Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft
File:                     8GHbS-aV6klaKDu-MwIqvSidXqg.mft (raw, json)
Hash identifier:          4MOL4turFv9ZrMlHBah0mvF7HKJa5md9ilEtKX/VTvg=
Subject key identifier:   22:28:10:27:93:28:DF:91:5C:1B:C2:28:A4:AA:4E:91:25:E5:64:CB
Authority key identifier: F0:61:DB:4B:E6:95:EA:49:5A:28:3B:BE:33:02:2A:BD:28:9D:5E:A8
Certificate issuer:       /CN=f061db4be695ea495a283bbe33022abd289d5ea8
Certificate serial:       019364B24F28F05C1B927AA5E01E05AF1AAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8GHbS-aV6klaKDu-MwIqvSidXqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft
Manifest number:          0DCE
Signing time:             Mon 25 Nov 2024 19:00:27 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:27 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:27 +0000
Files and hashes:         1: 8GHbS-aV6klaKDu-MwIqvSidXqg.crl (hash: TjAaPiR19AxLW3CdKFE+5qN8RRgAXM4SdcvLW4mCGGg=)
                          2: jRmhGBJu8nix6gfoAdeFmybqgOo.roa (hash: esfMr/OgwaqQWKBiFqU8lBYmWpgfvbqMdhmAtUknCCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8GHbS-aV6klaKDu-MwIqvSidXqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:4f:28:f0:5c:1b:92:7a:a5:e0:1e:05:af:1a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f061db4be695ea495a283bbe33022abd289d5ea8
        Validity
            Not Before: Nov 25 19:00:27 2024 GMT
            Not After : Nov 26 19:00:27 2024 GMT
        Subject: CN=222810279328df915c1bc228a4aa4e9125e564cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:42:1f:43:0a:aa:e2:fb:6c:39:6a:68:aa:
                    09:13:30:09:62:9f:71:c2:0e:d0:b1:76:a2:1d:45:
                    9e:33:1b:34:95:e2:fd:05:90:6b:6a:92:c5:73:e4:
                    1b:09:c4:53:9a:4d:b4:7f:0b:82:b5:39:51:48:9c:
                    9c:b2:55:c1:ef:1f:e4:5c:fd:63:a9:ed:11:99:d5:
                    5b:51:9b:e5:52:f5:70:68:65:99:87:89:db:cb:b2:
                    7f:73:1a:56:fb:7b:f0:da:25:0d:fc:2d:95:4a:7c:
                    37:ea:16:17:0c:67:0a:e7:c7:fe:2e:37:c7:2c:0e:
                    57:e3:87:3e:ac:a7:31:44:8a:07:c0:b2:0b:b6:95:
                    b1:2a:32:80:a9:e5:8b:df:8c:8c:3e:1c:26:af:2c:
                    f0:da:c5:6e:31:da:f5:6e:2d:50:3f:7c:86:cb:7c:
                    1b:09:44:6f:fa:31:b1:20:3e:00:6c:8d:69:f6:7b:
                    94:0f:02:a2:1e:2b:9c:f1:b1:89:ca:96:c5:15:22:
                    43:41:70:4d:0a:5c:0a:95:c5:14:2e:c1:53:28:4e:
                    4b:bd:0b:04:11:cc:fe:0c:dd:5d:7e:40:1c:d2:6c:
                    61:5b:12:66:d4:a3:46:79:07:b1:7f:31:bc:68:fb:
                    91:42:c9:d5:56:be:cd:d6:ed:9c:ee:b2:54:1b:6d:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:28:10:27:93:28:DF:91:5C:1B:C2:28:A4:AA:4E:91:25:E5:64:CB
            X509v3 Authority Key Identifier:
                keyid:F0:61:DB:4B:E6:95:EA:49:5A:28:3B:BE:33:02:2A:BD:28:9D:5E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GHbS-aV6klaKDu-MwIqvSidXqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25923b-f64e-4798-a37a-da3a3dee05d4/1/8GHbS-aV6klaKDu-MwIqvSidXqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:79:e7:32:9d:5f:32:51:1f:c4:01:3c:de:b8:e6:a9:77:ad:
         a7:6e:c3:ba:e5:18:07:66:6b:dc:e3:29:ff:b4:fd:02:6f:8c:
         79:a6:9e:86:63:27:05:a3:fb:b5:83:dd:f3:d0:3b:cd:62:92:
         38:72:f6:6a:5b:52:69:3b:75:94:52:4d:3d:73:06:6a:2d:05:
         5f:31:be:39:84:a6:7a:b9:fd:f3:f5:76:4a:e0:86:1f:9f:fb:
         20:7e:dd:7e:0c:df:4d:15:72:db:e2:f6:04:a7:ca:63:33:b1:
         26:8f:65:af:0e:d1:74:ae:03:7f:ff:21:85:91:85:c9:80:d7:
         b3:40:3b:61:04:7d:41:cd:0b:8c:4f:33:b0:fb:26:99:56:56:
         1e:f4:dc:76:79:eb:59:c2:6a:6b:bc:c2:51:fa:9a:7a:7f:c0:
         99:f8:e3:23:1f:d8:e8:45:2c:d5:38:0f:2f:21:d6:ad:86:a3:
         27:73:d2:f7:e6:5d:c4:cb:63:0c:20:5e:27:ba:6e:c9:fd:40:
         76:09:2f:c6:37:c1:b1:e5:91:bb:bb:08:b9:a1:e3:45:40:fe:
         4c:19:80:47:13:c7:ae:2d:ff:a5:66:d5:d7:0e:21:ee:2b:0f:
         30:e2:e1:42:1d:eb:79:e0:56:c6:22:fd:61:03:49:cb:02:58:
         a9:9b:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:33:27 2024 by rpki-client on console-fra.rpki-client.org