Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
File:                     8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json)
Hash identifier:          smL65WoyYolEkcJYEuuIe8pnAU6uKOtGxzgEAHgHiz8=
Subject key identifier:   11:0E:BD:7C:52:17:9C:85:3C:2F:88:97:63:4C:85:2D:4D:D8:72:5B
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Certificate issuer:       /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial:       0194064685E4AF64B03C7EC2D3A0F325571A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
Manifest number:          0C41
Signing time:             Fri 27 Dec 2024 04:01:12 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:12 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:12 +0000
Files and hashes:         1: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: HIXi5WiX4PXilsE6sQ/aZnwT8w4ZGKRd5gECsF40BXQ=)
                          2: ZJ7dWZjPpT9SbhU2HdjkS1DrSU0.roa (hash: CgsasTNulsV6LHihN00K2vuadMBotT2wThp7PEKF4j4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:85:e4:af:64:b0:3c:7e:c2:d3:a0:f3:25:57:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
        Validity
            Not Before: Dec 27 04:01:12 2024 GMT
            Not After : Dec 28 04:01:12 2024 GMT
        Subject: CN=110ebd7c52179c853c2f8897634c852d4dd8725b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:64:d0:f5:1a:82:6c:38:d5:a1:5d:6f:83:
                    40:71:c9:ac:d5:53:97:47:70:b8:f4:1b:76:4e:6b:
                    43:0b:e4:38:93:aa:fd:f9:d6:25:83:5f:d3:e7:80:
                    c1:52:d2:4a:f3:d0:73:d5:c1:56:53:aa:5f:8b:f1:
                    ba:6c:30:a5:0d:ce:b1:2d:91:2f:a0:e3:b0:5f:ea:
                    96:16:1a:ac:a4:bf:95:f0:a0:22:d6:0f:77:9f:77:
                    be:63:24:1b:a4:73:b3:f5:66:fb:a9:97:20:65:b3:
                    59:94:ed:cf:e7:ac:b5:18:02:41:ee:fe:aa:ec:3d:
                    9c:5b:6e:d1:05:51:3c:80:27:1e:16:33:76:56:fd:
                    30:0c:1b:91:71:03:57:91:a3:c3:85:66:cd:e2:0a:
                    49:b3:f6:fb:4e:94:39:f7:a6:fe:d6:51:20:92:27:
                    3f:e6:bc:ff:e6:4c:d4:53:b4:f3:65:0b:44:2b:69:
                    4c:6f:6e:1b:d5:a4:67:de:a4:d3:43:2f:c0:48:9b:
                    3b:93:ea:d2:a5:8c:98:7a:3b:19:aa:75:41:9e:73:
                    c7:30:ae:75:3e:38:b3:de:eb:c6:6b:41:64:8f:08:
                    73:74:66:8b:8c:4d:5e:cb:c7:10:1f:07:24:7c:f2:
                    fa:33:10:62:75:54:c4:f5:70:6a:2b:16:be:00:92:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0E:BD:7C:52:17:9C:85:3C:2F:88:97:63:4C:85:2D:4D:D8:72:5B
            X509v3 Authority Key Identifier:
                keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fe:06:04:e1:4b:4d:c7:b9:ca:55:dd:d0:95:ae:3b:a6:77:
         9d:97:22:c7:58:9a:05:4b:09:c7:3b:ce:f9:e8:ce:90:11:4b:
         fc:89:07:82:f5:13:17:30:88:95:66:f6:71:4a:ff:76:0b:8a:
         0c:4c:2d:d6:68:7b:08:fc:af:18:41:76:5c:09:23:a5:95:4b:
         ff:fe:3e:d5:f3:e0:76:09:07:06:8e:37:ac:9c:0f:a1:c2:49:
         d2:b9:06:7d:9f:de:71:6c:86:88:b2:18:d4:30:6a:e8:5b:2b:
         f5:89:1e:f0:4c:80:48:9d:6b:f2:02:eb:89:66:67:9a:46:9f:
         fd:e7:4c:05:98:c4:9f:75:f8:d9:12:7c:8a:75:5a:56:20:2f:
         7d:7d:16:62:6a:c5:75:7e:79:9f:b4:26:62:40:a8:ca:4d:8d:
         3b:b9:bd:ad:47:40:f5:e0:6f:45:90:51:ed:41:8a:e6:54:9c:
         18:90:ad:b9:bf:01:12:10:6c:c0:06:c6:c5:e1:21:8b:4d:19:
         83:f4:e1:df:4c:78:f1:2f:3b:1d:f0:13:2e:4d:ec:32:35:1e:
         1f:1c:f7:61:9b:b1:4e:89:f0:81:f8:81:48:0a:a4:71:d3:1c:
         d9:52:28:e4:10:5d:3b:a3:99:03:5d:65:c4:5d:6e:5d:7e:64:
         d6:62:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:27:56 2024 by rpki-client on console-ams.rpki-client.org