Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          0AISw+QByDM6ZUAvzlre/cAiJlKKrH0QP01zqeOW72E=
Subject key identifier:   62:86:16:9B:83:A5:E9:7E:8D:B6:AA:05:E3:C4:54:DB:8A:1D:22:7E
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       0193568B0D58BCFFF97969F2FD4C05D25E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          0C30
Signing time:             Sat 23 Nov 2024 01:02:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:53 +0000
Files and hashes:         1: Ur4R6BEVQ5ZVrCxRAx6kH6PxdNw.roa (hash: W8F7XyXSIJMD/DWWQji23aFXLuxhBN8ESNtYelMTfZU=)
                          2: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: D/ZvXT24EYhmKPw+8/rIEu/emV8m5oaHdyimPSsELLg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:0d:58:bc:ff:f9:79:69:f2:fd:4c:05:d2:5e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Nov 23 01:02:53 2024 GMT
            Not After : Nov 24 01:02:53 2024 GMT
        Subject: CN=6286169b83a5e97e8db6aa05e3c454db8a1d227e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:96:69:fb:ee:e3:90:86:b2:78:81:e6:71:
                    a5:e9:4c:da:59:6d:01:c3:4d:72:9b:b1:2d:a1:d1:
                    57:e3:d1:0c:64:ad:51:b6:55:ea:ab:a4:2e:3b:17:
                    c3:50:99:ea:5d:5e:31:09:89:37:f5:66:0d:1f:b9:
                    0e:24:e9:c8:47:67:c2:de:74:09:72:19:75:b3:42:
                    d0:8f:d4:8e:fa:66:f2:fc:80:6f:79:cf:9b:b5:f6:
                    fd:98:1a:6d:2f:e2:07:14:a1:d3:19:58:0a:72:62:
                    b0:ce:da:b6:79:8b:13:bd:3d:8b:42:c4:8d:38:5b:
                    2d:ec:21:81:2f:ba:3a:4e:b9:24:62:ae:11:e6:11:
                    e7:47:23:90:d8:f1:ba:e6:a3:e5:c4:4f:a2:e8:f7:
                    3f:f8:fd:a7:db:b9:a3:f4:6e:c3:da:4a:b6:c4:19:
                    73:a8:48:51:cb:d4:73:ad:f2:6a:4b:0a:43:52:55:
                    22:e4:21:d3:a7:d1:34:e9:17:cb:9f:71:c3:c0:e9:
                    46:df:c0:49:9a:ee:c6:59:85:c2:78:5c:e3:cd:25:
                    ff:c4:e7:b7:87:58:f6:ae:d7:9e:f6:b9:15:b9:3e:
                    a6:4c:45:f5:00:83:69:c6:a1:4a:7b:d9:c8:1f:eb:
                    ee:15:ba:9c:b8:be:62:fd:22:1b:f5:6a:6e:31:7f:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:16:9B:83:A5:E9:7E:8D:B6:AA:05:E3:C4:54:DB:8A:1D:22:7E
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:c6:90:1d:9b:f5:6a:05:69:56:12:42:4c:18:b3:48:b1:
         ce:b5:12:d0:00:84:9f:7a:0c:ee:8a:6f:fa:fd:9c:69:7c:b2:
         f4:6f:54:03:35:48:5b:6a:1d:79:c9:cc:e5:a3:35:4a:1c:4b:
         52:b2:17:71:ca:c3:5f:89:0c:fb:75:f1:6d:3d:c5:94:86:53:
         90:2d:17:3d:1a:fa:9e:1a:c5:bb:91:8c:cd:4f:7d:ec:cf:d2:
         b9:7c:b1:f1:d5:ad:e8:14:89:a7:a3:6e:6a:fe:15:9a:9d:0a:
         e3:ed:09:79:d8:e4:e1:26:ff:42:e5:38:66:45:2c:97:b0:d9:
         cc:56:11:33:ed:6f:ff:d3:d7:90:0d:71:1f:9c:3f:d1:29:34:
         79:c3:d8:fe:ff:a7:9d:f8:73:c6:97:0e:c0:d6:3b:e6:90:b4:
         b4:da:82:3e:4e:4a:1e:78:7b:27:7e:d2:15:44:a5:25:d0:ca:
         01:a4:37:e6:7b:f4:6c:11:d8:63:04:4a:eb:d2:e0:ef:8e:46:
         86:06:83:f7:84:0f:e4:c3:53:c9:00:d9:ba:ee:76:28:ca:83:
         1f:8a:b4:71:e6:ff:7e:9f:31:10:87:14:2a:78:c0:79:a3:b0:
         16:ab:f3:77:e6:77:22:ee:fc:c3:a2:52:42:78:e3:3b:99:d5:
         39:65:07:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:21 2024 by rpki-client on console-ams.rpki-client.org