Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File:                     kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier:          dR5QAMf5Lq7mHrdpNfdPsIHiOJCBIGOQy12kx8hrzQQ=
Subject key identifier:   88:86:E6:63:9E:51:EA:9D:85:9A:6E:AC:17:78:D3:80:70:6C:F4:EB
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer:       /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial:       0193572DC412C9883D83E824F53C678E0AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number:          1111
Signing time:             Sat 23 Nov 2024 04:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:37 +0000
Files and hashes:         1: egVarJnJqLyNuHw_59z1i1EUTHo.roa (hash: XclzzPJFUA1rhn4KYvAOoqvmiqy7z1xXExMmPV7Txiw=)
                          2: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: vPFZ9SY4Lt03NUdT5E9kU3LVhqiLm3FrKZVjN4IY0JE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:c4:12:c9:88:3d:83:e8:24:f5:3c:67:8e:0a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
        Validity
            Not Before: Nov 23 04:00:37 2024 GMT
            Not After : Nov 24 04:00:37 2024 GMT
        Subject: CN=8886e6639e51ea9d859a6eac1778d380706cf4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:2e:f8:f4:86:ed:aa:61:6d:ed:88:94:ca:
                    d9:4c:fe:e8:89:6f:94:72:24:f4:2c:13:83:6e:3c:
                    96:c4:41:9a:38:ff:39:f9:c1:95:9a:6e:38:fb:f3:
                    dd:73:e4:db:5d:6e:bb:23:51:0e:1e:6e:9e:0b:29:
                    83:c2:10:93:98:cc:11:40:6f:d6:49:e1:d4:2b:86:
                    29:af:a1:b7:66:9d:e9:fc:fe:cf:97:7f:37:d1:21:
                    c0:7c:d0:6a:d3:56:1a:31:8f:4b:74:bb:99:34:80:
                    dd:73:06:25:de:2a:8b:5d:09:c6:ca:0d:1b:ba:44:
                    1f:44:ba:8f:bc:d3:16:1d:38:4e:c8:d0:cb:90:92:
                    39:79:d1:16:9e:ed:5d:83:a0:c3:ec:74:77:db:36:
                    5d:56:d2:56:35:78:df:eb:43:2d:6c:c4:c6:dc:ff:
                    fd:75:81:ae:8c:4c:ed:a0:9e:59:93:74:6e:4b:83:
                    a9:e9:81:99:99:3a:13:ab:57:b2:98:0c:0f:86:49:
                    31:25:ea:e3:89:85:c9:82:46:2a:31:a3:56:5b:49:
                    7f:bd:3b:ab:6f:e3:6f:55:99:7a:44:5f:31:29:4b:
                    90:28:7d:d5:fd:ed:c0:fe:09:a6:df:40:29:c0:15:
                    4d:a2:81:49:bb:54:43:ad:8d:1b:29:a4:ab:95:7f:
                    16:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:86:E6:63:9E:51:EA:9D:85:9A:6E:AC:17:78:D3:80:70:6C:F4:EB
            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4b:f2:f6:52:15:c9:bc:0e:f1:a2:24:b8:1c:dc:4c:d4:ab:
         42:cd:66:62:82:26:b5:13:b3:85:ed:83:22:30:b2:dc:51:ab:
         23:ea:0b:25:26:8f:9a:d3:43:5b:b9:f9:cb:0d:e0:c0:de:85:
         61:9e:7c:64:11:8a:7a:48:4d:45:ad:c2:43:01:3d:ca:7c:88:
         f0:3d:cd:b2:3d:ce:c6:78:ba:c5:8c:f3:56:5b:df:06:49:54:
         64:0d:db:b5:02:b5:c5:dc:37:d4:14:75:b4:c0:c7:06:5d:fe:
         d9:bc:e5:c8:e9:ba:d4:cf:7c:8b:3e:3b:8f:6b:7b:17:f7:81:
         a5:3d:4e:19:0e:dc:68:64:10:b5:ce:d3:23:d0:1c:c8:2d:5e:
         93:0d:84:04:34:d3:4f:e4:15:8b:25:94:e4:d3:90:cd:ab:81:
         7b:3b:63:70:a8:d0:ee:64:ee:29:e5:cf:92:70:ac:bb:cf:37:
         ca:72:f4:f4:d5:93:ac:a8:a7:85:2c:a2:2b:f5:ab:60:ad:4b:
         26:32:56:42:e8:e5:55:8a:1c:33:41:af:e5:d8:c6:fa:eb:72:
         bc:3c:c7:ba:18:22:72:14:67:12:76:80:0a:98:59:c5:bf:20:
         40:d6:d4:3a:98:f6:e0:63:5f:3b:cf:29:d1:84:cc:0c:c7:48:
         57:1d:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:41 2024 by rpki-client on console-ams.rpki-client.org