Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File:                     O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier:          ++dPzsoFBLrN+265nVz5NMFMc1JIkYv83iwk5u7x26M=
Subject key identifier:   F8:70:09:02:C1:4A:C0:AF:8D:7F:27:01:30:18:2F:A5:A2:89:AD:C6
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer:       /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial:       0193591C2DF87030C77046DFCA8B65B9F112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number:          065E
Signing time:             Sat 23 Nov 2024 13:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:39 +0000
Files and hashes:         1: 8HtPxaRYmVHUPnBjfzFGqCBz92A.roa (hash: HQfACH88YQOdZisxsGiSvx+alueGTZNC++9f9DqGFOM=)
                          2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: G6f2HD5q/3dEHYnEJLdwwJtp9j4lHMhIEgS9f5NK3VQ=)
                          3: Opr5ON39nVYoZoiaP2gWq_3MbLg.roa (hash: 01JcQA+4aDeFY9bN8K+XWJV82OZ96eT66HOGE3XB9cY=)
                          4: nXfk5cslJ-ZHIxLa6SXgazsIg2Q.roa (hash: 3vrWmqzqSw7nIgq+pJnKe+S0Lzre04YAVymMYj6kjgQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:2d:f8:70:30:c7:70:46:df:ca:8b:65:b9:f1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
        Validity
            Not Before: Nov 23 13:00:39 2024 GMT
            Not After : Nov 24 13:00:39 2024 GMT
        Subject: CN=f8700902c14ac0af8d7f270130182fa5a289adc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:3d:6d:cb:60:bf:ef:f2:5a:11:3f:3f:d4:
                    70:cc:d0:12:ef:b3:eb:c1:68:9a:86:9d:e0:9a:3e:
                    72:4d:4e:72:fe:ef:97:2a:c8:2a:5c:29:c5:45:91:
                    2f:ae:b1:d9:10:d1:cc:b1:5b:4d:b4:39:bf:11:21:
                    f8:11:fe:35:88:e6:d1:d9:8a:d2:6f:03:9d:44:66:
                    09:61:3f:f0:4d:5b:32:07:99:71:44:0a:13:12:4f:
                    cf:ab:47:d8:3b:8b:5b:b4:cd:f8:b7:f9:5b:4b:03:
                    34:62:c0:b8:2d:e9:78:12:3a:50:b3:79:e6:3e:19:
                    7c:a9:42:09:51:ea:36:74:6f:9b:8b:8d:76:8f:20:
                    bb:8c:6b:d8:33:a8:6e:37:be:f7:3c:14:2f:7f:0c:
                    b0:f8:b3:74:4f:88:22:0a:84:6c:98:a2:c0:bb:de:
                    89:0c:04:72:27:a4:0b:8d:a8:99:b1:c4:32:72:ae:
                    c2:27:2e:e4:0d:75:71:c2:7e:62:1c:65:97:fc:a0:
                    45:75:e1:91:a1:8a:4b:84:e6:50:49:6b:f1:e2:1c:
                    2a:84:48:e5:4f:d1:89:6a:39:8c:ab:2c:42:27:19:
                    16:34:91:88:c6:ef:3e:00:6c:09:85:fe:5a:cb:87:
                    a6:7e:f6:99:92:ed:29:bc:32:50:2b:63:66:4c:85:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:09:02:C1:4A:C0:AF:8D:7F:27:01:30:18:2F:A5:A2:89:AD:C6
            X509v3 Authority Key Identifier:
                keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:a3:dc:21:f2:95:6e:da:98:b2:5a:35:69:af:aa:63:0d:
         2a:31:5e:8e:91:16:f8:41:aa:a1:b0:e9:e5:d9:90:6e:23:13:
         90:44:b7:0b:ff:dc:6e:22:15:48:09:0e:05:e5:bc:13:fb:23:
         09:dd:3b:c6:89:b9:0f:ea:84:f9:7d:cb:7d:0f:82:e0:b4:1a:
         02:7b:71:17:8b:92:6c:9f:1b:ee:0b:12:31:f0:19:f9:6c:d0:
         bd:fe:a3:a4:7e:1c:37:79:92:5a:6d:5c:1f:13:33:12:0a:a2:
         d7:a0:01:2b:71:db:06:00:d2:03:49:7d:07:11:d1:43:b9:1e:
         ef:0a:b3:75:61:48:16:cf:e1:61:c0:d2:0d:6f:f1:c0:31:1c:
         6c:95:51:07:bb:8a:89:4f:f8:28:bc:aa:e7:93:3f:70:cc:0a:
         41:fb:9a:16:d0:a7:35:72:02:bc:40:2b:7b:02:54:c6:75:fb:
         63:4d:65:55:95:94:8a:64:a7:43:77:77:d8:5a:52:fd:1b:a8:
         12:b7:75:49:b9:d8:3c:18:f1:8c:89:41:ec:3a:00:c6:de:fa:
         91:9a:b1:6c:3f:8e:f0:8e:03:4d:2f:13:17:01:14:58:2e:9b:
         a9:6c:97:8f:a8:d3:fa:1f:59:a5:c3:3b:5e:78:50:73:22:46:
         bc:c1:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:28:10 2024 by rpki-client on console-fra.rpki-client.org