Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File:                     g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier:          QNMMtc+usxP44YlszdKRsXY3gaY8xeVJ7kCVKhYoEWo=
Subject key identifier:   E5:6A:56:E6:12:42:C0:09:57:01:71:A4:03:97:D0:31:9E:CC:02:D5
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer:       /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial:       019357645AC3362A0FE349B73D554D121EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number:          086B
Signing time:             Sat 23 Nov 2024 05:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:14 +0000
Files and hashes:         1: GmWwrSp8WCsjuWV7s3ElvcyPeMA.roa (hash: KXk2JXj/N+1XyaZhXNs8mmnkai7rE39HRXy5klXDYWw=)
                          2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: I/Nr0r2UsY6C8Iw88tJ6oVESs+5XaF6rdJCW5Zl0AFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:5a:c3:36:2a:0f:e3:49:b7:3d:55:4d:12:1e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
        Validity
            Not Before: Nov 23 05:00:14 2024 GMT
            Not After : Nov 24 05:00:14 2024 GMT
        Subject: CN=e56a56e61242c009570171a40397d0319ecc02d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:43:61:12:64:3a:da:77:cd:3e:91:e0:3b:07:
                    a9:d3:68:87:20:d8:e0:52:c7:77:03:9e:51:b3:af:
                    1e:00:05:7d:2b:a4:d0:d9:23:cb:5a:37:04:ff:c6:
                    cb:8f:36:64:b7:e4:f8:48:2b:4a:80:aa:7a:38:55:
                    ca:e4:4d:0b:a0:62:bf:3a:1b:b9:dc:e4:62:f8:83:
                    e6:e1:66:24:94:70:e9:93:ed:10:6d:19:d5:3a:32:
                    bf:ee:e1:40:43:1d:7b:68:f2:db:b3:05:29:a8:d5:
                    36:43:e0:75:3f:e6:ed:05:f6:a6:ff:b6:31:ce:f6:
                    06:d8:11:c4:52:6d:e4:23:1d:4c:36:f8:d4:67:f1:
                    4e:5f:5a:32:f6:81:7e:df:fd:6c:d3:fb:85:f2:b6:
                    0b:98:4c:4d:77:51:7d:e7:4e:74:8f:66:5f:7e:8d:
                    3d:08:d4:b4:c4:87:a3:a8:77:ce:68:89:33:d9:b4:
                    a6:6d:5b:76:29:f1:f3:d2:37:c0:25:a9:c7:c4:da:
                    28:27:7f:02:3b:25:f6:fe:2e:d0:54:c0:bd:11:a3:
                    83:b1:f2:1d:a7:f5:aa:e7:d8:3c:76:99:a6:bf:f6:
                    dd:e5:50:80:8d:5e:3c:6b:4a:1b:01:5a:d8:10:0f:
                    5b:10:27:39:80:55:8c:8c:a0:bd:29:e3:ea:3d:bb:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:56:E6:12:42:C0:09:57:01:71:A4:03:97:D0:31:9E:CC:02:D5
            X509v3 Authority Key Identifier:
                keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:83:a3:13:ea:16:de:e4:37:85:6d:87:2d:b2:8d:47:99:da:
         8a:9b:16:bc:8c:2d:e5:a5:e2:51:7d:eb:b9:0a:93:38:a1:c9:
         d2:60:bd:ab:9f:b9:0a:9c:0a:be:02:b2:a3:1c:59:01:63:5e:
         9b:fa:a9:24:6c:45:c4:4c:62:c4:28:39:9f:56:3e:c3:d3:2e:
         3d:70:b5:d3:06:4a:41:c5:fa:1a:8c:14:cf:d6:ff:4c:d5:61:
         d6:45:30:60:e3:a4:3c:cd:9c:33:89:4e:f9:6a:92:b9:96:1f:
         ef:40:6f:67:e1:a3:1e:83:0a:56:26:7d:01:87:36:5d:86:c0:
         4c:1a:4d:aa:c0:2a:ab:64:a7:38:58:75:5d:a7:d8:e5:fe:1c:
         4f:c0:e6:f0:10:b6:1e:7b:4b:98:a8:5f:a0:3e:62:09:d1:70:
         97:e6:81:13:24:a1:ba:d3:f6:42:95:01:47:c5:3a:cc:7d:83:
         77:4b:1e:36:a1:21:9b:2b:1f:3d:52:76:f1:ae:34:83:36:d2:
         f1:e6:30:57:92:b2:c9:f6:dc:a2:a4:26:50:b1:02:b2:24:f1:
         26:5f:0e:47:5e:59:1a:df:d8:36:15:11:f7:97:95:90:af:a4:
         43:18:27:1a:d9:f2:2c:66:e0:fb:dd:15:82:8a:34:9d:05:df:
         2b:77:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:36 2024 by rpki-client on console-ams.rpki-client.org