Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
File:                     8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft (raw, json)
Hash identifier:          /iNDu9onimlHLX833wzVmdtkWUY1HLJwAR7k1kpn2bY=
Subject key identifier:   B1:6F:41:12:5E:AB:13:A3:60:4B:B8:C0:EC:61:48:4F:10:31:C1:5B
Authority key identifier: F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
Certificate issuer:       /CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Certificate serial:       01935840612B15589DB644006A5FDD39F4AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
Manifest number:          0398
Signing time:             Sat 23 Nov 2024 09:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:34 +0000
Files and hashes:         1: 8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl (hash: J2f//1yCbV2Ir/c277VeWKOKkFH9qtdH96+WN1lBW4M=)
                          2: koiHpL-WsJ3WyxjGNwEdI1Qojas.roa (hash: BHRPtCnBtvNGrJg/AQXlC3yR5MhorgaQm2BuDgiCMdM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:61:2b:15:58:9d:b6:44:00:6a:5f:dd:39:f4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
        Validity
            Not Before: Nov 23 09:00:34 2024 GMT
            Not After : Nov 24 09:00:34 2024 GMT
        Subject: CN=b16f41125eab13a3604bb8c0ec61484f1031c15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:82:67:83:5d:39:e8:81:4f:74:58:ff:b1:
                    f6:5e:8b:dc:a6:55:0c:fe:13:af:c3:fc:dc:a7:24:
                    75:9c:08:3b:a7:ef:d0:61:37:54:74:5e:9d:d5:3a:
                    ad:9d:1d:35:3c:33:ca:43:63:b0:25:d8:a7:53:39:
                    ac:71:58:2d:1c:1a:c0:36:09:b3:67:6a:01:f5:39:
                    c8:0d:86:35:17:0b:d2:9f:33:d9:ae:ba:bc:68:94:
                    fa:76:4e:21:c7:0f:30:e3:dc:b7:81:e0:80:70:f2:
                    18:74:e4:e8:f0:cc:c8:c7:f3:66:9f:b8:e4:0c:96:
                    a4:83:51:52:58:2d:2f:97:8f:c0:82:cd:38:81:f4:
                    b1:7c:ae:d7:32:96:b6:74:44:1d:35:a7:65:03:27:
                    59:12:0b:bb:cb:70:00:c4:68:ea:32:81:f1:9a:43:
                    49:ba:d7:4e:02:c7:14:04:b0:13:75:86:a3:2b:fd:
                    ba:67:bb:43:3a:ab:a7:91:07:e5:db:90:e2:dd:5d:
                    fd:8b:0e:01:f7:81:b5:72:b3:d9:14:d0:fd:6e:74:
                    b6:c6:35:b8:7c:04:27:07:49:0e:74:05:da:45:5a:
                    ea:c5:52:25:f0:e1:f2:03:17:5c:8b:e8:07:89:c7:
                    b1:c5:5f:95:17:55:ce:ed:8c:a6:32:0e:cf:3a:25:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6F:41:12:5E:AB:13:A3:60:4B:B8:C0:EC:61:48:4F:10:31:C1:5B
            X509v3 Authority Key Identifier:
                keyid:F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b3:0b:ba:de:72:95:3b:04:97:13:c3:f8:cb:87:c5:61:5c:
         fa:0a:0f:4e:ed:02:83:eb:c7:9d:ce:d0:40:ba:c7:30:5c:74:
         89:45:b6:73:91:08:62:f3:21:9c:70:aa:f2:40:52:8d:39:0e:
         db:b5:9b:e9:2b:45:8c:e6:6e:5a:d2:2d:13:7e:82:cb:da:9f:
         3d:cf:2a:05:67:c1:07:7b:60:41:52:df:3d:bc:3a:9d:ba:9b:
         8d:2e:06:12:b1:30:b3:6b:50:29:0f:80:5b:9a:e5:58:65:89:
         4a:cb:5d:4b:9e:c3:33:f9:a4:88:de:22:0a:a5:3e:36:14:7c:
         99:52:40:77:bb:1a:60:ce:ed:db:47:6e:b0:9f:1a:4f:1e:1b:
         55:87:03:c0:29:0d:ae:76:f5:51:9e:9d:73:89:0e:98:e9:62:
         0f:3b:18:b7:83:d0:df:6a:c3:ca:24:d3:3a:9f:dd:c1:ba:45:
         17:2e:7d:d2:7d:95:06:c4:12:6c:e6:6d:3b:b1:4e:b8:07:ab:
         3d:4b:14:4d:4c:d2:d2:af:3b:19:aa:19:cc:7c:af:0d:02:20:
         0e:df:ba:b5:5a:11:e6:cd:c7:12:23:a4:a5:e0:28:69:97:eb:
         a7:81:dc:a0:84:62:0d:7d:53:e1:17:4c:25:c5:46:a3:e2:4d:
         80:c4:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:19 2024 by rpki-client on console-ams.rpki-client.org