Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File:                     G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier:          COtuIbMIQwj3+gUIxKhkh7X250eP+aCoBQWlZFaoi4A=
Subject key identifier:   0A:8F:A8:4D:C7:B7:73:0B:FC:41:63:45:ED:B1:57:A2:4A:34:4F:FC
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer:       /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial:       019351D067307AC2AE4F411CC536B042C2DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number:          0879
Signing time:             Fri 22 Nov 2024 03:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:32 +0000
Files and hashes:         1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: yVlQjSULP9jiUhjQ/U+1iCGjA+qB5iFaITH+J9rpLYw=)
                          2: kXdPLTYOi6H-e19peGWV-cUyt8w.roa (hash: FijZ8g91wRzPyRUrh9ISY8nQDfiRbwCddpznfAZw0a8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:67:30:7a:c2:ae:4f:41:1c:c5:36:b0:42:c2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
        Validity
            Not Before: Nov 22 03:00:32 2024 GMT
            Not After : Nov 23 03:00:32 2024 GMT
        Subject: CN=0a8fa84dc7b7730bfc416345edb157a24a344ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:05:41:83:5c:2f:58:0c:f9:63:84:80:20:
                    a0:97:80:1d:b3:05:e9:a7:36:2e:4b:f4:e4:c4:da:
                    58:7f:98:86:db:ae:69:86:4b:df:3a:da:4d:73:71:
                    56:80:31:05:27:46:f0:e4:b8:8f:8a:39:ea:dd:fa:
                    6d:0c:58:62:06:51:d2:b4:46:1d:57:b4:48:10:eb:
                    c1:4f:de:f6:bd:d1:46:6b:21:9c:19:7d:ef:8a:99:
                    ed:4f:d7:6f:0a:26:73:8f:e0:34:6e:0e:da:25:54:
                    87:c2:5c:c8:cc:d1:fb:0d:5d:ec:2b:d7:8e:7c:7e:
                    ef:83:04:64:60:1c:f1:fb:92:be:81:8f:8d:8f:4f:
                    1f:7a:f2:18:3b:d2:e8:9a:2d:a4:2e:07:fd:40:5b:
                    65:18:6c:00:5a:58:84:7f:8c:0c:eb:c5:0a:4f:cd:
                    2e:be:dd:37:5c:49:5e:97:87:4a:13:cc:c5:71:0d:
                    4d:0f:0a:e8:b8:56:cf:10:5b:ce:d2:f1:eb:44:56:
                    67:c6:19:a9:57:40:f4:73:89:c3:db:df:63:9e:82:
                    9c:80:de:38:ec:3f:d1:1f:9b:be:7d:06:52:ee:4b:
                    65:83:96:cc:52:ee:ef:b1:87:4e:35:ed:d5:f9:b0:
                    39:f3:9a:4c:d9:28:24:44:5e:c4:0e:8c:1c:8c:07:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8F:A8:4D:C7:B7:73:0B:FC:41:63:45:ED:B1:57:A2:4A:34:4F:FC
            X509v3 Authority Key Identifier:
                keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:12:e7:2a:32:ae:a1:28:b3:da:d9:8c:20:21:fe:da:0d:
         64:b0:ca:c3:ff:98:f8:b0:42:d9:36:b5:dc:b6:f9:37:62:02:
         a9:3e:8b:4f:3a:b0:84:a1:83:53:c5:c5:6e:7f:de:14:00:d7:
         73:5d:90:a6:c8:fe:6c:a5:36:d6:ce:31:38:7c:39:00:08:bf:
         cb:6b:94:1c:fc:c5:34:f8:d8:37:24:b2:ef:47:32:2a:14:c1:
         40:38:a8:29:0f:ba:b8:43:2c:1e:9a:2c:eb:58:69:9e:d1:15:
         d9:32:7b:c3:7a:a2:5f:af:26:76:6f:2e:27:5f:9f:9e:bb:10:
         ba:1e:36:4a:0b:b0:6f:c5:5e:76:40:b9:03:51:6a:20:fa:08:
         f9:0b:ba:ee:dd:37:ca:38:0f:0d:ed:45:1b:3b:df:08:ff:86:
         24:ce:d9:0b:37:f8:db:c0:86:26:6c:4d:a2:ae:0b:69:1e:f7:
         ff:08:81:4e:da:5f:9d:cf:e5:55:1f:41:72:06:84:05:1c:f1:
         bc:3f:59:66:d6:f4:f9:c5:97:39:cb:ba:21:f8:98:21:77:8f:
         c8:55:ed:e8:a3:a7:c9:64:00:c6:8b:eb:6e:f8:0a:9e:1e:2b:
         12:40:f9:f6:a2:09:fe:cd:8c:77:52:23:dc:31:c3:c6:22:9c:
         8c:a0:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:49 2024 by rpki-client on console-fra.rpki-client.org