Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File:                     8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier:          Tf/x61Dfl1kMVybBsC6MwjOAYfkDtVgWl0b5LdHPKwA=
Subject key identifier:   7E:5F:6A:65:08:73:A0:5E:54:08:FA:CC:2B:EA:BA:2C:85:86:89:C6
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer:       /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial:       0193579BF2D6CAEE6E7A3245101ED65DE4DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number:          0A7F
Signing time:             Sat 23 Nov 2024 06:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:58 +0000
Files and hashes:         1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: 3fUarC5bO51NB51P3tx0DSbW3kCSwYdmlvJfFDvNIWw=)
                          2: dhlPVUM3wk2hWa1-gjuRxUCRIqY.roa (hash: CNzD72FeBrNhFxcICiHnLjua5N0STHUk06NOb/MrDso=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:f2:d6:ca:ee:6e:7a:32:45:10:1e:d6:5d:e4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
        Validity
            Not Before: Nov 23 06:00:58 2024 GMT
            Not After : Nov 24 06:00:58 2024 GMT
        Subject: CN=7e5f6a650873a05e5408facc2beaba2c858689c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:2b:e1:e9:92:45:45:f1:70:89:7b:95:2f:
                    e6:b5:be:87:6a:97:c8:94:c6:1c:84:74:46:59:5c:
                    92:8b:dd:16:0d:b9:83:33:d5:52:10:9c:a6:26:7f:
                    9b:89:2c:39:3c:a3:11:59:34:08:65:98:9d:9d:63:
                    fb:74:e6:91:d6:50:65:e3:13:95:d6:3c:0c:01:53:
                    2b:3b:31:be:70:f0:94:f6:80:a0:aa:5e:60:4a:a5:
                    96:82:e9:81:ab:7d:bc:89:ae:06:82:bb:e1:01:df:
                    e7:38:de:14:83:dd:95:ce:cc:e3:61:c9:3e:c3:12:
                    65:df:96:f6:91:24:92:3e:9b:2a:1b:01:ba:18:c5:
                    ef:14:95:a5:b3:b8:22:4c:ae:c0:b6:a2:5d:f4:2a:
                    7f:13:65:43:90:0d:f2:a3:b4:d8:b0:e2:30:99:48:
                    52:15:1a:af:1d:c9:9d:f0:68:75:cd:1c:14:21:ce:
                    50:2d:63:2b:1c:af:83:92:26:be:36:ba:74:96:68:
                    90:ab:51:27:8a:60:53:1f:8b:2d:1b:31:73:e5:4d:
                    b3:43:93:de:d0:5b:6c:20:f5:2d:ea:d5:55:fa:f6:
                    ce:28:c9:e7:00:91:74:c6:5b:b6:90:0e:69:12:0b:
                    66:89:a0:cc:04:99:c1:05:6d:e5:cf:55:06:3b:77:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5F:6A:65:08:73:A0:5E:54:08:FA:CC:2B:EA:BA:2C:85:86:89:C6
            X509v3 Authority Key Identifier:
                keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:97:72:71:81:50:07:17:36:4f:85:a8:28:9d:cf:e9:ed:aa:
         09:2e:3d:ff:cb:be:c2:2d:8f:b2:49:a4:f8:2d:ee:f9:68:b6:
         4f:f2:ad:e9:ab:b0:0d:a7:89:53:36:bd:54:dc:22:d9:3c:bc:
         1b:79:5c:24:10:b3:b3:f1:24:40:0c:48:bc:68:45:24:5f:54:
         aa:54:f5:1d:92:33:a7:7b:64:19:f5:88:1c:f9:5f:16:8a:56:
         33:00:c2:8e:c6:b6:92:51:77:48:59:3b:96:82:15:a2:04:bd:
         17:f6:2e:68:21:3d:8c:57:71:b6:83:08:d3:0c:7a:ad:ba:18:
         44:eb:6f:39:16:a3:dc:d7:ed:b3:b9:1f:0f:0d:d8:3c:0d:b7:
         2a:70:93:9d:81:f8:f5:b2:c4:20:c8:52:a1:dc:a2:4f:7e:fd:
         af:61:56:1d:92:ec:72:7e:94:35:c4:46:4d:c1:fc:bf:15:dc:
         36:89:b5:cd:c6:d6:a2:32:8b:2e:28:ed:78:8d:c8:06:b2:b9:
         de:34:81:b8:0f:c1:6e:18:ff:69:37:ef:e8:08:59:8e:26:2c:
         eb:34:28:9a:85:7f:f0:64:b5:c4:4a:49:a6:92:44:d9:32:21:
         53:dc:22:e7:b8:dd:28:4e:b9:f6:26:39:3e:61:27:0b:2a:48:
         9f:fe:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:56 2024 by rpki-client on console-ams.rpki-client.org