Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
File:                     gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json)
Hash identifier:          cdOW20xdWX+jorpjGcNNjCeSD8uA1nVWrVBLdYsFpCg=
Subject key identifier:   DD:4E:D7:38:83:74:90:15:B6:BF:55:3D:37:75:1D:5B:69:D3:2E:F7
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Certificate issuer:       /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial:       01935688F559843F606477002059085A5961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
Manifest number:          0BF6
Signing time:             Sat 23 Nov 2024 01:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:36 +0000
Files and hashes:         1: cxArnqwBdXlzUrF_mVRW6EyEXb4.roa (hash: Pas2pz3QHcemnqFf6lKUgpoTZky8D9o6J8ReHgJKl84=)
                          2: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: HUkqNunB5yUwwkGzxe8Zf7qyU/klhHMsZEP4s+smhPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:f5:59:84:3f:60:64:77:00:20:59:08:5a:59:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
        Validity
            Not Before: Nov 23 01:00:36 2024 GMT
            Not After : Nov 24 01:00:36 2024 GMT
        Subject: CN=dd4ed73883749015b6bf553d37751d5b69d32ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:42:b9:7d:45:80:da:f6:89:ed:2a:4c:19:
                    9c:c4:71:c0:41:72:70:6c:d8:0b:87:1c:dd:5e:e3:
                    12:a6:fa:ed:20:26:0d:2d:e8:30:8a:71:1a:bb:82:
                    7b:a5:22:da:ba:98:ba:0d:14:4a:1f:46:e9:60:6b:
                    03:c5:52:9e:9a:51:f0:93:53:ca:2f:ad:27:47:c5:
                    40:4d:d1:cb:87:89:9e:3e:e8:e4:f8:f1:7b:04:71:
                    89:2e:30:bb:59:e1:ed:cf:50:e1:53:3f:28:f3:25:
                    b2:ea:43:f2:a8:d5:a5:f5:13:68:70:ea:be:c8:f5:
                    04:76:75:d6:dd:95:30:21:f8:95:a4:48:6c:8f:18:
                    7b:f4:05:19:1d:a9:fc:29:6a:cb:96:9a:8a:c2:82:
                    1e:e4:1f:83:05:03:ad:7d:a5:14:f2:2d:f1:e7:07:
                    d8:c9:01:58:58:52:f5:68:cf:9a:37:a6:ef:74:b8:
                    ee:f3:7c:71:0e:c2:ad:b3:23:0d:5b:51:4c:50:a8:
                    2a:7e:2e:28:44:23:78:b0:a9:d3:c4:78:d3:bc:13:
                    99:c8:53:ec:08:f5:e5:5e:d0:6d:8c:11:d3:f1:c7:
                    75:cd:68:03:22:36:16:4f:a0:7d:02:25:09:64:b0:
                    61:ef:84:e2:58:85:2f:1a:5d:0d:4d:7f:60:81:9f:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4E:D7:38:83:74:90:15:B6:BF:55:3D:37:75:1D:5B:69:D3:2E:F7
            X509v3 Authority Key Identifier:
                keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:73:de:92:ab:38:96:f9:e5:22:98:11:ee:99:5c:ab:d6:
         ba:66:46:69:e4:bd:02:e4:bd:92:2a:7c:3e:4f:2b:af:30:be:
         9d:ba:7d:84:48:48:d3:b3:99:f1:c1:01:4e:88:ab:28:09:1b:
         ee:c2:2e:5b:0d:5d:3a:f1:be:27:02:32:fe:46:14:d3:31:a8:
         6b:45:a3:74:df:fd:07:bd:8d:40:72:98:de:84:60:66:8f:f8:
         44:b9:95:dc:de:f7:8b:41:21:6f:f5:96:67:a5:54:b9:6d:1a:
         c8:dc:9d:b4:f9:45:13:28:b8:19:5f:d2:be:53:41:14:44:bf:
         23:b0:08:d1:f8:82:e3:d8:4f:33:03:14:97:d2:9a:80:e4:cf:
         19:67:36:6d:4b:f8:d1:c4:75:db:c0:d6:d2:06:76:8b:9c:99:
         08:85:3d:1f:91:f7:70:1e:10:55:a3:13:9c:50:a1:ba:d3:33:
         74:b7:fb:c4:08:2a:81:ee:b7:7b:6d:c6:ce:47:16:ac:e5:be:
         35:95:3b:44:af:d8:38:c2:4d:1d:64:ee:aa:c8:ad:cc:6d:d5:
         d3:b6:ca:9c:2e:90:82:14:1f:99:d1:ae:5b:4e:6c:e3:fe:8f:
         84:43:e1:c9:f1:d2:19:0a:84:38:04:55:eb:4b:4b:c6:bc:57:
         4f:b7:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:38 2024 by rpki-client on console-fra.rpki-client.org