Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File:                     sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier:          O0p9QggYwN1yipWvvf8fccaqUjtCMh28nM0So0eUA00=
Subject key identifier:   D1:0C:83:6B:FB:77:A9:D4:27:EC:CF:C4:89:F5:10:DD:1E:37:C2:0D
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer:       /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial:       01936AEB8CB0C79334801BCF796CAEE48C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number:          130E
Signing time:             Wed 27 Nov 2024 00:00:42 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:42 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:42 +0000
Files and hashes:         1: YXm5y-WOgIFgpIBoOkw5Gb-LiE4.roa (hash: KQh0AHwc0Xmc3z/+bh2TpMj4l+e4GV4oZo0Y4NqRYTk=)
                          2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: MzvMNHdrsLuVMD/r+NwPH/OsUR+sWjb169LFUp1fDDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:8c:b0:c7:93:34:80:1b:cf:79:6c:ae:e4:8c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
        Validity
            Not Before: Nov 27 00:00:42 2024 GMT
            Not After : Nov 28 00:00:42 2024 GMT
        Subject: CN=d10c836bfb77a9d427eccfc489f510dd1e37c20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:c4:ec:d7:01:88:df:40:31:29:b3:47:34:
                    e3:67:de:4c:d0:80:83:04:00:3c:31:56:9d:70:c1:
                    7a:dc:09:6b:41:c3:36:93:7e:73:6d:04:5e:9b:68:
                    2c:0f:45:0b:66:0d:d9:58:6c:0c:ca:05:38:9a:08:
                    c2:5f:54:a4:e0:60:81:9a:f3:cd:dc:4d:aa:53:5e:
                    6c:b9:f0:c5:44:b7:f2:ac:76:f2:1b:f9:fb:11:74:
                    a8:f9:68:5a:f7:6b:98:4d:03:51:7e:28:b3:c9:6f:
                    37:2e:9f:a3:64:a6:00:e3:64:f0:f1:6d:6b:48:d4:
                    5a:68:34:fe:9d:c4:6b:dc:f3:d4:68:75:cc:c6:a0:
                    cf:f7:05:96:e0:d0:3a:f4:f3:66:45:3b:17:aa:db:
                    19:1e:d4:ce:67:4d:af:6a:16:75:ff:cd:3c:12:e2:
                    fa:37:57:bc:6d:66:97:3f:d3:59:a2:ed:7c:dc:21:
                    37:df:52:33:44:ab:2d:71:a3:81:7b:ac:1b:7d:65:
                    70:d1:ad:97:ea:83:5c:0e:1f:44:5a:3d:4a:96:0b:
                    14:11:bf:55:76:5b:dd:55:5e:97:f1:5a:aa:0b:11:
                    23:37:3e:d1:79:51:e0:39:44:df:e0:ef:ed:42:4a:
                    0a:4d:f1:72:8e:8f:e9:18:ba:1e:c5:4d:89:ca:4e:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0C:83:6B:FB:77:A9:D4:27:EC:CF:C4:89:F5:10:DD:1E:37:C2:0D
            X509v3 Authority Key Identifier:
                keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:52:7e:f5:0c:5f:83:db:f4:7d:14:8d:bb:9a:49:9f:c8:
         fb:ca:67:bd:ba:68:48:21:38:c1:3a:9a:f4:2a:22:52:63:b4:
         9f:81:51:80:91:cd:f3:ca:4c:19:ac:35:f2:da:9a:31:d2:bb:
         78:b8:57:c8:9b:d1:13:30:99:0e:0f:a4:50:59:88:0f:87:5e:
         df:02:f2:9a:ad:87:07:16:7f:0b:59:fb:2f:ad:ab:fb:cc:05:
         98:35:6f:05:0d:f7:4f:db:50:e9:f6:94:9f:bf:49:ff:1f:1d:
         c3:1d:b7:dc:60:54:93:4c:40:30:50:6a:b9:12:ee:14:6e:a3:
         85:3f:ce:c6:9e:d4:08:8f:6f:72:b4:57:1e:47:f0:2e:60:b2:
         4e:3d:d2:bc:6a:2c:6b:4d:7d:33:70:74:09:f5:f1:0a:97:b8:
         af:d1:48:82:1b:93:42:41:5f:2e:5f:cf:6b:21:37:f0:5e:57:
         7a:99:04:18:7d:30:2d:a3:67:c2:e5:28:47:b9:5a:05:6a:5e:
         86:aa:2d:54:b7:5c:d0:95:b3:5e:78:c5:3c:39:cb:7d:c4:47:
         9e:48:b5:cd:9b:e8:bf:f8:c4:01:37:25:87:5d:e7:a8:17:80:
         4b:b0:87:49:4a:94:b4:55:8b:af:32:67:74:30:23:f8:e4:12:
         22:49:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:40 2024 by rpki-client on console-fra.rpki-client.org