Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File:                     josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier:          InVfOS478OcqdA6KolIaPy0EP9NZUaWlbzVeZshNjPA=
Subject key identifier:   89:87:DD:B8:CB:C3:EF:06:10:51:63:B8:59:E2:A3:EC:E0:2D:AC:95
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer:       /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial:       019365FE040D6ADCA11D40A75E059AB247DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number:          10EF
Signing time:             Tue 26 Nov 2024 01:02:46 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:46 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:46 +0000
Files and hashes:         1: 3IVzsGDuEO3MzXs65szdwv2epAQ.roa (hash: oecSDiFxGR/AIPD9ft+K/rhwt+qCeB/yaFihYhEZnIM=)
                          2: VeUPu0UTIyaB2pgwAPbk8L6nmPM.roa (hash: ELU9dorr5Lww60XMr/2aq6m9hWsVPaiNdhOXbWxCkUs=)
                          3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: q+ELpxO+8SkPW7WOwXjEuDGp/Y4c1vAuFqQq89OU6ws=)
                          4: sZFsEWLHagoCycXlcSDsttQrtXU.roa (hash: RI7hxmbp4Q7XicGGyx2NIXmPXmMa1gPE1nmBQStJMdo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fe:04:0d:6a:dc:a1:1d:40:a7:5e:05:9a:b2:47:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
        Validity
            Not Before: Nov 26 01:02:46 2024 GMT
            Not After : Nov 27 01:02:46 2024 GMT
        Subject: CN=8987ddb8cbc3ef06105163b859e2a3ece02dac95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:01:3e:c6:aa:bd:9c:4c:6a:8a:5a:cb:6f:
                    88:82:f2:fd:ff:43:65:50:d8:b8:7c:9e:79:87:66:
                    2b:0a:9e:00:98:0e:a7:20:34:b3:fa:a0:60:00:3e:
                    51:50:51:79:d5:67:4f:e0:34:17:65:fc:ba:6d:e0:
                    61:e2:e7:45:bc:e9:8a:32:05:4a:7b:f8:19:46:92:
                    79:25:58:5e:aa:69:44:d9:b7:16:c2:1a:d9:38:4f:
                    9b:68:7c:15:b4:09:e6:ab:ca:c3:5c:91:ac:4b:c0:
                    03:39:f0:ce:d0:c2:d7:14:1e:95:dd:7a:4b:4f:5f:
                    03:2f:0f:88:ea:84:f0:73:9b:ed:5a:07:31:77:b1:
                    fe:7c:52:60:56:05:46:a9:17:a1:96:81:b1:da:43:
                    ee:2a:90:aa:1d:04:fc:73:22:6c:f6:2a:4f:9b:db:
                    21:6b:e3:f6:08:c6:c7:d9:aa:22:91:b6:77:44:a0:
                    5a:0e:b1:53:26:8e:77:16:69:45:f3:34:53:87:5d:
                    71:00:76:e6:3d:f1:eb:dd:81:b5:52:c4:c1:10:33:
                    0e:0a:4f:f0:34:31:5b:ed:08:aa:1c:00:44:9e:3a:
                    6c:18:35:34:89:22:94:0f:4f:a4:b7:c2:f6:b5:fb:
                    2b:cf:99:26:c2:05:3e:c5:24:7e:c2:d7:dc:75:c6:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:87:DD:B8:CB:C3:EF:06:10:51:63:B8:59:E2:A3:EC:E0:2D:AC:95
            X509v3 Authority Key Identifier:
                keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:a0:f4:d0:3b:fa:d6:61:4e:4b:72:d6:1e:3f:c7:ba:61:
         23:48:4f:d4:9f:43:66:28:aa:3e:86:8c:a7:12:63:b2:42:d0:
         66:9e:64:1f:44:f9:3d:9d:de:1e:5a:cb:6b:b5:61:6e:8e:ad:
         4d:d9:80:9b:46:e4:ef:97:ff:ff:61:dc:c7:c0:e6:1a:34:a1:
         14:5f:e6:e5:5c:5f:0a:75:c9:86:a5:39:3a:f5:f0:2d:1a:3e:
         4b:eb:67:fc:a8:8c:aa:2b:64:e9:fd:19:2e:4e:9a:2b:e8:90:
         35:8c:1f:df:f4:8f:3b:f5:66:5d:f4:d3:8f:3a:ef:55:36:6b:
         c8:dd:b6:85:37:4d:83:aa:c3:b4:47:fc:b0:ec:98:c6:d6:b8:
         3b:a3:a4:7f:e9:48:4e:16:2f:96:ed:d9:20:49:2a:63:16:b6:
         d9:dd:a2:d1:6f:f6:fa:ee:b3:2b:21:c7:ab:9f:43:bc:43:dd:
         3f:af:c6:15:a1:64:5d:80:0d:c8:02:14:88:32:39:40:12:32:
         a7:8b:2b:e6:49:8b:cd:57:8d:18:c4:6d:06:57:ff:b8:f8:98:
         9c:8b:de:8a:b4:a2:3a:93:83:23:2e:11:a6:3e:1d:0b:08:fa:
         33:aa:c7:f3:59:29:b1:99:61:ee:7b:42:ea:ad:d5:53:10:f8:
         89:39:83:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:00:51 2024 by rpki-client on console-fra.rpki-client.org