Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          DxLIUFIpJIDIbM5pkieUd/jPUIZGV+CtwI0YEP+gp6Y=
Subject key identifier:   31:5C:8A:BE:8F:5F:21:1E:47:9B:A5:9C:A4:D3:F9:93:4F:51:57:CB
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       0193512BBF74573FB8F005040A96807F9C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          0BAA
Signing time:             Fri 22 Nov 2024 00:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:41 +0000
Files and hashes:         1: 3nN8Vr9yMJ8KYpDk-U_EtSoyWzA.roa (hash: cHCFiGwuTeTiLaP8ffR1+nwmgGFYJnb8UZdu7tYUVPQ=)
                          2: 57fk1iQERiVZjykG43qmHe4mam0.roa (hash: F3xXojQXJQ+rMFc48scDfZTDFrqmelj+UHKcCvRcI7E=)
                          3: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: j9QcS92ZfnodQ9ROVEEjLocMkPZS9PydcC9yvuQqrCs=)
                          4: H45IyaaEr811i7_XBQJ1qb-WyiA.roa (hash: /pRri/d3HDJxbLpxuJZAk2pZWG7BxHfKtNpbOG98wl0=)
                          5: MtORRkj6KzBYdubYDseSTdp0h1I.roa (hash: BKam7PcrRKZE7SE6qK2CoqqGToCrXa4T9X6XMC+0n8I=)
                          6: OI0ouhfkNMHl-dyhdxvS-36TqHs.roa (hash: 4zQ8g5DbZ/V9wAKj+GchIVuhl5XocF5c4fpqaAbcd90=)
                          7: TOXEwMgPIZ3nZApYaDZhoXO5uK0.roa (hash: 04y9jyCkY5lBbFiyIipk3b6tQX+m3INXBU+Cg9JQYvE=)
                          8: VGXHAYnYw4P0CW2UNClbBzQixSk.roa (hash: Ts5Bf7fMj1dxLowyY/QS6cpQRN4d5JLetbKVbgoEnKg=)
                          9: hC2yuzpsvdYdaca2Mwwa1eLLvuw.roa (hash: rqnswvNx5PQWQSJhMgdxCY/qEwMWrSB7aESUAjx2qSw=)
                          10: uTqavOzXshbfOmcCVEm5icvSg9k.roa (hash: oRCR5prfFV83ScldQEdL5piG6MV9YpSYLu+0dbWK4EM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:bf:74:57:3f:b8:f0:05:04:0a:96:80:7f:9c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Nov 22 00:00:41 2024 GMT
            Not After : Nov 23 00:00:41 2024 GMT
        Subject: CN=315c8abe8f5f211e479ba59ca4d3f9934f5157cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:b1:0f:40:0c:76:ff:ae:d6:c0:49:22:7a:
                    18:44:73:2c:44:95:40:b2:93:94:f6:ad:86:3b:eb:
                    88:50:fd:f2:27:68:82:18:31:d0:2e:c5:7d:39:84:
                    aa:d0:ca:d0:39:2a:b7:4e:c8:44:e4:9c:c3:fc:b7:
                    c1:97:8b:9c:dd:79:c0:c6:07:bf:e4:b4:f0:95:ec:
                    fc:95:fc:15:37:23:5e:f2:35:ed:ca:af:52:c9:50:
                    39:ee:df:8a:d9:0e:df:bb:d3:f9:e4:25:0f:8b:cb:
                    30:10:c2:d6:71:92:49:6d:a8:b7:3b:35:4d:3e:be:
                    6d:20:59:49:08:09:7e:9a:ed:82:f8:0a:7b:f4:7e:
                    e6:2a:7f:a4:b9:2a:b3:5e:3a:e8:76:86:2f:49:7e:
                    4b:8c:f0:4c:5c:56:36:62:9d:ab:55:67:0e:dc:e5:
                    2c:4e:d3:0d:ed:66:29:c8:6a:40:e7:50:34:05:3f:
                    e0:0e:23:60:39:60:b4:6a:5b:21:fe:d6:98:65:e1:
                    af:ed:32:0a:56:1d:1b:6e:a7:7f:58:b3:e8:70:f6:
                    6a:9e:6d:ad:cb:8c:e9:6d:1f:38:d8:6a:04:95:4a:
                    9c:c4:7d:32:6a:36:9d:d6:b1:9b:1b:0d:39:b9:73:
                    0a:db:a8:e5:e0:a8:25:e6:10:95:89:72:b4:54:2a:
                    7b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5C:8A:BE:8F:5F:21:1E:47:9B:A5:9C:A4:D3:F9:93:4F:51:57:CB
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:1b:f3:ed:a0:82:6a:e3:32:fc:f8:6e:f8:bc:18:a7:b0:
         32:d3:af:0b:0e:99:1f:d3:53:e1:16:e5:3c:b4:dd:38:c6:66:
         55:1b:da:56:4f:0c:20:7c:5e:01:7d:1c:88:64:0c:14:54:1d:
         58:40:a6:04:03:c3:f4:31:df:fa:9c:b5:ec:49:f8:ca:b6:c7:
         40:d0:56:2b:d7:1a:ea:b6:29:f5:5c:9d:e7:d0:b9:17:6c:63:
         e1:b9:4c:cb:84:d9:44:bc:f6:66:df:ed:9c:d4:44:75:18:02:
         e8:34:ff:9a:cb:bc:e5:fb:4f:55:95:5a:d9:75:a7:a1:45:6c:
         cd:41:a0:ef:bb:26:d2:c4:c0:e9:6a:6d:c7:5e:6a:86:88:1e:
         4c:51:b9:4b:a4:d4:64:c8:ed:af:00:20:c0:30:78:6e:71:c2:
         29:27:16:96:8b:1f:d6:be:b6:7e:1b:4c:31:03:21:ae:10:bb:
         12:e9:f5:94:ac:aa:84:47:88:de:9a:94:6c:58:7f:b6:d2:d3:
         1b:12:2a:56:41:f2:6e:82:9a:3b:66:6c:66:d6:28:42:14:23:
         7d:78:99:fc:68:7f:e4:98:67:67:a4:df:89:2c:5d:c3:db:8f:
         af:5e:b6:cf:99:16:27:f4:a9:60:f3:43:01:be:0a:f7:51:b1:
         34:5f:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:10:28 2024 by rpki-client on console-ams.rpki-client.org