Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File:                     l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier:          fQyBZO4QzoXtHwz2uAJ7USa/ZLuYfPP+/lbQh+Iol7s=
Subject key identifier:   EC:9E:83:18:8B:7F:0B:64:81:BE:F6:27:B3:B1:FB:79:11:30:B0:77
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer:       /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial:       01935508D557E3022A95CBD5F9FB54AF9D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number:          08CA
Signing time:             Fri 22 Nov 2024 18:01:02 +0000
Manifest this update:     Fri 22 Nov 2024 18:01:02 +0000
Manifest next update:     Sat 23 Nov 2024 18:01:02 +0000
Files and hashes:         1: 5E_PPxoH1uOjW52IOmKxEh6TlvY.roa (hash: RALXND9ib03B3PSFS4o8yPQ7ALhjuc+9PBwGF00CIFs=)
                          2: M46xm_5TL9kx7D2WVXCdBMWIYcs.roa (hash: g8ZIF1f0yq8D+uFCLafFyegaPc5iBw6u79003Z7fsG0=)
                          3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: Fxupoi41vDsH6qWcHVjYaxQF3d+SkaGgf/M1fxvIxXM=)
                          4: zdbBaytrgabYANhqkY1xFFjFrJE.roa (hash: NVzh1odSqr4T0NiS+73/fYTxje836zy3uq3O5kSXjNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:d5:57:e3:02:2a:95:cb:d5:f9:fb:54:af:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
        Validity
            Not Before: Nov 22 18:01:02 2024 GMT
            Not After : Nov 23 18:01:02 2024 GMT
        Subject: CN=ec9e83188b7f0b6481bef627b3b1fb791130b077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:b9:c5:49:1d:3b:93:4f:1a:7d:70:36:e2:
                    a5:5b:5c:4d:62:7d:f0:01:8d:ea:5a:20:7c:7d:78:
                    c6:17:a0:0f:24:c9:19:22:95:d8:2c:3d:05:57:20:
                    86:46:a3:49:a7:5a:72:f7:97:50:1d:4f:5b:3f:1f:
                    a8:34:96:64:5f:3d:90:21:3e:2f:c6:b1:5a:4d:f7:
                    43:18:09:d3:c3:43:d1:86:c9:4e:6d:95:32:09:31:
                    10:5b:3e:57:14:8d:ea:f9:62:cf:6f:a3:bc:23:97:
                    bf:06:ef:93:e1:95:ff:70:75:87:17:2f:9f:61:65:
                    8e:12:92:d5:be:38:bb:11:37:2f:fa:5f:1d:fb:65:
                    8c:e3:f1:d7:46:3f:da:bc:15:74:7b:ff:85:49:6a:
                    0a:a4:be:21:04:18:6c:89:0e:c1:2e:c3:5f:39:0f:
                    41:17:b9:c3:66:32:9c:f2:d5:c1:8e:db:a3:2b:f3:
                    e1:e8:bb:25:92:a3:0f:31:19:36:ff:a8:12:46:f4:
                    13:de:eb:63:b2:0d:ac:de:69:8e:d1:45:86:ce:58:
                    d9:b0:5a:43:b7:5c:d5:23:d5:d5:0f:9a:78:2e:b7:
                    30:29:04:2e:4e:9c:e3:38:b0:34:06:0e:ca:8d:86:
                    17:a6:35:7a:1c:c3:fa:19:26:e3:94:75:a6:8c:68:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9E:83:18:8B:7F:0B:64:81:BE:F6:27:B3:B1:FB:79:11:30:B0:77
            X509v3 Authority Key Identifier:
                keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bc:f3:bb:80:12:e4:04:b2:14:c9:08:99:4c:ec:74:02:f9:
         91:20:40:e6:29:61:36:8c:89:11:f6:63:1c:94:21:a8:1a:e9:
         4b:c7:0d:77:a1:39:ad:e7:31:d7:68:81:64:f8:ce:dc:8b:78:
         a5:24:32:b0:d1:ab:59:1f:91:93:93:ef:ce:d8:b7:b9:b8:c1:
         a8:5d:12:ef:8a:ab:db:f6:53:89:06:db:3c:f3:ff:c3:51:8c:
         41:10:d0:16:cb:ff:08:06:0f:2e:d1:16:8e:b6:00:5b:e0:f9:
         05:f9:54:b6:1b:60:36:45:fd:00:19:cb:c8:01:9a:06:92:fc:
         3c:2b:36:c8:10:25:27:9f:01:1c:c2:0b:42:74:e6:80:c3:65:
         1d:b3:77:49:98:ec:a1:37:c7:7a:28:ad:ca:87:10:d2:79:54:
         62:10:18:2b:c3:af:bf:00:af:19:5c:7b:36:09:22:67:ea:ca:
         d6:8e:dc:2f:71:d3:3d:8f:e5:5e:84:e8:63:cc:4d:b8:e5:cd:
         20:78:e8:1a:80:c6:05:37:c8:20:37:af:e6:23:29:0f:da:c2:
         75:dd:5e:cf:25:d8:cc:96:e5:de:ff:18:63:75:ee:e0:e6:90:
         26:d6:88:7f:68:f4:17:68:bc:1d:d0:28:73:ee:51:9e:a7:d9:
         98:cb:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:45 2024 by rpki-client on console-fra.rpki-client.org