Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File:                     J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier:          oeDcIBiEo4BMVVjZbMRan9gTS1bubsz9bxLMx+1v5k4=
Subject key identifier:   39:2B:EA:9F:D0:C7:32:7F:49:DC:9B:58:66:88:4D:96:F0:10:DB:24
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer:       /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial:       0193523E1D09966E6C34ED1E29D68F542354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number:          11AB
Signing time:             Fri 22 Nov 2024 05:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:22 +0000
Files and hashes:         1: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: Y/N5lvfgrPZmOPz/I0N9iSvE2LMJYrcMP5fy7Y1Q77k=)
                          2: w817R2rVDrkOr9-q6GQr8_uBTG8.roa (hash: so5eeAE+xKfm7ypVrEwvXF5gYCxakMp7mPmxkvthc+4=)
                          3: xqYohFz7JaKgQMVQ2JDyGUJlrjg.roa (hash: vtjZ0SbWnf9RutZsnQxwwSlYs2Akc3CtmLo1HF37QR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:1d:09:96:6e:6c:34:ed:1e:29:d6:8f:54:23:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
        Validity
            Not Before: Nov 22 05:00:22 2024 GMT
            Not After : Nov 23 05:00:22 2024 GMT
        Subject: CN=392bea9fd0c7327f49dc9b5866884d96f010db24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:fe:48:e9:15:e2:30:3e:57:a9:50:ec:25:
                    42:a4:b4:1c:98:9b:b3:24:fc:41:1c:d5:7e:ad:80:
                    1a:e1:78:df:86:1f:e5:61:20:09:03:a9:bf:43:01:
                    7a:ba:4d:f3:4e:9b:e6:44:68:77:c3:84:15:20:69:
                    55:cc:d5:0c:45:06:bb:a1:24:2f:d2:58:43:81:41:
                    22:c8:25:5e:df:ad:28:e4:02:5f:4a:db:cd:e6:5c:
                    32:5a:e6:6a:fd:20:65:fa:66:ef:eb:8b:dc:44:98:
                    8e:89:be:71:9c:2a:ff:bb:af:64:09:41:a5:fd:a0:
                    fa:ee:9c:08:7a:0d:6c:75:57:4f:66:ac:fc:7f:91:
                    aa:63:51:56:dc:14:39:c1:e6:cc:89:d7:6d:36:ad:
                    19:5a:d8:03:5e:cf:5d:b5:21:f8:cc:a1:e5:a5:01:
                    29:c3:68:ed:d1:9a:5a:c2:59:a1:d2:59:50:63:06:
                    6b:aa:a5:cd:22:51:57:6f:8e:12:c3:ed:60:72:00:
                    d6:a3:d5:b1:d2:f4:2c:fd:11:f6:42:f5:d6:a8:78:
                    7e:cc:47:3b:31:24:32:9e:fc:dd:3d:fc:43:57:4b:
                    b9:8e:07:35:56:3e:52:22:5e:b7:47:7b:ed:08:b6:
                    66:0c:db:c7:df:4d:08:55:ef:d0:89:33:9c:d8:59:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2B:EA:9F:D0:C7:32:7F:49:DC:9B:58:66:88:4D:96:F0:10:DB:24
            X509v3 Authority Key Identifier:
                keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:8a:6e:74:18:ea:8c:d9:b6:06:c7:28:6e:af:36:04:17:2b:
         ec:3a:d0:c2:c6:43:f4:73:1d:a4:93:07:54:50:dd:60:93:73:
         70:ad:d2:91:b8:8c:3e:78:4f:73:62:cf:7b:05:71:32:47:3f:
         c1:ba:b8:f4:93:f5:dc:a6:ca:8b:86:f4:5c:34:f1:f6:61:f5:
         ba:fc:0b:39:70:27:11:0b:9c:fb:f0:d3:0a:ad:06:bf:0e:98:
         f6:3d:36:9a:b7:6e:d1:d1:fc:de:73:ef:15:be:6b:05:e7:1a:
         dd:d8:13:de:c5:71:58:16:ac:6e:87:ce:fd:2b:61:9f:5a:31:
         c6:20:90:f1:d8:84:ca:b1:0c:8d:65:f0:44:5c:37:40:8b:68:
         66:3c:17:aa:d7:aa:7a:57:06:00:e8:77:9b:eb:53:09:92:26:
         af:18:1f:b2:c3:e0:3a:34:49:80:27:f1:f5:73:54:9e:aa:83:
         7f:bc:d6:73:8a:cc:bd:d3:e5:c1:5c:ff:b0:6c:37:b9:38:88:
         0d:0a:14:42:f9:46:2c:53:c0:a6:e2:a5:7b:f8:81:f8:5e:1c:
         33:61:f0:c1:ad:f5:6f:b6:55:6d:79:59:dc:d5:74:0f:c1:c4:
         65:26:5c:74:1a:d4:58:8b:ab:c3:9c:e1:37:0d:47:ae:4d:0f:
         66:93:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:02:41 2024 by rpki-client on console-ams.rpki-client.org