Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File:                     d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier:          T8A2yEuXLyM8qqZCvRDHFrBKihhc6FA8w7xC1aLp75I=
Subject key identifier:   F0:21:D4:49:FD:BD:9A:A2:E8:6B:B6:19:98:89:FA:88:13:82:8A:FE
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer:       /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial:       0194BA84262C6C4CF7FD34434F16C614C971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number:          0853
Signing time:             Fri 31 Jan 2025 04:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:10 +0000
Files and hashes:         1: 9zwR0ItkTBE3NBrhNXLgD19Ygh0.roa (hash: 668uqZpsKXpsQP4NHjfvBq7qiMq3YrFIWJSOqGsUVvE=)
                          2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: gCfJbnou8wc2sUUUqNUROxzlFJEOHsPmu+1GxtJ123Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:26:2c:6c:4c:f7:fd:34:43:4f:16:c6:14:c9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
        Validity
            Not Before: Jan 31 04:00:10 2025 GMT
            Not After : Feb  1 04:00:10 2025 GMT
        Subject: CN=f021d449fdbd9aa2e86bb6199889fa8813828afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:60:11:fa:b1:84:7d:f0:2a:a2:f6:a2:e5:
                    ab:bf:c0:4f:7a:2e:9f:49:5e:4a:f3:5e:0c:b0:8f:
                    be:9b:3e:39:8f:19:46:af:3b:24:e5:e5:a3:fa:d0:
                    f5:d5:e0:11:88:49:65:59:11:cf:74:82:3e:e4:3a:
                    d0:10:cb:29:e1:bc:f3:9b:62:82:eb:1a:9a:8f:a7:
                    e5:d5:82:05:ea:60:59:b4:d2:5e:95:42:38:c2:85:
                    f0:b7:b3:4a:a4:ef:72:98:da:3d:8a:a9:43:d6:8a:
                    ee:a4:75:15:75:53:f2:89:e0:1b:0c:d4:5a:2f:63:
                    fb:2b:f6:c0:f1:c5:24:04:82:85:08:87:06:f0:03:
                    2d:a4:1f:31:9f:49:2c:c0:69:3d:76:cc:0a:f1:2b:
                    0d:5a:c4:4f:a7:1f:d6:fd:25:13:45:6c:e1:b1:6e:
                    82:3d:56:56:f8:f9:07:e5:61:61:91:c0:58:93:a8:
                    36:33:53:d6:3c:48:b8:39:1f:74:e1:b9:51:f6:09:
                    dc:df:bf:9a:3e:6d:a7:03:13:c1:58:43:43:88:e1:
                    c7:d2:e6:bf:51:fe:a4:d6:6a:bd:53:2f:30:ee:58:
                    60:e3:ce:df:1d:ad:0b:49:62:da:46:0b:86:2b:ae:
                    bb:b9:3f:7f:c9:de:7f:23:23:8a:c2:e8:d4:00:18:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:21:D4:49:FD:BD:9A:A2:E8:6B:B6:19:98:89:FA:88:13:82:8A:FE
            X509v3 Authority Key Identifier:
                keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7d:ea:5d:20:c0:ac:4e:92:70:bb:40:30:f4:9d:17:56:96:
         a8:18:4b:44:60:a3:ea:30:2f:23:06:c5:0a:2d:78:05:78:e1:
         79:c9:e4:67:24:23:fd:f2:31:ea:f3:af:30:14:25:a7:5a:a4:
         a0:5f:87:b6:7a:d0:8a:cf:84:ce:63:28:ef:49:5c:69:72:b4:
         45:17:10:7f:8b:cb:c1:29:cc:5e:48:ed:27:df:bd:b4:54:fd:
         98:5b:30:e7:73:66:72:00:92:d2:53:b5:f0:4c:d5:b3:e9:42:
         62:4e:f6:5c:d9:b6:6d:76:24:ad:38:ef:08:52:47:d1:a6:c7:
         68:9f:a6:3a:63:0e:07:80:23:45:4b:0e:ae:16:b1:e5:bd:5e:
         d9:68:e4:3e:25:01:8d:a1:e5:b6:da:34:ce:e7:a4:1c:05:3b:
         2e:5f:29:66:7c:05:dc:5c:0c:4c:15:c2:50:3d:62:c4:aa:cb:
         e2:9f:b5:ce:16:e8:9d:a2:95:96:42:6c:46:2a:77:4d:02:f5:
         6f:a4:c4:18:3a:44:c4:80:0d:e0:5a:31:69:e3:37:f1:c8:b3:
         00:0b:18:dd:f5:b9:bf:c5:38:73:a0:41:ec:fa:ee:90:f6:63:
         7e:6a:8c:6f:ea:72:01:7a:43:d3:2a:c7:a1:8d:62:56:3c:24:
         80:72:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:05 2025 by rpki-client on console-fra.rpki-client.org