Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
File:                     t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json)
Hash identifier:          R9XFXwxOvLkEH98/I6a0aPGVLobzvcdEi/Q8rCeKoVw=
Subject key identifier:   0C:8D:03:BD:B3:F3:35:E4:12:2F:93:AF:E0:11:0A:D3:DA:07:C1:B9
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Certificate issuer:       /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial:       01936B2280BB54B62DF72DC9A3FF55ED6DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
Manifest number:          0A27
Signing time:             Wed 27 Nov 2024 01:00:43 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:43 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:43 +0000
Files and hashes:         1: 6s4jArV6fK-1SsJRE9tJRfFzQp0.roa (hash: i7hbLnwN8NzcbzRoFxxTyuE+/6sLqQLTvMPVuNXt06s=)
                          2: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: OFdq5eNoI6tU4qRweYuQmLtO8OkgdWvRNy+atyICJME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:80:bb:54:b6:2d:f7:2d:c9:a3:ff:55:ed:6d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
        Validity
            Not Before: Nov 27 01:00:43 2024 GMT
            Not After : Nov 28 01:00:43 2024 GMT
        Subject: CN=0c8d03bdb3f335e4122f93afe0110ad3da07c1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:a0:e9:e2:e7:c9:f8:a6:8f:91:47:f1:d4:
                    23:7f:03:1c:f4:0a:2b:e9:d4:ef:d9:38:a6:a7:34:
                    71:37:5b:70:4c:7d:a0:e4:14:86:c3:fd:90:40:09:
                    2c:9a:ce:0e:b0:ac:06:26:4e:5e:4d:51:ce:11:53:
                    00:ba:e7:27:63:95:e5:5a:12:cb:1d:d8:77:25:af:
                    ae:f6:f4:81:cf:2f:a5:ef:5d:f5:04:97:bf:a1:08:
                    08:43:c4:9a:f3:1a:f9:16:e3:9a:fb:93:3c:80:eb:
                    24:0e:fd:3b:3f:96:15:2d:c0:67:de:e5:d1:26:32:
                    74:91:cb:6c:db:65:df:05:f2:2d:29:64:0f:8e:a3:
                    5f:42:5b:36:6b:3e:d7:19:3c:48:14:1c:84:71:10:
                    70:ba:ba:37:0a:be:cf:ab:3a:a0:15:37:e1:ba:d7:
                    6a:2b:2b:aa:79:11:42:1a:b0:74:5b:39:de:fb:5a:
                    be:af:93:39:5e:d6:3a:ad:16:24:10:27:8f:e2:3d:
                    cd:0a:4a:64:2b:9e:9d:43:e9:ab:f5:62:8a:f4:39:
                    d0:e5:fc:f9:2e:fb:9a:1a:42:b7:86:b5:a6:40:94:
                    95:2a:b7:0a:3e:6f:c2:9e:2c:f9:b2:49:98:60:50:
                    ff:06:ed:d6:33:7d:04:b9:3f:81:f6:c6:9f:b9:2b:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:03:BD:B3:F3:35:E4:12:2F:93:AF:E0:11:0A:D3:DA:07:C1:B9
            X509v3 Authority Key Identifier:
                keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:71:17:5f:a9:e6:b5:ca:66:59:52:98:92:e6:71:60:52:
         31:82:d1:f7:f2:d0:f2:68:25:57:f3:4d:18:2c:8e:e9:cb:9d:
         67:d8:40:17:61:c7:fe:78:d2:39:a0:fd:dc:13:e2:f4:72:b1:
         7f:c1:61:dc:1a:e0:02:18:91:0e:5e:8f:d2:b6:ec:6c:1c:18:
         26:c9:94:ae:11:b0:cf:4c:a6:06:b5:3f:98:98:0e:c1:9c:88:
         af:6f:b8:4d:02:df:29:84:9c:d5:4a:f8:13:70:16:b3:1a:03:
         43:f4:7d:16:99:cd:b0:e8:6f:19:56:7e:67:cc:e5:52:04:73:
         f2:69:43:a9:69:19:9b:c6:1d:96:ab:9e:85:31:7c:2e:65:fa:
         c1:7c:d0:e8:b2:fa:19:ed:1b:b6:ae:bd:b9:60:f3:7f:26:f8:
         d2:84:89:3f:cb:fa:5e:72:b9:50:c5:f7:a8:e0:3c:b6:33:c9:
         ed:aa:85:0f:9b:ad:16:29:0e:72:36:92:32:d2:de:cd:d4:ad:
         c1:64:c1:ff:05:33:c1:e3:2c:cb:7f:e4:87:ce:66:11:8a:4c:
         c4:04:7d:bf:0c:3a:f6:13:2d:b0:02:e3:ca:ec:73:ae:eb:96:
         c4:11:d0:ea:08:e1:a0:f2:48:97:7f:fc:d2:6b:e0:08:f0:ca:
         0d:98:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:33 2024 by rpki-client on console-fra.rpki-client.org