Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File:                     Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier:          a+E4BPvAK94F5tgVxt9L8IZ+oHW9aF4fEHIyxwbDz6c=
Subject key identifier:   CA:F1:CE:46:BB:1A:5D:1C:EF:CA:4D:03:80:CE:A4:4D:DA:77:71:F2
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       01935651DAF256A7ED973E880AC02A7B4C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number:          0BA7
Signing time:             Sat 23 Nov 2024 00:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:25 +0000
Files and hashes:         1: 9nbp14pWIitdzaC_l-w60DRWGN8.roa (hash: MzeXGssLBU5zgCbSlzIrTVRKpWFq7HvzOOWMMEYWkcI=)
                          2: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: 8LeeMms2aOMCsNr+5n+CHnOlvmGTcqh+Zxea4LDilVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:da:f2:56:a7:ed:97:3e:88:0a:c0:2a:7b:4c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: Nov 23 00:00:25 2024 GMT
            Not After : Nov 24 00:00:25 2024 GMT
        Subject: CN=caf1ce46bb1a5d1cefca4d0380cea44dda7771f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:46:a0:7b:7f:21:2f:19:3b:9c:09:96:66:
                    1a:80:88:2a:44:9e:18:6f:f3:11:b1:a1:5d:87:1d:
                    97:61:af:a3:96:3d:13:19:0c:df:9f:51:b7:56:37:
                    a1:bd:5f:6c:14:49:4a:0a:17:f6:52:fc:6c:a0:a0:
                    47:ae:a3:d8:25:82:d8:4f:ca:b9:86:19:1a:75:1c:
                    5c:57:ec:90:06:67:c5:1c:cf:a0:b1:c2:cd:b4:e9:
                    77:d3:f8:5c:28:eb:c9:ab:a2:6c:8d:bb:b0:54:12:
                    60:bf:d9:41:84:92:e6:05:49:91:d8:30:ab:c8:16:
                    f0:fc:a0:28:23:19:52:28:cf:0b:52:f8:89:d1:40:
                    6e:56:46:d5:7f:14:e1:3d:51:f7:a5:ea:73:73:86:
                    27:b8:7a:7f:00:fc:07:0e:d0:b3:bb:6e:52:d8:76:
                    34:56:5c:95:e3:f1:88:88:85:7f:3d:27:57:a3:ea:
                    80:ba:06:5b:77:c4:21:92:6c:22:90:53:89:c6:48:
                    01:04:3d:6b:98:21:1b:89:a7:7e:96:39:54:9d:85:
                    aa:87:74:cd:11:9b:d8:e3:3f:dd:da:0a:c2:cb:cf:
                    80:87:f7:e8:66:22:58:0c:1d:3e:d9:34:58:dc:40:
                    11:a5:89:11:63:0e:42:f9:7e:ad:86:0f:2f:39:d1:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F1:CE:46:BB:1A:5D:1C:EF:CA:4D:03:80:CE:A4:4D:DA:77:71:F2
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:11:af:1e:c9:a0:41:58:75:fc:78:06:53:e3:f1:1e:0d:
         ba:b1:13:81:a3:14:d5:1a:88:c1:c0:ed:63:8c:db:6d:91:cc:
         3a:aa:7f:79:16:93:2b:4f:43:1e:48:68:ef:42:d5:43:42:0f:
         ed:f9:86:a3:a3:4f:68:83:c0:73:8e:52:52:b1:d2:6f:ca:e5:
         05:08:00:e2:65:aa:b3:d4:e1:df:ff:ba:10:6b:aa:44:ea:ee:
         6d:93:da:91:49:69:f5:08:9e:b7:d9:3e:14:a4:ba:bf:35:bf:
         8d:cf:59:e1:41:3d:fd:95:53:32:49:41:39:cb:9d:cf:35:46:
         86:56:db:b8:69:08:bc:ca:f4:da:07:9e:56:36:8d:30:bf:1f:
         ea:c6:10:a0:50:2b:8f:13:25:25:78:4e:3e:83:ec:b9:69:c5:
         a0:02:6f:e5:fe:34:82:57:fb:bc:df:40:eb:1c:64:35:14:2e:
         70:16:3a:17:eb:9b:40:54:45:0f:8b:17:fb:6d:74:61:c4:27:
         f1:3b:30:d6:0a:7a:82:f4:f6:24:b8:f0:4d:31:ae:b1:10:c6:
         f7:d6:18:bf:06:b5:86:0f:c7:9b:4e:15:05:dc:cc:fa:ad:c0:
         36:ba:e2:68:27:94:9b:5e:13:ab:cf:d5:d4:99:44:4a:ae:0f:
         2d:9b:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:16 2024 by rpki-client on console-fra.rpki-client.org