac:1d:70:1c:b6:d3:0b:38:30:40:ce:98:dd:e2:
         46:08:b5:a6:90:f2:64:b4:b7:a8:a9:15:f5:63:b5:7c:7a:59:
         67:50:82:51:a5:7e:50:8b:4f:e1:29:d9:bb:fe:b9:d0:15:31:
         29:d4:49:5b:9b:11:f3:64:27:1f:86:f5:db:42:82:fa:8a:af:
         55:85:ba:bb:8a:6d:9e:dd:cf:fe:c0:21:06:01:b5:f2:3f:9c:
         0b:52:71:e6:90:9f:c9:b7:1e:67:3a:99:e1:d8:ad:35:59:6b:
         01:92:5f:ac:27:5c:78:cb:2e:fc:24:32:32:59:9b:0e:07:85:
         ac:79:29:67:f0:be:c6:14:e5:13:b1:55:95:92:91:cf:91:6f:
         ea:26:08:5c:ae:52:c1:d4:25:b5:cd:7d:ac:68:8d:e9:66:07:
         75:7e:3c:13:88:63:c5:7e:6c:78:e6:ca:b4:03:c2:d9:80:e5:
         45:76:85:48:ce:82:f7:e7:f5:64:80:78:a9:2f:7b:5b:6c:c1:
         96:a4:c8:db:7e:65:d5:74:2b:7a:93:dd:95:61:3d:12:82:5a:
         dd:06:7c:5e:6a:23:4a:74:1c:46:92:09:de:b2:e2:62:2f:8b:
         82:f0:2a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:53:36 2024 by rpki-client on console-fra.rpki-client.org