Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft
File:                     z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft (raw, json)
Hash identifier:          c7LNcg46zBPynHLaHBg62QRm5q+hhKHu7TT/0zUU7i4=
Subject key identifier:   F5:55:53:7D:F9:F7:04:05:91:AF:6A:A9:1A:10:11:22:C8:9C:8B:04
Authority key identifier: CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
Certificate issuer:       /CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Certificate serial:       0193579B84744B526D00AF5F91A0B9930BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft
Manifest number:          06B8
Signing time:             Sat 23 Nov 2024 06:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:29 +0000
Files and hashes:         1: lUp96AKKHWzNfS4EjIMn3cK6EM8.roa (hash: WWbtYVUheRSDDGuUq+9S52dOexC08C7KD3LXlPvcNkU=)
                          2: z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl (hash: /bG0exVDiWPj7xyBxilG0SQ6aMx28mhcxYbMOuHrlfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:84:74:4b:52:6d:00:af:5f:91:a0:b9:93:0b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
        Validity
            Not Before: Nov 23 06:00:29 2024 GMT
            Not After : Nov 24 06:00:29 2024 GMT
        Subject: CN=f555537df9f7040591af6aa91a101122c89c8b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:37:c8:c4:09:8c:ec:d2:ec:11:78:75:94:
                    30:40:dc:65:aa:19:ed:71:0a:c2:5b:3a:6e:04:7c:
                    7a:b2:b9:7d:0c:07:b0:ca:4d:ae:a1:02:cd:76:83:
                    a1:23:fd:71:fa:e8:93:36:a0:05:04:66:67:f5:3d:
                    5a:3c:99:dd:00:fe:b9:1e:59:8c:3f:01:80:87:b8:
                    e2:9f:d6:b7:ec:30:b7:49:4f:ec:6d:2b:d5:72:ab:
                    4f:0b:16:f9:25:ff:8f:9a:52:16:7c:e3:1c:f5:77:
                    a3:71:6d:1e:e0:77:3c:e9:42:03:a5:10:c7:41:44:
                    84:b4:48:02:3b:c8:3f:d8:c2:34:15:51:6f:a8:5e:
                    6e:6f:df:5a:b9:55:01:d7:60:20:39:f9:a8:ee:09:
                    b3:f1:cf:d4:50:2f:eb:35:69:ad:d2:6f:bd:49:ef:
                    2f:6b:22:f0:a1:f1:a0:8f:19:ae:6e:f5:71:5a:33:
                    a6:ec:26:41:10:88:45:fd:c2:9a:bf:d7:54:8c:7d:
                    ba:cf:4b:41:c5:eb:35:ce:91:e5:1d:9d:9b:1a:69:
                    f4:e5:25:04:c3:aa:4a:bb:29:4d:4e:98:56:d1:7e:
                    b6:04:75:37:fd:2f:44:2f:12:0a:56:93:d6:20:b9:
                    63:bc:7a:c8:95:70:c7:ec:4b:b8:f3:8e:64:82:9a:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:53:7D:F9:F7:04:05:91:AF:6A:A9:1A:10:11:22:C8:9C:8B:04
            X509v3 Authority Key Identifier:
                keyid:CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:e9:74:d5:31:b9:c4:11:e5:14:8b:6a:6d:39:b1:95:f1:d7:
         a1:55:f6:e3:3c:13:bf:2d:89:1f:d4:3b:0b:9c:d6:24:5b:1c:
         17:76:e3:e1:d0:1e:06:42:ee:f7:6a:14:5d:51:22:7c:9d:a6:
         5f:eb:98:14:cd:6d:fe:41:3c:80:6f:17:ac:47:18:80:ec:ca:
         f4:64:46:90:9f:33:0f:3d:b9:15:3d:09:43:fe:92:de:d2:8e:
         d1:b2:13:9f:98:55:78:28:26:04:92:3d:c7:4d:9d:28:eb:d7:
         a5:4c:85:50:42:af:ab:e7:50:96:17:06:83:ad:9a:ad:da:0d:
         58:0e:6e:f1:5d:12:3a:a5:c0:e6:07:61:1c:ca:01:d0:7c:00:
         69:77:c6:e8:95:5f:92:fd:e8:98:33:f4:d5:15:ce:9a:fe:39:
         49:92:50:56:1e:8f:f5:72:4f:b0:75:b3:10:b3:e1:b9:2f:22:
         67:f9:a2:74:eb:f8:d5:aa:b2:fa:40:ce:df:8e:89:b5:d2:c3:
         07:a8:9a:73:e8:c8:af:e6:86:79:92:65:b9:59:31:81:48:0d:
         7c:a0:55:6e:09:9f:2d:bc:13:bf:77:17:3c:c7:29:b1:75:1d:
         29:30:05:31:fb:90:1f:61:ca:d7:b6:7e:2b:b5:ea:45:60:60:
         0b:12:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:31 2024 by rpki-client on console-ams.rpki-client.org