Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File:                     8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier:          Mmt54iHSrjXEdmrxfIg4c3EYN/7/MNxL29do6hRxDoY=
Subject key identifier:   F3:D2:60:EF:0E:85:DA:8E:4F:F8:FF:36:4B:B4:CA:14:44:36:BD:0E
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer:       /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial:       019357D2CEDB8CC8FBB4714890E48E634870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number:          03BD
Signing time:             Sat 23 Nov 2024 07:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:53 +0000
Files and hashes:         1: 040nv72iCxQOYbUBCzscmNI08tI.roa (hash: 2HL1r159M0tLwVulk7+23mLP/AkdSEeJga5IoZ2Lq8M=)
                          2: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: +SHwT/xPa3IQsf7BcnR0D2al3xIp5CZi80KOznAuLSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ce:db:8c:c8:fb:b4:71:48:90:e4:8e:63:48:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
        Validity
            Not Before: Nov 23 07:00:53 2024 GMT
            Not After : Nov 24 07:00:53 2024 GMT
        Subject: CN=f3d260ef0e85da8e4ff8ff364bb4ca144436bd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:1f:8a:64:c4:e2:ba:87:57:e8:1b:7f:e0:
                    88:ba:69:a8:7c:ad:b5:74:a0:9e:f4:fb:47:8d:2f:
                    1d:ea:3e:19:9c:ec:2a:0e:09:99:ee:e2:52:ce:1e:
                    41:d1:01:cb:32:fb:52:fe:45:fc:88:70:5a:4d:91:
                    2b:ad:d6:59:6e:d1:5c:7d:57:50:ae:95:d9:c8:d7:
                    6f:d6:a3:8d:42:0d:d3:a8:80:a7:fb:8e:29:f9:1d:
                    d1:5a:1c:49:7b:29:ea:82:e3:87:8d:20:5e:cc:41:
                    28:e9:19:3c:86:06:80:c8:6f:26:0f:c4:c3:33:41:
                    b4:12:f3:14:29:fa:f3:75:fe:7c:0c:9f:cd:65:5a:
                    84:a9:e9:a3:10:13:a9:40:b2:9c:10:71:5f:b0:08:
                    6e:78:20:21:cb:8a:19:29:14:09:3b:c3:50:16:1e:
                    f5:d0:7d:f9:ee:f0:10:25:c2:2a:ea:43:28:a0:27:
                    15:87:22:04:85:63:28:1a:2b:23:c7:67:4f:bd:c8:
                    bb:56:1c:21:0a:4f:b0:59:b9:a3:b3:ea:af:1f:2c:
                    59:03:42:aa:5d:25:3e:fc:c5:15:24:a1:bc:c3:a7:
                    66:d5:1a:4b:64:35:eb:cc:5f:f0:89:ae:93:44:bf:
                    a1:5c:d0:60:21:60:33:3f:5f:22:cb:f8:2c:fc:53:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D2:60:EF:0E:85:DA:8E:4F:F8:FF:36:4B:B4:CA:14:44:36:BD:0E
            X509v3 Authority Key Identifier:
                keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:b4:74:37:71:9c:8d:47:e9:55:0f:2c:8b:b5:d6:21:0f:
         c3:49:ae:2d:9f:e3:5d:eb:3a:e2:19:26:9b:88:45:db:6d:ab:
         bb:57:5c:8a:2b:dd:78:45:a4:3c:f9:61:79:64:29:ac:bd:60:
         9f:70:c7:22:1e:4f:99:34:e9:eb:ff:f5:44:77:93:cf:69:8b:
         92:68:55:e4:f1:ef:de:20:64:b0:66:06:27:80:33:56:9f:96:
         20:c7:a7:3a:e8:ad:0c:40:b6:15:a7:57:b7:1f:a3:12:d4:67:
         9c:be:88:14:1f:42:3f:03:21:66:25:0f:0a:80:f6:76:07:f8:
         42:f1:0e:e2:53:7f:19:3b:70:9f:3b:36:02:f3:79:5a:06:91:
         61:7a:47:2b:7a:10:0f:2d:35:fb:50:78:87:f7:ee:e7:54:4e:
         90:5f:e7:b0:6e:ec:78:5c:77:50:d8:97:16:8a:59:03:87:94:
         c6:51:d7:a8:84:80:8f:61:5d:47:94:3e:52:4e:12:a9:3d:ed:
         e8:09:ef:87:ae:ab:e6:c7:fe:1a:30:c5:74:a9:44:a3:75:8a:
         d8:31:e3:f9:c4:6c:99:6c:d1:8f:ab:c2:dd:f6:b6:c6:73:1d:
         3d:67:bd:bb:25:3d:f5:93:36:c1:d6:fe:a8:a8:3d:bc:fe:47:
         cd:19:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:29 2024 by rpki-client on console-ams.rpki-client.org