Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File:                     8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier:          y8Zm9MVg31plwmVvM6FDvhusej4ZwX33AD9vwKKXBR0=
Subject key identifier:   96:21:4C:52:6C:63:5C:32:73:6C:75:71:B9:E9:5D:73:8E:4F:03:39
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer:       /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial:       0193568B6530461F699BA5CD2D262C4F43AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number:          0868
Signing time:             Sat 23 Nov 2024 01:03:16 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:16 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:16 +0000
Files and hashes:         1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: GzVlo/PXf+9PNdayTpz/yUcA/z0WKIPttagJGft56Iw=)
                          2: 9JKisc39V8s6gnv4x5cY5yluNw0.roa (hash: 48VJhaC4iLoE/8OdgxLi6kcHXPVvuXrvr3np4GaFV9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:65:30:46:1f:69:9b:a5:cd:2d:26:2c:4f:43:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
        Validity
            Not Before: Nov 23 01:03:16 2024 GMT
            Not After : Nov 24 01:03:16 2024 GMT
        Subject: CN=96214c526c635c32736c7571b9e95d738e4f0339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:30:56:39:39:4d:90:1a:ba:59:36:61:f1:
                    b8:ff:35:63:2a:4a:45:e8:fc:4d:0a:a8:32:bf:a1:
                    9b:12:bd:7d:27:ba:5c:88:7d:ab:f0:7b:a1:90:f7:
                    f5:6e:05:69:04:82:11:f2:53:90:bd:63:16:92:b7:
                    e2:4c:c7:00:f2:30:a7:97:24:ea:39:fb:43:c6:47:
                    33:40:e1:82:ad:85:59:d1:48:70:81:1e:c8:33:fe:
                    63:a4:9b:a2:66:3b:70:eb:a6:7c:24:6e:76:c7:85:
                    ad:a1:d4:73:64:e3:f6:cc:d5:af:a3:02:94:78:c0:
                    e0:d6:ec:ce:1c:79:2e:ac:0c:1b:9e:62:e2:7d:8b:
                    8f:97:8a:a6:e5:be:5e:d5:b1:60:9d:d0:e0:77:98:
                    7d:de:68:cc:8b:81:7f:81:ad:0d:21:12:ff:44:f8:
                    d4:ea:11:6e:84:4c:d1:93:c7:a5:38:f5:34:81:bf:
                    19:9c:62:c9:a7:ef:d8:51:75:07:0b:4f:48:c0:b6:
                    cc:47:8d:6d:69:9a:19:a4:43:2f:a5:fe:e1:fc:b2:
                    15:8a:ac:bb:51:da:96:fd:6b:68:2f:a8:a4:5d:96:
                    53:89:e4:af:36:0d:f7:ce:5e:53:e3:4a:26:d8:3b:
                    dd:ca:58:4f:58:ed:00:59:d8:65:d6:be:8c:9e:fa:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:21:4C:52:6C:63:5C:32:73:6C:75:71:B9:E9:5D:73:8E:4F:03:39
            X509v3 Authority Key Identifier:
                keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:cd:f6:49:7d:1e:6f:f1:ee:e8:1a:95:2c:10:96:ce:d4:
         a0:1f:12:44:a6:1c:f7:1a:c7:87:d5:de:b0:66:62:30:bd:52:
         ed:7c:70:2a:ac:c3:28:4e:fb:26:bc:f8:55:9a:89:90:57:f8:
         de:b1:bc:8f:13:e9:6b:5a:0a:3b:cc:54:2d:50:c6:87:e7:40:
         30:c0:3e:cf:50:c6:0b:4c:74:26:5f:4d:a5:4f:e6:29:49:1a:
         1c:b0:d2:bd:5c:15:b2:78:d2:e8:75:18:6a:37:59:a9:93:ff:
         d3:42:d8:a1:7d:e4:ec:5a:9c:96:f9:c8:92:d7:8e:75:be:16:
         9a:f0:03:77:35:51:be:01:2e:8d:25:0d:4e:ba:62:99:45:f9:
         6c:27:6c:3f:b3:ec:8d:99:56:b7:70:72:bb:ee:33:9b:c6:42:
         8b:5d:93:3e:c2:4e:81:d7:12:91:05:31:25:01:fb:0d:bd:4a:
         7c:96:27:fe:9a:09:4c:97:2f:f5:ba:8c:60:6b:45:9b:0f:f8:
         86:5d:ba:28:47:dc:03:5c:83:31:2e:4e:1a:7a:9f:c0:1c:98:
         76:27:15:76:23:c3:34:fb:0c:99:92:98:e0:33:91:1f:58:dd:
         66:78:e3:b7:be:a9:9a:6d:1e:fc:ea:47:5a:3c:3b:23:52:9f:
         ee:53:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:19 2024 by rpki-client on console-fra.rpki-client.org