Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File:                     8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier:          6Y22orRMPheQL8R5a0QRagKwHgTyMeqyyHKtCGwuiGw=
Subject key identifier:   4F:91:26:09:42:4D:1D:C7:A9:15:0F:85:39:72:2E:0E:EB:27:A6:16
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer:       /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial:       0193580927DB273F66BF48C0FDD0CE800703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number:          1378
Signing time:             Sat 23 Nov 2024 08:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:15 +0000
Files and hashes:         1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: 0eWPGyAylDDRe21RcpibGlMUPG5Q/Hoymi6jD3WuMz8=)
                          2: MWJsHjMPE5RgDOqoIlwwNdFEe4o.roa (hash: UkRKDNtn/7mCcMJn5GH+jpiXcMlfJ2MycGFIRYRAX84=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:27:db:27:3f:66:bf:48:c0:fd:d0:ce:80:07:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
        Validity
            Not Before: Nov 23 08:00:15 2024 GMT
            Not After : Nov 24 08:00:15 2024 GMT
        Subject: CN=4f912609424d1dc7a9150f8539722e0eeb27a616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:dd:fa:fd:82:08:28:86:78:64:56:20:1e:
                    c7:86:d4:c7:88:15:de:c2:74:ff:a7:54:a0:75:f5:
                    16:dd:0a:7f:5d:8d:cb:fd:24:f3:e7:e2:ab:77:4c:
                    0d:1b:30:6c:a1:88:66:c3:a2:68:2c:1d:4f:0e:6a:
                    d8:7b:29:d2:a4:c3:cc:7d:69:66:c1:a0:e9:fa:62:
                    05:cf:c3:de:05:e7:ae:20:6b:09:56:c4:ab:fb:98:
                    6c:a5:66:91:f1:ad:b2:45:41:69:5a:11:56:9d:ec:
                    87:4d:bb:9e:61:27:60:72:3b:b3:de:bd:f6:f8:ce:
                    ab:30:72:89:6b:69:58:c1:91:64:7f:72:f7:3c:79:
                    2b:fe:29:81:2c:a6:b7:5b:9e:c2:4c:f4:93:ec:de:
                    58:08:52:b8:c6:bc:85:c0:28:10:5d:2a:ae:92:93:
                    33:0a:e0:e3:3d:4a:47:27:df:bc:1d:13:3f:d8:bc:
                    33:e6:7d:0a:79:8b:06:71:e8:17:ae:d3:b7:a0:d6:
                    6c:98:44:96:de:6b:00:6d:c2:ab:45:42:af:25:fa:
                    cb:5d:17:a8:54:78:f4:71:77:71:b2:64:97:73:ea:
                    1e:59:37:f0:a3:77:ca:c4:68:d2:23:8c:91:93:87:
                    3e:f8:ab:b7:03:75:b5:b9:d2:d4:6b:1d:5e:5e:41:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:91:26:09:42:4D:1D:C7:A9:15:0F:85:39:72:2E:0E:EB:27:A6:16
            X509v3 Authority Key Identifier:
                keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bc:d8:01:16:cf:09:57:63:7a:d2:64:18:24:80:58:c7:f3:
         65:03:83:3b:70:a4:2a:ff:14:ab:9d:f8:fb:7a:03:db:28:69:
         17:38:55:42:d3:29:0f:03:31:a3:76:63:b6:c1:fa:92:ac:db:
         87:7e:4d:59:62:3e:f4:ce:72:80:0c:96:fc:47:bc:36:07:c2:
         ef:ef:8e:17:39:f0:62:58:78:ef:5b:40:c1:7e:41:29:78:0c:
         d0:fe:8f:3c:57:da:84:14:b7:c3:b7:0e:d9:ae:12:49:c5:69:
         09:f8:09:c2:92:6b:97:8a:5e:64:cd:eb:83:0d:86:dd:74:98:
         f6:e8:08:aa:0e:ff:d2:03:1b:45:4c:a0:a7:d1:37:64:cd:17:
         db:f9:fe:82:a0:c0:a8:46:91:ec:4a:ef:b5:34:e8:22:84:25:
         b9:a1:fa:cf:0f:a2:b8:e2:60:00:ea:2d:14:df:50:71:8e:44:
         b7:3d:ca:c3:85:1d:97:d6:77:e6:ea:69:e7:6b:09:0f:b4:97:
         31:81:48:3c:7b:9b:52:76:68:77:74:af:c7:62:a1:78:ac:a3:
         5e:58:3c:33:3f:dc:c3:37:1a:ff:29:5e:09:6a:38:45:ef:2c:
         cc:ba:09:1d:32:24:a2:c9:b2:62:f4:72:71:ae:23:8e:57:3e:
         44:59:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:29 2024 by rpki-client on console-ams.rpki-client.org