Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File:                     8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier:          WfSGtGrnIWfT0I/uFKATTSEk0o/D2yLfGYZk3xxfEEs=
Subject key identifier:   5A:D8:E2:27:9B:9A:59:BA:1B:D5:A3:04:86:74:35:38:62:A7:EC:05
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer:       /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial:       01940645DD91A5E4738167B27F4D0A0C65D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number:          07BA
Signing time:             Fri 27 Dec 2024 04:00:29 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:29 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:29 +0000
Files and hashes:         1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: 6Ytmvpakiwef05huTC3AogfLgsOv26mJVMmvbs/VjwY=)
                          2: GHgRwpDgp2TKj2bPSfwnnWVLaR8.roa (hash: KpZma9MSxl84+lR3++yxeczLkr/wyGwqD98yiIPBrMo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:45:dd:91:a5:e4:73:81:67:b2:7f:4d:0a:0c:65:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
        Validity
            Not Before: Dec 27 04:00:29 2024 GMT
            Not After : Dec 28 04:00:29 2024 GMT
        Subject: CN=5ad8e2279b9a59ba1bd5a3048674353862a7ec05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:65:e3:15:98:e8:0f:4e:07:98:ef:05:dc:
                    ec:f9:57:8d:b1:a9:c5:17:85:1d:72:12:16:a9:48:
                    f4:b5:95:da:17:29:fb:ac:76:a5:9c:c0:dd:c3:bf:
                    a6:78:2e:c4:ce:7c:42:a6:31:91:18:eb:17:a7:29:
                    4e:4f:56:bf:5c:30:46:41:2e:ad:d4:e0:9c:51:69:
                    2b:94:6e:fc:b4:79:62:ca:fc:a8:66:ea:4b:5b:66:
                    f4:8b:ec:e7:6d:ad:00:10:50:94:e7:85:d1:f4:ee:
                    6f:d5:77:32:86:02:88:8d:57:fa:d6:13:28:56:8c:
                    2c:fc:4c:28:2b:6e:75:3b:46:a7:a6:f5:08:85:4f:
                    c7:fb:b5:f7:d4:08:24:2d:be:8a:98:ea:0b:45:28:
                    c3:1a:a7:d9:d0:11:63:07:c0:76:75:54:b5:78:cf:
                    c7:8a:75:a5:d4:c9:cd:a8:e5:38:71:74:17:f7:1c:
                    e6:5e:8b:52:f8:fb:78:54:11:5f:1e:77:65:2e:22:
                    0d:00:e9:ce:cb:8e:10:72:8d:19:a7:df:43:24:2c:
                    e7:64:ef:ce:89:83:05:10:af:8a:8d:a4:dd:19:48:
                    81:a2:8c:71:0d:36:de:15:c1:a2:14:49:c3:fe:27:
                    a7:ca:33:f1:a9:66:b1:c8:bc:eb:fd:7c:2d:46:15:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D8:E2:27:9B:9A:59:BA:1B:D5:A3:04:86:74:35:38:62:A7:EC:05
            X509v3 Authority Key Identifier:
                keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:2f:b7:50:63:bb:82:12:3c:26:b0:29:fa:e2:da:4b:15:
         33:df:4f:33:c0:6b:5e:88:b1:bf:48:9b:90:d2:ef:74:f8:c2:
         8d:52:5b:2d:fe:a0:27:9b:18:ec:b1:0e:3b:91:4c:e2:6f:98:
         43:ff:50:3b:5f:a6:a4:3f:bf:9a:f5:42:c1:fb:30:5c:8a:06:
         a6:df:30:13:88:6f:bb:ff:ae:f7:bf:06:32:a4:a8:8c:d5:f6:
         d8:ce:36:90:0b:a0:ed:c0:83:9f:90:a7:ec:88:a5:ac:01:1e:
         96:4a:0d:2b:3c:0a:44:5f:98:af:82:68:51:fc:9d:db:80:ac:
         da:0a:fb:7e:a6:a4:8b:45:c9:54:84:96:6a:d6:31:f7:43:fc:
         72:b3:ad:c2:9c:fe:20:97:9e:7b:d0:d6:c1:32:1d:91:e2:6f:
         d0:61:9c:25:48:59:5b:80:8c:e8:5d:25:15:13:42:43:fa:66:
         8e:11:75:b5:03:f1:39:45:94:0f:3e:32:58:fa:27:ba:65:6b:
         d9:7c:e2:ef:f1:b5:f8:bf:b2:91:d9:1b:26:b0:ca:bd:33:7a:
         b9:7c:ff:78:af:9e:4d:f4:ef:61:eb:c4:49:29:3a:ba:25:e6:
         19:93:f7:d2:51:50:65:e1:35:a3:64:7c:2e:0f:18:66:68:d5:
         26:c9:47:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:16 2024 by rpki-client on console-fra.rpki-client.org