Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File:                     rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier:          9KkTaLYZOc8pryAqQeCXf82x/yBn0PHV/fKFA+JEh1M=
Subject key identifier:   E0:CD:0C:4A:DF:3D:AE:0C:2C:37:AF:F3:0E:F8:3B:21:0C:4E:5B:40
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer:       /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial:       019358774E1E83F76BF8764957E43A4E533E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number:          0EAE
Signing time:             Sat 23 Nov 2024 10:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:34 +0000
Files and hashes:         1: LhUdPGy9xMfRF5ejUF1PkgcCQb8.roa (hash: BoxpNCFM++tBXMBixNdsZZjjauFBwxBsNRbGqDi1De0=)
                          2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: OoZoXcOTpRD+NiIapteeLMRkQ/cAwIjQAYGa3Yn7INo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:4e:1e:83:f7:6b:f8:76:49:57:e4:3a:4e:53:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
        Validity
            Not Before: Nov 23 10:00:34 2024 GMT
            Not After : Nov 24 10:00:34 2024 GMT
        Subject: CN=e0cd0c4adf3dae0c2c37aff30ef83b210c4e5b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:a2:80:36:37:da:57:d9:bf:3f:50:d7:05:
                    ea:40:a5:f8:a6:96:bb:ff:00:c4:a1:6e:e3:8e:2b:
                    82:16:b6:f7:76:9e:3d:1c:e1:16:65:82:27:85:ed:
                    05:82:f9:75:b2:4e:9f:4a:46:96:58:f5:61:cb:aa:
                    f7:5e:e2:5e:0a:e4:14:eb:a9:fd:b0:a4:52:49:47:
                    21:e6:6a:e0:ce:ef:35:48:70:9e:03:e0:f0:0f:e9:
                    b3:9c:b1:11:47:8c:9d:9b:d7:66:1c:54:bc:26:a4:
                    a2:00:64:39:96:61:4c:4e:59:a1:6c:9d:dc:5f:e9:
                    7c:03:6d:56:95:ef:4a:4a:ca:57:dc:41:bf:f3:48:
                    09:7c:bd:36:29:99:db:b1:71:cc:09:41:c9:4a:5d:
                    0c:0f:47:91:0a:29:12:fe:86:86:81:9c:69:c4:d9:
                    88:3b:04:24:8a:cf:ec:1b:4a:15:0c:9d:e5:7e:d2:
                    c7:3b:c3:96:95:70:8e:14:51:1d:8b:3f:46:c1:3a:
                    96:08:46:dd:57:02:3f:25:c4:cb:cd:a3:89:f7:ed:
                    47:ee:41:04:d6:4e:ca:5e:13:6a:1a:3f:a5:f2:68:
                    97:93:38:b7:7b:74:be:f9:ff:4e:9b:f8:79:83:74:
                    27:f1:07:c3:b2:d3:9c:d0:a8:6a:2c:6b:d4:e7:28:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CD:0C:4A:DF:3D:AE:0C:2C:37:AF:F3:0E:F8:3B:21:0C:4E:5B:40
            X509v3 Authority Key Identifier:
                keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5b:ed:04:4a:05:f9:16:7f:2a:ed:59:8f:2f:90:0e:84:b3:
         fb:9a:14:73:09:52:4a:e1:1d:25:9f:6b:87:3c:2c:5c:ff:c6:
         f0:8c:2c:e0:3c:27:ae:63:e0:a0:b7:1c:4e:cf:29:f8:cb:19:
         50:37:5c:3d:7a:ed:25:01:94:53:a9:b8:f7:e9:4c:f1:f5:8d:
         54:ae:5a:25:1c:10:49:90:60:3c:c1:2a:97:58:73:ca:84:b0:
         87:85:78:2c:0e:3d:6b:c1:b4:73:9c:93:98:1c:51:3d:66:4d:
         2e:64:3d:82:bb:0d:3f:fc:f6:ad:01:92:d5:11:2c:d2:3b:70:
         0c:1f:0d:80:ca:54:b5:96:04:be:21:17:c1:99:73:7e:9d:86:
         2f:8d:02:37:5b:d9:88:65:2b:24:4d:14:44:7b:73:87:57:ff:
         8b:cb:2e:83:69:20:91:c8:53:ea:2a:bf:17:14:70:92:87:01:
         0a:e0:0c:3a:39:d6:4c:9c:33:b8:ab:0e:8e:b5:55:52:2e:3e:
         ca:a4:9d:60:e9:3e:f3:ac:45:70:07:b2:e0:51:40:59:b5:c9:
         9b:60:a4:3d:a4:43:96:a7:69:c8:5c:5a:b3:f0:66:ad:75:2a:
         66:10:8b:2f:82:69:82:df:00:a7:b7:6e:c9:48:eb:f4:19:d9:
         44:ed:d5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:31 2024 by rpki-client on console-fra.rpki-client.org