Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File:                     8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier:          Dv+Zi5TXfehjaZfc/miqwlNKAC5+VATgKp62/g4/jLQ=
Subject key identifier:   92:D2:5A:BF:AD:9F:81:F2:BA:57:A5:69:B1:5D:89:2F:A6:FD:49:F5
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer:       /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial:       01940645C35D064D6BCC11294ECD8EEE7520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number:          0E75
Signing time:             Fri 27 Dec 2024 04:00:22 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:22 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:22 +0000
Files and hashes:         1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: /WkNn8WhKS4/pyrn08Tmq/niF1ZZe+jbk4QodQCQc68=)
                          2: l_yAezuQCBaa7P43TmFt1Fr6mmo.roa (hash: dDlj5cwMXCwo2gx9UiOdo0H9OfINI7rKP0Rxwo1LCk0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:45:c3:5d:06:4d:6b:cc:11:29:4e:cd:8e:ee:75:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
        Validity
            Not Before: Dec 27 04:00:22 2024 GMT
            Not After : Dec 28 04:00:22 2024 GMT
        Subject: CN=92d25abfad9f81f2ba57a569b15d892fa6fd49f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:5e:83:f1:6f:37:c6:35:49:9e:13:79:fd:
                    00:4b:7a:10:da:97:98:09:05:5f:2c:f6:09:42:c3:
                    21:d2:9e:c6:a3:45:5f:7d:0b:9f:9b:d0:32:c7:ed:
                    6f:8b:f6:a8:9c:b7:a2:3f:c0:40:b5:8b:5b:cc:12:
                    34:c2:92:8f:28:f3:f6:4a:43:04:ed:e9:72:05:c5:
                    58:38:50:10:02:50:9c:13:9e:d7:c9:96:28:b8:d4:
                    45:8a:94:bc:27:64:1e:e7:11:95:76:f3:b4:0c:d3:
                    26:9d:7f:da:2b:45:93:4c:ce:3b:7c:4d:94:a6:f6:
                    54:e7:0d:89:57:e1:f0:eb:1e:f1:38:0d:ca:8d:fa:
                    67:88:00:77:c3:87:d6:44:59:9d:74:d4:e4:76:73:
                    54:e2:52:3d:10:ef:0a:ef:a8:62:61:a9:e1:2f:4c:
                    98:31:1a:2e:76:8f:0a:ce:86:1b:f1:6e:22:48:93:
                    7f:ec:c1:59:f1:8a:6e:ee:b9:fc:90:1d:e3:1b:4f:
                    f5:50:dd:72:b7:07:dc:59:48:c1:aa:2c:c4:77:e0:
                    71:6f:55:93:83:28:64:c3:38:65:80:47:1e:ef:92:
                    7c:c1:b8:a1:a9:dc:f2:e6:79:68:5e:bf:4c:00:0f:
                    3f:2f:6e:75:a8:63:6f:ac:d4:fe:d8:4a:a8:cb:72:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:5A:BF:AD:9F:81:F2:BA:57:A5:69:B1:5D:89:2F:A6:FD:49:F5
            X509v3 Authority Key Identifier:
                keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:92:48:8f:c8:92:71:dc:9d:2e:ae:e0:06:88:eb:63:8a:8c:
         d9:f0:55:e6:c6:a6:39:9e:b9:33:4b:e5:5d:89:b0:60:70:09:
         cc:dc:5b:03:e7:fc:17:02:d0:a0:5c:4b:43:44:57:2f:8b:09:
         cb:47:c8:80:80:c0:77:2e:f6:b7:67:b8:9a:95:ea:f0:0a:13:
         8f:b0:a4:a4:cb:5a:b5:28:00:b6:01:03:f0:67:a8:65:25:ff:
         69:2b:85:2a:bc:3a:a6:83:d4:71:ff:0f:1a:87:98:d0:4e:c4:
         ae:c0:84:ae:bb:58:15:73:da:c3:ea:33:9e:76:5c:54:7f:1c:
         7b:d0:59:a6:48:c9:f3:a4:08:70:69:d4:3b:fe:3a:71:56:83:
         f5:a2:6a:49:c3:e3:02:e1:e5:f7:d2:07:32:18:f2:13:71:3c:
         91:b6:df:83:3d:99:5f:7c:98:8f:65:d3:bc:e6:68:56:5d:3e:
         a6:53:61:22:dc:32:d6:0d:cf:5e:0d:2d:83:89:c4:03:fc:db:
         63:48:fe:ee:cf:29:b9:a8:b7:c9:6f:8e:f3:b7:4c:ef:ad:2d:
         55:7f:e2:94:0a:4c:bd:e7:10:35:56:f1:d5:0e:f6:53:99:2d:
         83:b3:9f:31:e5:75:c3:b2:50:7d:6e:f3:04:7f:a8:71:7a:d2:
         31:c9:f2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:08 2024 by rpki-client on console-fra.rpki-client.org