Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File:                     r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier:          KezIPe3kSZN3jlpRzFZRwjpFnWQxmEbMBAz0Q0FMQw4=
Subject key identifier:   ED:92:95:46:CE:71:1E:F4:FF:80:0C:58:F7:D7:45:09:EA:A8:E2:C1
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer:       /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial:       01935689E329C5C45E54E4AC1C2AAC7231ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number:          07CF
Signing time:             Sat 23 Nov 2024 01:01:37 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:37 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:37 +0000
Files and hashes:         1: 1VBYGwFuuqZwkirkbCwCeghTmzM.roa (hash: naAWt0Vnm9Zfz50WxlVwDqFDYAxil/BDxkCZ/KqN01I=)
                          2: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: QehGt6Dv0o9mRGL4o2EDud2nfBlw2KYP45De++B73GQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:e3:29:c5:c4:5e:54:e4:ac:1c:2a:ac:72:31:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
        Validity
            Not Before: Nov 23 01:01:37 2024 GMT
            Not After : Nov 24 01:01:37 2024 GMT
        Subject: CN=ed929546ce711ef4ff800c58f7d74509eaa8e2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5e:08:7c:44:ba:79:a0:45:a8:7a:3f:65:e7:
                    eb:74:4a:0b:d5:64:ff:d4:93:20:cb:3f:59:43:9f:
                    2d:cd:83:3a:cf:8b:d9:7d:0e:e4:4e:21:c2:5b:a6:
                    67:9d:d7:ce:64:cb:36:00:aa:fb:48:db:c6:ca:48:
                    d2:a8:af:90:a4:7c:ac:72:25:d1:66:2f:e4:dd:19:
                    00:28:c4:4d:ff:aa:a7:81:e6:b9:b7:34:e5:79:dd:
                    04:dd:9d:2c:4c:7a:aa:d1:4b:27:de:f1:8c:28:5f:
                    63:94:59:ca:4f:1b:f2:58:2b:7b:b7:73:40:5b:8a:
                    14:94:49:8c:9f:86:f2:72:57:f0:ce:20:2e:24:b2:
                    c9:29:a8:89:31:9f:8a:ea:7b:ed:7d:fe:c6:dd:5a:
                    a1:bf:ac:1e:c7:8b:4e:df:d2:b9:a6:37:2c:b9:10:
                    0a:c7:0d:4a:4c:6b:af:60:ff:0e:c2:56:6d:82:9b:
                    4f:2c:52:3f:8b:84:cd:aa:59:fe:55:9e:95:9d:43:
                    2a:9b:39:68:9a:67:0f:0c:36:9b:81:57:6d:1b:42:
                    fb:a6:93:ae:5a:47:04:5f:41:2f:a8:9f:25:ff:7d:
                    9e:b4:90:6b:49:48:17:04:25:07:69:91:3d:e8:bb:
                    19:4f:0b:df:7f:bc:f9:21:aa:54:70:92:34:e4:fe:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:92:95:46:CE:71:1E:F4:FF:80:0C:58:F7:D7:45:09:EA:A8:E2:C1
            X509v3 Authority Key Identifier:
                keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b1:6c:52:c7:ee:c5:80:1d:9c:cb:76:91:f8:cf:fb:69:2f:
         2f:81:d0:0d:ee:a4:77:e9:1b:94:75:d4:44:55:57:c4:9e:c4:
         c9:a4:7e:52:ba:a2:0b:df:68:2a:05:66:54:cf:d9:9c:53:86:
         2e:83:fc:6d:2b:c2:8b:24:d7:8d:64:72:d9:ae:ff:5c:f2:37:
         2f:45:b4:37:25:7d:85:29:1e:a7:1c:e6:e8:6e:34:66:3c:e6:
         24:ca:a6:cb:7c:58:8c:b3:49:81:58:3a:3c:25:c5:2b:18:d0:
         47:b2:bf:52:dd:9d:54:3c:33:cf:9f:9c:c7:63:3e:cd:f0:c2:
         99:93:19:5f:1e:ff:da:5a:67:05:cf:37:d2:3f:db:35:2b:2b:
         67:e9:89:22:ea:89:a5:40:85:ff:69:7f:6f:10:07:80:96:60:
         79:b9:3b:f4:dd:16:3f:9c:8f:91:8a:ba:e8:b9:26:6e:77:b9:
         61:a0:7b:63:69:ff:00:d5:83:53:71:5b:68:81:5b:4c:5a:cf:
         80:b4:91:a6:f1:ca:d1:c9:76:76:78:f8:9f:3b:95:55:83:f3:
         0c:da:69:86:c4:bc:72:34:a9:60:a1:8c:ae:8d:73:34:86:d2:
         06:dc:06:7f:28:6e:ee:50:68:fc:56:b9:56:03:57:ba:75:b2:
         01:27:e5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:30 2024 by rpki-client on console-ams.rpki-client.org