Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File:                     8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier:          avOycs5T6pmuNys25ukJjymOyEAXTDJtL2OBDGj9TAs=
Subject key identifier:   E2:24:63:A1:58:93:08:B8:1A:FC:6D:56:5A:D4:B1:1A:FF:F1:8B:AB
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer:       /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial:       01936331DE72AD6AF6DFC8073EBA9A23897B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number:          04F9
Signing time:             Mon 25 Nov 2024 12:00:32 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:32 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:32 +0000
Files and hashes:         1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: hWDTq4QEEG4Cv6YBTEMol4+MqeYok4fWLheKjvXPG64=)
                          2: In8IkZJxjSaabdl_viScO58K_4A.roa (hash: W+v+J7kBk+XlPA5VkKAkybhHf4lEXri3Ytre17E/4LU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:31:de:72:ad:6a:f6:df:c8:07:3e:ba:9a:23:89:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
        Validity
            Not Before: Nov 25 12:00:32 2024 GMT
            Not After : Nov 26 12:00:32 2024 GMT
        Subject: CN=e22463a1589308b81afc6d565ad4b11afff18bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:75:9d:54:c9:59:13:64:ac:99:bb:c1:96:
                    39:a8:87:da:e9:16:2f:92:2b:98:c1:d0:e5:a3:a2:
                    8a:73:53:b7:83:d2:c3:93:1d:4e:93:24:c8:5a:6b:
                    1d:18:40:ef:c9:3a:38:5c:d8:bf:63:a8:d2:e7:b8:
                    b8:c7:92:8b:9d:21:ac:ce:bb:2e:f1:5e:af:bb:b7:
                    1c:50:3d:7f:d7:0f:11:c4:8b:f5:d8:5b:b4:d3:06:
                    fc:21:f1:80:17:a7:bb:31:e4:d1:f9:8b:2c:37:79:
                    c9:0c:86:76:92:4a:83:4c:48:11:d0:f3:34:44:2b:
                    c6:74:67:2c:aa:21:24:be:27:e3:df:7b:f6:40:ab:
                    5a:b6:80:cf:48:6e:65:11:69:95:1e:45:bd:d2:34:
                    8d:b4:e2:02:51:4f:85:ff:f0:20:69:51:40:6f:95:
                    19:c4:6f:84:fa:69:c7:00:aa:02:19:3c:f3:8b:a6:
                    10:2c:b2:62:1b:61:e4:98:c5:ae:07:ea:78:60:0c:
                    94:ee:69:54:b3:51:96:a5:3e:f1:94:b6:14:61:34:
                    fd:5d:22:42:82:83:2a:52:b5:fc:ed:56:f0:bb:e0:
                    a8:f5:d1:cb:e0:8c:9c:eb:eb:50:26:6f:92:bf:db:
                    ae:13:84:7b:81:78:54:93:e3:6b:cc:b3:63:a7:dd:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:24:63:A1:58:93:08:B8:1A:FC:6D:56:5A:D4:B1:1A:FF:F1:8B:AB
            X509v3 Authority Key Identifier:
                keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b1:f9:1a:51:d4:5c:07:da:e1:ef:57:6f:da:fe:fe:8b:0d:
         9c:19:24:f0:b2:b6:ee:9a:84:9d:cf:55:a3:46:06:87:a1:48:
         5b:84:b0:d1:d5:c5:b7:0b:0f:29:ff:b2:9c:34:cc:09:54:05:
         41:59:7d:0e:92:57:04:97:65:75:30:6c:1f:19:30:25:3c:ff:
         cd:4f:fd:2a:10:79:9d:30:42:4b:e2:55:94:0a:9e:52:40:77:
         5e:8f:f2:29:02:c5:2e:a1:6a:1f:64:f3:c1:71:a0:80:c2:48:
         22:b2:6c:09:e1:70:82:d6:5b:4f:e3:35:39:27:53:c0:43:6b:
         73:27:f8:fc:3e:f1:92:f6:17:46:3f:1a:fd:24:43:b1:ba:31:
         12:00:c1:73:34:9d:e3:75:40:c8:c5:f5:35:41:4b:a1:05:b3:
         71:1a:e4:7f:33:cd:d2:7d:ba:20:6f:2c:b2:78:46:91:7e:2f:
         89:97:d6:89:54:8f:4f:44:13:d1:a8:c8:80:99:aa:46:b0:52:
         e2:7c:08:4c:fc:07:ca:47:f7:8a:3c:fc:f5:b9:b4:6b:e2:9c:
         ac:7f:89:64:50:f1:08:10:4e:59:93:f7:4d:fc:98:7d:4d:45:
         78:04:e4:08:bc:fc:f7:7c:78:2c:bc:e8:08:9e:15:66:33:70:
         52:88:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:57:42 2024 by rpki-client on console-fra.rpki-client.org