Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File:                     a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier:          c9Tc5yzHM8Dyx557/++nFJE0z1InEdIi5+A2WySTeLk=
Subject key identifier:   0F:9A:6C:14:FE:99:5B:67:BA:4A:7E:8E:75:7F:9B:29:9A:CE:2B:D0
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer:       /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial:       01935809396D9C07FFBFE7888C5C077D1831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number:          0398
Signing time:             Sat 23 Nov 2024 08:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:19 +0000
Files and hashes:         1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: jaF7N4K2FkdDZQM01S9WelDNWT/9+KhNXS5JTq9AEgk=)
                          2: gfkJkQLR0cynNbBGBXHz9quPKFc.roa (hash: hASvhKwt5Ti4v3i8zfWByq/MKG4WMYMLuYDE0SJK1fc=)
                          3: v9ML0aK_XBcRDl--xluviwZlanw.roa (hash: rgrUBTEQn3NS4UXNoT39lWbiv3iH9CXlm/SqTBrVyh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:39:6d:9c:07:ff:bf:e7:88:8c:5c:07:7d:18:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
        Validity
            Not Before: Nov 23 08:00:19 2024 GMT
            Not After : Nov 24 08:00:19 2024 GMT
        Subject: CN=0f9a6c14fe995b67ba4a7e8e757f9b299ace2bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5c:c9:30:35:0d:4c:02:b6:19:50:9f:9e:44:
                    d6:d1:54:74:de:fe:d6:af:66:aa:fe:fc:48:49:ce:
                    e9:3d:d2:d3:61:54:80:7f:83:dc:f4:34:4a:cd:fe:
                    d0:b3:50:55:d9:8d:2c:ef:1d:1d:7d:33:7c:c5:0a:
                    2f:52:ff:16:52:ea:0d:da:b7:e7:f2:82:60:b3:61:
                    0a:f8:98:cc:e7:27:23:3d:c7:11:c1:08:d3:2b:c0:
                    3d:a7:16:3d:82:5c:4f:e8:35:0e:40:10:d4:7e:d8:
                    44:70:c5:2f:c8:d2:6c:31:5a:c5:dc:8f:34:99:01:
                    d9:2e:71:94:62:bb:cd:5f:50:1b:ac:28:e0:86:92:
                    e9:cc:29:54:45:de:53:31:4a:c0:48:9f:df:95:8e:
                    fb:3e:cf:90:36:ee:21:49:dc:ff:d5:7b:52:03:66:
                    cc:20:2a:70:a0:3e:12:49:43:e5:01:8e:ad:27:32:
                    41:0a:57:c4:9e:c8:86:37:d6:1d:a4:a7:ce:85:97:
                    ae:6a:ef:2c:79:1f:1a:02:a4:52:5b:46:a3:3e:48:
                    fd:38:7d:93:ed:96:38:5e:86:3b:b4:b5:03:8a:77:
                    a1:5b:01:5c:59:d4:18:18:e6:cd:4f:3b:51:13:f8:
                    57:3c:5d:d3:4e:c3:7e:36:49:90:c4:0f:8c:36:1b:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9A:6C:14:FE:99:5B:67:BA:4A:7E:8E:75:7F:9B:29:9A:CE:2B:D0
            X509v3 Authority Key Identifier:
                keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:bd:5c:7e:16:6e:99:74:d5:6f:8c:ef:b4:af:7b:f4:5c:
         75:c0:a4:86:7b:c7:1b:97:04:02:0d:f8:e0:85:ca:34:08:3d:
         92:88:76:0e:e8:b4:ee:69:1e:89:fd:74:6b:b5:16:e6:5a:f5:
         af:74:8b:f6:5e:09:80:27:f0:4c:42:b6:2e:d0:35:ad:d3:66:
         be:67:49:0d:bd:f0:a1:c9:c1:30:7a:54:c9:e5:f5:4c:8e:74:
         86:08:b2:a0:dd:ec:a8:3d:0b:3e:05:31:11:cb:8d:7e:f5:a7:
         3d:36:7f:1c:71:e9:e4:2d:bd:85:f3:85:88:14:b2:39:78:80:
         b5:c2:35:20:44:8f:53:9e:38:7e:40:b3:2b:53:48:d1:61:d1:
         ad:0c:b8:3a:a1:bc:ba:0f:8d:42:39:56:ab:8d:ad:3e:d1:33:
         57:07:2f:ca:34:8c:c1:63:da:ff:40:b4:bf:ce:7c:70:88:2e:
         4c:88:c9:ac:96:95:7f:8b:13:09:92:5c:78:6c:ab:be:cc:cd:
         28:e3:15:84:29:c6:9f:74:ac:ba:0a:fa:11:05:ef:bb:bb:bd:
         29:58:78:1e:b0:40:4f:42:7a:2f:4c:7d:10:93:d1:88:f8:b3:
         41:47:24:f8:2c:d3:67:86:f2:21:b8:0d:35:75:79:19:7f:1d:
         8d:c2:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:46:59 2024 by rpki-client on console-fra.rpki-client.org