Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          VKhDwgCuzmJp1ZgLDw2ecdOJv1Lk8BnOzEd/lElS2jE=
Subject key identifier:   8B:9C:AE:EC:2B:49:F3:07:89:A0:41:B1:68:DC:63:EF:C1:0D:5F:7C
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       019331D8F7B5A0B9483ABBA7E914D30F1FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          0963
Signing time:             Fri 15 Nov 2024 22:02:02 +0000
Manifest this update:     Fri 15 Nov 2024 22:02:02 +0000
Manifest next update:     Sat 16 Nov 2024 22:02:02 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: ZKDbHcUvIH2eIii9WkK33JhUcNLYUJvX/gB9kWQUsKI=)
                          2: LudzlVtppUgbGOzEDsFNoEfY7NY.roa (hash: BnqozZVqQzlAYTzdStUTJczVw5E6l9tZxgZ2u1NjOsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:31:d8:f7:b5:a0:b9:48:3a:bb:a7:e9:14:d3:0f:1f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Nov 15 22:02:02 2024 GMT
            Not After : Nov 16 22:02:02 2024 GMT
        Subject: CN=8b9caeec2b49f30789a041b168dc63efc10d5f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:77:3a:27:62:11:44:89:0e:70:a5:97:91:
                    a3:09:e0:bb:bf:bb:22:b6:6b:59:06:a2:3b:39:46:
                    41:db:6e:51:e8:79:a9:df:f8:bb:b6:b7:40:f6:a7:
                    6c:8e:18:58:ff:da:4b:d6:6b:0c:57:74:a5:9d:7e:
                    91:70:84:9a:fa:dd:02:eb:1f:59:22:33:80:63:8e:
                    8d:b6:1d:9a:c6:6c:65:d4:a0:0f:f0:48:6b:76:4f:
                    21:17:74:ff:9a:7b:44:08:7c:1b:44:d1:cd:51:aa:
                    9f:68:54:6a:48:0b:22:0b:78:eb:e2:db:50:95:ab:
                    2d:9d:dd:c8:32:ef:ec:37:6e:4d:59:06:b6:be:8f:
                    57:a5:59:ea:e0:54:51:1c:a1:38:7a:2e:ef:79:45:
                    dc:a7:cb:b2:47:fa:5f:ce:c5:bf:f4:1b:bd:c3:da:
                    9d:f9:6b:32:b4:6d:fd:52:70:9e:87:be:3c:51:db:
                    fe:fd:06:63:42:d7:f1:40:91:7a:34:69:2b:b9:d1:
                    81:6d:f3:ab:1e:e8:67:00:4e:4f:52:72:e4:57:a7:
                    ef:a7:01:26:8b:a5:00:bc:5e:1d:2b:b9:88:28:96:
                    67:c2:09:bf:0f:9f:7f:6c:1d:83:2c:e9:b0:b7:05:
                    37:53:6b:d1:79:f4:c0:bf:e6:1a:cf:38:c0:32:c5:
                    26:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:AE:EC:2B:49:F3:07:89:A0:41:B1:68:DC:63:EF:C1:0D:5F:7C
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:97:45:f8:46:bd:31:eb:dd:6b:45:83:58:62:d4:19:1c:d7:
         0c:97:0f:b1:81:b4:ba:8f:8c:09:83:14:1a:46:69:7e:28:bd:
         f7:05:4d:5f:9e:b5:52:de:0b:2d:c0:ca:8d:dc:79:92:79:64:
         7c:2f:d9:28:f8:7e:1b:5f:d1:db:d2:a9:d9:4f:bf:3f:bb:ab:
         ee:fd:16:3f:e7:6b:28:c8:99:de:f4:49:a8:fa:bf:5f:09:c1:
         bb:fa:ba:73:5b:c0:83:14:c3:ab:5e:19:80:2b:81:ee:c8:4f:
         50:91:e9:56:57:76:7b:09:68:be:ca:ce:10:dc:cb:79:40:eb:
         11:43:ef:a9:81:66:aa:cb:f8:6c:d4:ce:9a:70:28:6b:67:c7:
         4d:e6:27:d9:49:95:12:e4:84:a3:8b:33:dc:98:c0:b2:84:9d:
         e5:1e:84:bd:a3:3b:47:11:3d:f3:a3:bb:a0:6d:51:0a:a1:bb:
         5e:7f:de:6f:87:bc:7b:b8:78:23:fa:67:af:b3:d8:a8:30:9a:
         67:0c:11:10:c2:cb:9e:ee:33:7b:f9:98:cb:a4:2e:f5:e4:82:
         21:3d:18:00:4b:21:28:34:29:3a:c0:1d:87:ef:3b:91:70:7f:
         e6:17:1e:7a:ac:d7:2c:dd:c4:5c:db:be:b1:91:2b:ff:3c:8d:
         c0:1d:5b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:33:02 2024 by rpki-client on console-fra.rpki-client.org