Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
File:                     C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft (raw, json)
Hash identifier:          bLc61w0JnLLWHKbTxa8I8F1TXRFnv72LWs4C96XOrNs=
Subject key identifier:   95:0A:88:52:14:5A:DB:EF:99:9F:A3:58:A5:05:F7:F2:2A:8B:0D:02
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       0193512BA8A00507E0004376C4CF91C1EE75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
Manifest number:          0759
Signing time:             Fri 22 Nov 2024 00:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:35 +0000
Files and hashes:         1: 3obiRhX8rAvDSw78utyxJuOGfUQ.roa (hash: t8n1zlvuibPTx25qO9i3IrNtPuWL9OqaTZ+++DKoSxM=)
                          2: 5clKtlIOZorxWwp6Y7OxGAjHjuw.roa (hash: I8++6qJiaC5TuQqdTuPYW+2yKnP123GQCdkZ0ZhBib8=)
                          3: A2Q9_u11OQv_68Q8LkLYXwJiHuY.roa (hash: 5PLcdJFLZsd9eJObU8vGvGcaqm85PxgTy9JkaP5AzjY=)
                          4: C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl (hash: JQ3z/69Drw5vnsNHm7+Rc+VxNAC4KvZYlu/B3cyh0aA=)
                          5: S_XTm76i-edwygVjwZLtseeiATs.roa (hash: 4yg3fBGKqcU4Qqwo4F7eCIkBIB7uzIWpWRU7UEjkG6M=)
                          6: qx0GWk_7LcW38t63hFVM1fpQo08.roa (hash: qg/+IV1oO60Jg9nd4ZXZr0MQnQkWi6mkRs2DLHnV6iQ=)
                          7: qz_6U50wH7_Z0F5Zf2l8nkHDuFU.roa (hash: zfEsA+ais9dOannXgLunrJtYiOiA085i8DTbkDQ7SIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:a8:a0:05:07:e0:00:43:76:c4:cf:91:c1:ee:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: Nov 22 00:00:35 2024 GMT
            Not After : Nov 23 00:00:35 2024 GMT
        Subject: CN=950a8852145adbef999fa358a505f7f22a8b0d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:01:af:81:28:bd:e7:72:84:07:0f:6c:b2:
                    61:07:4b:9c:42:9e:d8:fe:38:29:86:72:d4:45:1d:
                    cb:f0:37:13:7a:87:e7:79:b1:ca:95:56:17:ef:63:
                    04:78:14:17:71:4e:e7:d5:3b:07:8a:45:5a:a0:36:
                    5f:0e:65:53:86:50:ee:a6:2f:16:de:69:d9:b5:93:
                    6a:41:27:6b:44:13:1d:04:f9:99:f3:d5:bb:8c:73:
                    b8:13:5d:ea:30:58:54:28:35:a9:57:29:0c:31:de:
                    0e:0f:51:36:70:62:65:9c:30:d5:21:c2:76:b7:e0:
                    ac:5a:a8:d1:30:81:7a:d2:fd:6e:bb:15:0a:69:f2:
                    87:6b:ce:4a:2b:c0:c9:39:c0:54:f8:16:62:01:da:
                    82:e3:cf:d1:23:55:91:4c:23:9a:ed:08:9d:f6:e2:
                    ed:8b:48:89:81:ed:1e:d2:a3:2e:a2:e6:9e:bf:da:
                    2e:f0:89:58:96:78:37:50:d4:d4:27:df:0d:bc:b7:
                    9a:c1:c1:39:f3:24:6a:00:68:78:f6:0f:95:7c:02:
                    93:10:8c:c3:7a:85:63:25:9f:68:c9:d4:a7:c6:89:
                    6a:06:78:0f:fe:dc:8d:f3:a9:f3:3f:2f:1e:a4:28:
                    2f:22:64:7a:c8:08:e5:78:ae:3c:8d:42:0d:a1:17:
                    33:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0A:88:52:14:5A:DB:EF:99:9F:A3:58:A5:05:F7:F2:2A:8B:0D:02
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:27:cc:bb:a3:54:52:43:7a:89:3d:89:46:00:0a:e7:12:a0:
         8e:c5:f1:b2:d3:a5:ad:eb:97:9e:0f:c6:c8:b9:bb:5b:85:42:
         55:7d:d3:a9:06:de:c4:dc:43:e5:11:13:ae:87:46:4f:f1:66:
         b3:60:02:16:8f:34:bf:53:3d:86:95:58:c7:2c:e7:3d:43:4e:
         26:26:3a:e1:74:83:a0:b4:7e:5a:63:0a:84:02:03:ee:a9:82:
         17:00:3b:37:87:83:7d:c4:16:9e:d5:84:84:04:10:c9:8a:68:
         a4:b7:a3:75:5a:14:13:f8:07:06:6a:23:c3:5a:a6:6e:4a:20:
         7f:54:56:55:d9:27:dd:a0:ab:74:af:0b:8e:d9:03:ab:49:a8:
         84:56:2d:56:5f:87:7a:a5:b9:ac:50:c4:bd:f5:0f:72:aa:00:
         e9:06:4f:36:7c:e7:b8:58:05:aa:97:d1:bf:ba:63:a1:e7:e6:
         35:6e:0f:48:9c:44:5a:63:55:63:a5:a1:7c:c9:21:b1:60:6b:
         06:0a:0d:07:b3:29:90:77:f9:5f:63:6e:32:c0:e2:d6:ca:ae:
         ec:e7:46:f1:29:04:f9:da:a3:b1:b2:a1:67:5c:a5:99:67:86:
         e1:e7:c1:7a:cc:e5:17:77:54:cb:2f:0e:0f:93:de:aa:ba:d7:
         80:e7:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:07 2024 by rpki-client on console-fra.rpki-client.org