Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
File:                     8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json)
Hash identifier:          Sk47oZUax46Y2wyk7qTNJxeqXGwAcgfd4FbOfaKjrMY=
Subject key identifier:   58:55:7F:69:45:96:98:63:F9:38:F6:CA:CA:F1:ED:14:60:A0:1C:EE
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Certificate issuer:       /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial:       019354635DE47E9444F60371E6B9199D0AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 15:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 15:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 15:00:18 +0000
Files and hashes:         1: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: tJ4RtJGafFxn2F4D2sou/fBWgsUMTQQ2c46YHsEL7K4=)
                          2: 9DLNUmRJ_3LuIchOkWxxnu5rqUQ.roa (hash: 2NAkMtrKhgbuVSV77slRSdAGaE+4wTFFMBjT5FDbS5A=)
                          3: GgQsIs2X4jy_mWcV8hRXXPuRX_w.roa (hash: 6T6xIROgbi+b8XC+4EEJJIPICJxGus4uRH04Wdh50zo=)
                          4: M9fLJNPxdFy9gk7L0uBraRV2p7w.roa (hash: U4S6Bnr07HQ0HigUdzRskkza9s5/6j39lFR6hUMpRBA=)
                          5: O84Y9YaCdkkzJLyBgWQ2h--28Wo.roa (hash: m/RLM6vw2MOJJFaottelv3TFN7g+HcPRlTVzgS2IsdI=)
                          6: V0bC84UZrL-KrmpAYM6t-as_lDc.roa (hash: LXF7XW5xRIH8rZd2i3wKcz+h1I/cI2StjwZQhji5JyA=)
                          7: ZJjluUUTQC-_2TyELPtD3pDQLcM.roa (hash: wBexZA6cCNLoayIuLXEUpzZuVXrQ9EFE6AxcTFcOh5Q=)
                          8: ZaGM7vU-C3SM8z1p9dmMft9wHkA.roa (hash: 3q8zvv+XwEiYfJx3bLvCYG+oSu3FqIvHNXdxfXdjWwk=)
                          9: csf4knCgnaEDLjkdXAYPqD-fPhc.roa (hash: B8Wiv2MqZ+S5as4zGH51Ukw80QLxGlpqbtdIijvXl/g=)
                          10: nJxP-BV9jATd89OOfTKxlfQ4UQ8.roa (hash: wpwGV7RtBawwydLdzKFrCNUGFH9Ekl4Zc9Dbnr5awNQ=)
                          11: ysdND1ustZzaDsp0dR-QZ5DPLdY.roa (hash: tqcET9dCrJYnpDkN2rJWlYKEE/Doo7WJmCPmTaa+rVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:63:5d:e4:7e:94:44:f6:03:71:e6:b9:19:9d:0a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
        Validity
            Not Before: Nov 22 15:00:18 2024 GMT
            Not After : Nov 23 15:00:18 2024 GMT
        Subject: CN=58557f6945969863f938f6cacaf1ed1460a01cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:30:78:2a:49:d5:b2:96:25:2e:48:4e:b3:
                    16:d4:d0:7e:2a:ca:2e:00:86:2c:34:90:3e:43:ae:
                    d9:b2:7b:9c:6e:c1:35:34:46:6e:8a:ef:f2:9c:58:
                    9a:1f:15:24:1f:c8:65:31:04:d3:91:d6:1a:19:49:
                    f6:11:b0:b5:5f:08:6d:02:5a:7c:46:f6:ff:d7:23:
                    d0:28:5d:82:b9:f3:ad:44:b6:0d:37:d8:a3:2e:f0:
                    53:f6:73:74:22:57:ed:8a:9e:cd:aa:c8:f0:a3:6a:
                    ef:aa:31:bb:5a:71:b6:9f:b1:76:40:5b:48:8b:d6:
                    35:e6:75:ce:e5:9b:0a:39:c0:60:cd:7a:67:ce:3e:
                    80:9d:af:86:ce:b7:ad:ca:a6:6c:65:2f:e1:1a:fa:
                    a9:cc:8b:02:fe:eb:d7:6f:59:13:72:d3:96:84:cd:
                    de:04:a0:68:f7:ac:53:45:95:ef:f0:bf:e3:83:8b:
                    98:cc:c5:82:b1:1e:cb:1a:bc:9f:8c:0f:f7:a2:8d:
                    ea:b0:72:18:b0:b3:41:34:b5:cd:1d:b4:ba:91:99:
                    b2:88:6d:e1:92:3d:71:03:32:13:69:73:20:69:c2:
                    2b:e5:5b:ce:10:7b:c2:f4:95:4e:52:3a:4a:4a:b8:
                    6c:18:c8:79:26:11:e4:1b:9e:0d:98:65:a1:1d:d3:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:55:7F:69:45:96:98:63:F9:38:F6:CA:CA:F1:ED:14:60:A0:1C:EE
            X509v3 Authority Key Identifier:
                keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:88:76:3f:9c:2d:ed:1f:83:3e:9d:6e:9d:f9:9d:60:f4:39:
         44:57:dc:d0:b9:45:d1:ae:c8:8c:33:c5:17:bf:b6:95:2e:30:
         e5:f5:b9:74:ad:4e:dd:fe:05:ed:93:65:48:93:18:40:88:11:
         7d:73:c6:05:83:23:bf:f8:d0:95:0d:50:87:58:fe:e0:5e:db:
         0c:59:14:64:24:f7:33:f5:c3:2e:60:c3:34:95:f1:4b:ec:34:
         12:4c:7e:cc:4f:7a:db:0c:4c:2c:78:c5:5f:ed:15:6a:20:af:
         db:72:3a:dd:a4:7a:ce:82:35:4d:19:01:a1:fb:b8:f8:9b:ac:
         bf:97:61:b8:d7:68:52:fc:98:3d:bc:3b:f4:eb:41:20:31:18:
         00:1c:6b:09:11:30:26:f5:c6:4f:e6:0f:87:23:eb:32:f6:87:
         95:e1:d4:ee:f2:1c:28:ad:8a:89:95:e0:f5:16:0c:2d:a7:f7:
         ba:73:16:8b:15:9e:f5:5c:74:e6:d0:a2:20:9e:e4:4c:3d:a2:
         dd:b2:2a:48:97:2a:0a:f8:ff:c7:54:59:98:e0:5b:fa:8f:a8:
         75:a9:85:7c:21:f1:43:6f:13:bd:70:cb:6d:b2:ec:fc:11:d8:
         74:f6:dc:df:17:b9:1e:b1:a3:ef:1b:25:1b:40:b9:10:f5:32:
         fd:b5:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:26:32 2024 by rpki-client on console-ams.rpki-client.org