Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
File:                     EVFSIzgprv1GebUUcXmN68mCN-8.mft (raw, json)
Hash identifier:          VPFlsfEu/j895EZInUFOuy9I4t4SpsAlc7beupG6Rps=
Subject key identifier:   AE:B9:72:21:7F:25:FD:BE:DC:CA:F4:10:D8:57:78:7D:F5:F6:8C:A1
Authority key identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF
Certificate issuer:       /CN=115152233829aefd4679b51471798debc98237ef
Certificate serial:       0193655737B70F701DFF8C9F9ADD089812B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
Manifest number:          0FAE
Signing time:             Mon 25 Nov 2024 22:00:34 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:34 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:34 +0000
Files and hashes:         1: EVFSIzgprv1GebUUcXmN68mCN-8.crl (hash: 7Wxr0btiYDXipgwZBoZyqzNU0Se1yLFwOat6Nn6egBc=)
                          2: wOvD5zvKn4gZmcJ1_xmXSZjs2pQ.roa (hash: z2vofBAU2GH1KAeRw0d265BHmFYAfyoWkSx0qKyzrkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:37:b7:0f:70:1d:ff:8c:9f:9a:dd:08:98:12:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115152233829aefd4679b51471798debc98237ef
        Validity
            Not Before: Nov 25 22:00:34 2024 GMT
            Not After : Nov 26 22:00:34 2024 GMT
        Subject: CN=aeb972217f25fdbedccaf410d857787df5f68ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e7:ac:8b:51:c7:4a:db:04:f7:cb:07:30:22:
                    6e:69:f9:4d:4c:d6:4d:40:e7:02:00:2a:cd:97:84:
                    83:89:5c:f9:12:20:cc:f4:81:43:2a:f2:55:91:fd:
                    60:d9:87:0e:89:4a:a7:da:09:51:a5:55:d5:01:14:
                    47:73:45:86:b0:0a:83:2f:0a:6a:b1:58:ff:9b:13:
                    f1:a3:7e:f4:9b:f2:7b:f8:79:a8:66:a4:8e:13:07:
                    bc:ff:e2:c0:47:c4:71:70:7d:fd:18:b4:3a:a8:d8:
                    d1:e8:14:05:ec:ea:5f:c3:2c:53:29:cb:1f:0a:2f:
                    82:d8:c3:77:cf:f1:0a:d4:ea:08:a9:8d:c9:f1:8c:
                    4d:f0:b0:c6:f6:66:1d:7c:42:ad:c7:b8:3b:34:fa:
                    8a:cb:d3:2e:d7:f0:23:f7:9a:85:75:70:a4:7b:43:
                    49:77:78:94:47:b9:03:bc:82:31:ee:50:f5:85:f4:
                    03:80:7f:8d:ed:05:c2:af:3e:fd:74:30:ae:8a:78:
                    17:87:19:d0:43:b0:07:c6:c7:e1:52:6e:8a:78:6c:
                    6f:e3:86:8f:1b:21:1b:c2:39:b5:ae:86:31:ef:9b:
                    0b:c3:bd:4c:11:ab:e1:4d:a3:2f:67:30:e0:15:59:
                    9d:af:15:21:9a:3f:a0:09:57:f2:5a:4d:df:d3:5d:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:72:21:7F:25:FD:BE:DC:CA:F4:10:D8:57:78:7D:F5:F6:8C:A1
            X509v3 Authority Key Identifier:
                keyid:11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:60:ed:98:99:07:71:63:9f:35:19:51:27:bc:1d:2a:90:69:
         c5:aa:94:41:2b:56:25:e1:5a:cd:80:f2:95:2e:f5:41:07:ee:
         57:34:62:b3:3a:db:73:05:dd:36:08:a6:91:21:98:6a:eb:af:
         5e:89:36:30:35:9a:d2:0e:d8:08:ba:b3:71:64:5a:1f:40:db:
         d6:13:e5:9f:a1:b9:fa:fe:7c:3f:65:97:e3:45:23:03:c6:ac:
         f5:20:7d:a7:1a:c4:05:36:90:7b:19:ee:30:ac:9e:bb:c6:7a:
         1a:2a:7e:c2:3a:20:c3:35:28:31:17:d1:ea:bc:27:eb:bd:9b:
         b1:c5:f0:5a:38:a1:ed:e0:77:d3:6a:39:0c:35:9e:4c:9b:ec:
         38:35:0f:2d:c5:68:67:08:e4:01:96:bd:c5:9c:99:f3:8c:f5:
         c3:ee:c3:54:72:b4:5e:66:8b:57:be:d8:ce:dd:6f:bf:e0:17:
         c4:01:82:11:05:a6:81:73:bd:c5:9b:d6:28:f7:c3:b3:1b:af:
         bc:32:27:8f:02:f2:76:35:38:0b:86:00:63:96:01:0e:90:c8:
         b9:46:cb:42:7e:8a:f2:6f:4f:f4:1b:f9:6c:ea:51:ec:6b:3a:
         65:69:33:12:89:85:6f:19:41:1c:22:f7:c5:53:ac:4f:65:51:
         1b:64:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:14:14 2024 by rpki-client on console-ams.rpki-client.org