Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File:                     8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier:          o4IT+2lKghej8A6EjRkIUWjA2DUKBdLzQk31txGRYI8=
Subject key identifier:   67:DE:8F:B5:AF:2D:F3:A9:CD:EF:B3:51:07:69:20:8B:BE:2E:07:00
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer:       /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial:       019356889C89C1F76ADF99B38090A3C6BC16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number:          0F1A
Signing time:             Sat 23 Nov 2024 01:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:13 +0000
Files and hashes:         1: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: 1X7cYVSg7Qr6ySg2i0y26S5GwMFvdId1mpcA339pCH0=)
                          2: aTfmYz8GmqcP31_370UD7s9LfuI.roa (hash: EZ6hZkFFwZ0OcJBMfy7r4xjIrXPGhMEBHydiAGCnAy0=)
                          3: j0LyHwrHXe9mWHnzvu49wBc_v_k.roa (hash: H/Pf66KowOMol/3eJ4uTTBhZEXVs4WRTJkkP9ds1ZLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:9c:89:c1:f7:6a:df:99:b3:80:90:a3:c6:bc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
        Validity
            Not Before: Nov 23 01:00:13 2024 GMT
            Not After : Nov 24 01:00:13 2024 GMT
        Subject: CN=67de8fb5af2df3a9cdefb3510769208bbe2e0700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:19:64:36:bc:ef:70:3a:ed:6e:ed:b3:a1:6c:
                    77:98:7e:85:77:0d:0c:9c:ff:eb:a7:9a:c6:74:3f:
                    0a:72:a9:e5:6b:9c:0c:ae:3f:20:b6:93:9d:97:32:
                    65:e8:0c:b6:4e:fc:47:f2:d0:c3:ae:e5:9f:59:a1:
                    79:0e:90:ad:e9:2c:5d:e0:73:36:ff:b6:8d:77:a3:
                    25:44:59:96:88:e9:73:16:b3:e2:c5:73:18:3b:48:
                    27:ac:34:f3:03:3b:dc:a2:2f:c9:2b:37:60:09:fe:
                    d5:df:e4:dd:38:5a:d0:83:ec:8b:92:23:ec:9b:76:
                    96:b1:06:86:7e:c8:fc:44:a7:fb:ae:37:ec:09:28:
                    b4:fc:91:66:f8:b2:e1:9e:ac:cd:3b:86:15:79:41:
                    d3:6e:75:51:75:b8:13:b4:5d:b8:29:31:da:72:48:
                    02:a5:cf:ff:db:f6:a4:84:52:c4:c0:1d:4e:22:fb:
                    71:66:ea:d8:5a:4c:c8:6e:35:cf:48:a9:3b:f4:05:
                    12:ee:24:13:d8:26:d8:0a:04:41:0c:55:df:25:a3:
                    63:00:80:ee:f8:ba:56:e2:0f:dd:db:5a:44:c0:80:
                    ab:55:63:30:c8:43:63:78:69:ff:9e:66:e3:e2:29:
                    23:eb:be:e5:70:bb:5a:7d:37:4d:1c:26:53:52:0c:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DE:8F:B5:AF:2D:F3:A9:CD:EF:B3:51:07:69:20:8B:BE:2E:07:00
            X509v3 Authority Key Identifier:
                keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:e5:55:c1:c0:11:b8:e9:72:eb:7b:f9:ff:d3:b2:c6:11:
         27:53:9e:25:c2:af:21:10:17:bd:e3:0d:9a:e6:a2:da:12:5b:
         13:18:9f:44:9b:73:26:44:b7:b5:ee:8d:a8:9d:92:b4:d7:3a:
         b8:0e:db:14:7a:02:44:21:81:18:c5:4c:98:2e:51:db:8d:52:
         4c:f2:24:da:c4:89:8d:15:d6:aa:ef:34:29:37:8c:6c:4f:3a:
         5e:1a:c2:9d:cf:b2:50:31:56:a7:6d:52:9f:6d:71:62:a9:a0:
         95:2c:83:e1:39:90:fb:35:cc:94:02:21:06:79:ae:e7:b3:5b:
         75:f9:43:bd:19:41:1f:b2:b8:cf:41:69:7f:b5:0c:89:b8:ac:
         97:85:29:2b:6e:87:4b:e7:10:bd:5a:36:e3:26:23:90:a2:41:
         d5:3f:36:45:a4:5c:97:6f:8d:45:9e:6f:2c:d1:c4:e2:ba:71:
         ca:0e:82:36:f4:54:98:4b:b6:d2:a5:7c:3e:6a:d8:4a:fc:59:
         67:36:9f:cb:fe:4c:1f:a5:0d:32:f7:ea:2e:15:d0:3f:54:b8:
         cb:7d:d4:53:d4:e9:66:b7:bb:a3:94:ad:9a:35:50:7c:a1:15:
         09:76:e4:95:95:d1:29:41:61:29:63:af:aa:58:70:a0:ed:ab:
         1b:dc:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:53 2024 by rpki-client on console-ams.rpki-client.org