Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File:                     gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier:          5zAUmbOOE/s6eL/ZBM8RAUC+1uovn/KPCFaWOnMG1DE=
Subject key identifier:   8B:16:5D:F1:5B:89:1A:A7:A1:0F:77:43:40:A4:08:C4:7F:4F:0E:AF
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer:       /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial:       01935879865B3CB2F88C9D3B97BE21D9DDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number:          08DC
Signing time:             Sat 23 Nov 2024 10:02:59 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:59 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:59 +0000
Files and hashes:         1: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: ZgLilDL/B1KTGINg22ZO/Qa+jOxst6hQJwBzB/KpX+Q=)
                          2: smdfCn23fh8JYRII-Pg0omiSRRk.roa (hash: nbXwbck6glp++Jn4Nwke7XqmGFW2IDd02q4RHxLrm+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:86:5b:3c:b2:f8:8c:9d:3b:97:be:21:d9:dd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
        Validity
            Not Before: Nov 23 10:02:59 2024 GMT
            Not After : Nov 24 10:02:59 2024 GMT
        Subject: CN=8b165df15b891aa7a10f774340a408c47f4f0eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:95:44:7b:7a:56:33:d3:97:61:5b:9f:cf:
                    81:34:5d:92:36:d3:cb:91:ac:a7:f5:56:32:51:44:
                    0e:10:ab:ee:26:9e:27:7e:37:00:a1:2a:4d:a3:a9:
                    2e:80:0f:fc:75:bc:3a:2c:9b:6f:05:5a:84:d9:99:
                    9f:ca:d9:92:cd:cb:93:2c:c9:72:88:ee:9b:2c:dc:
                    12:6d:f0:86:5a:68:5d:af:b1:1a:d3:41:0a:00:e4:
                    da:ae:77:25:d4:7b:8a:57:a1:c0:48:b7:d2:72:35:
                    5c:2d:2d:2a:29:40:3a:78:c0:e4:e0:49:5f:1f:4d:
                    24:20:28:f3:ae:7a:82:83:a3:79:66:f7:b6:72:d8:
                    2e:75:e3:51:04:bf:c8:12:3f:52:a8:6f:ff:38:f3:
                    66:e9:eb:bd:41:70:47:d5:71:2b:12:04:d9:c9:87:
                    65:c6:72:bd:56:e3:d3:66:d5:bd:a0:2d:d9:05:e5:
                    b2:82:22:8a:4b:ad:95:98:79:8c:df:08:91:89:d5:
                    41:27:a2:62:a8:9e:95:01:16:a8:9b:50:47:15:9a:
                    cc:c7:45:c0:d2:c1:de:42:9e:f8:11:e1:82:e5:d9:
                    72:18:72:1c:e6:87:f7:f0:ca:9a:fa:82:49:b3:cb:
                    ba:00:0b:45:35:e8:01:28:dd:8b:80:35:90:9d:e7:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:5D:F1:5B:89:1A:A7:A1:0F:77:43:40:A4:08:C4:7F:4F:0E:AF
            X509v3 Authority Key Identifier:
                keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:75:74:54:a9:2c:d6:c1:de:56:74:10:e8:af:7c:07:33:2a:
         e9:1a:3d:f0:6c:26:ea:db:73:72:78:5a:93:bf:24:cb:aa:ce:
         48:f0:ea:00:40:a0:65:b8:b5:6f:1d:de:29:cf:db:d9:8c:bc:
         17:36:12:9f:73:73:e8:ff:3c:dd:b8:48:70:36:1b:53:b0:a3:
         26:18:e0:c3:04:60:6a:81:5e:4a:19:11:3b:eb:d4:41:00:56:
         82:2f:a1:39:b0:51:43:5a:26:69:b5:59:5f:41:68:4a:aa:61:
         33:82:37:43:21:a6:6b:bd:a3:5f:39:96:9e:1d:2e:7f:c8:67:
         35:7d:18:3b:ef:50:de:2a:36:76:1c:6e:3d:4b:4d:28:07:59:
         2e:4e:48:d5:d6:82:5b:28:46:4c:e2:14:d9:73:18:d8:e7:2b:
         45:7c:81:59:84:98:fa:fd:20:77:5e:da:2b:f8:93:62:af:1f:
         51:a3:24:51:4e:09:ad:05:f4:9c:c3:15:bb:a5:d5:fd:ca:ab:
         04:07:b7:de:cb:fe:b1:d8:91:0e:3c:41:03:e6:d9:09:a8:a2:
         10:10:50:02:d2:e6:cb:3b:ec:67:8e:c4:35:be:fb:32:bf:e9:
         e0:bc:fd:b5:6e:17:1c:63:55:ef:d3:02:fb:59:24:64:1f:f7:
         20:93:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:16 2024 by rpki-client on console-fra.rpki-client.org