Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          dHmrgDoFZzirC4cZiUXbZo9HFNp+eNlYYEzYg60d5Pw=
Subject key identifier:   D8:D3:0C:12:8D:62:D0:AA:4D:50:02:84:6D:86:06:5B:C0:9A:1E:F9
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       0193580944292023A31AFB99F4D4F4DCDC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 08:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:22 +0000
Files and hashes:         1: 7tfgSlnrniCI_e9hqb6o7YTvrjQ.roa (hash: iyr8JEb471nansVVKWLHbaTlHeVGI7ql4efFywjIBjE=)
                          2: JpOmjX6RvSx5SaiDwpvnNbYssEo.roa (hash: 17pgLo61VkSgmEireTe2lbf8ZxEMvfwEZSeSG5HHdJ4=)
                          3: TRe5f-iSa6kV-875gUMp8wvIuuo.roa (hash: 0fDxf/CLZ+IFRzwxyTTQbURm0u9+1LJ4zfDAQrnEA+Y=)
                          4: YbuRUPioWN-UbDRmtPvaYD6_0ww.roa (hash: bNz44O8hv7i9YosgYkpR001p+kKNltRTbUR5HgBjXe4=)
                          5: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: 6XAFIczWAvhjo7LNpkKt3358mWLbEf5B9aPkFTtGqPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:44:29:20:23:a3:1a:fb:99:f4:d4:f4:dc:dc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Nov 23 08:00:22 2024 GMT
            Not After : Nov 24 08:00:22 2024 GMT
        Subject: CN=d8d30c128d62d0aa4d5002846d86065bc09a1ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:1f:d9:b8:4f:24:dc:8d:47:89:f2:45:52:
                    d9:3f:f6:34:7e:88:8c:94:ff:9a:d9:af:8e:a2:16:
                    4f:6b:e8:de:ac:8e:8d:12:d1:30:36:c7:9a:8e:ab:
                    39:bb:1d:5d:40:39:2e:94:d3:26:91:bc:49:e6:0c:
                    84:6d:5e:eb:eb:42:86:d8:8c:62:ed:13:a6:5d:27:
                    65:24:38:e3:83:0f:7b:00:a6:00:07:92:2f:4d:09:
                    6a:9e:4a:0c:69:1e:3c:fc:e0:1c:64:fe:28:8f:a7:
                    0d:42:5e:8c:4f:07:75:92:31:e6:53:70:c4:7d:35:
                    15:e6:69:c7:61:20:70:54:fe:c5:28:f9:e1:48:0e:
                    59:03:f2:d7:1f:5f:aa:f8:47:0a:9f:8a:7b:3b:5e:
                    bd:a1:31:d5:23:be:18:c5:78:78:ec:44:ec:a9:85:
                    18:6d:e9:e9:a2:37:7a:00:6b:35:59:13:2e:7c:99:
                    70:8b:15:72:bb:13:5a:cc:23:81:0c:a9:c6:6c:68:
                    a6:ce:46:21:b7:d5:a3:fa:65:00:4d:56:5b:e6:21:
                    63:33:2e:4e:82:7c:12:07:ec:36:96:91:d9:ba:49:
                    16:a9:72:b9:ad:d3:38:f8:a9:02:92:d0:10:68:ee:
                    9f:e4:d3:85:a9:68:94:d0:36:14:ad:9f:9d:70:87:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:0C:12:8D:62:D0:AA:4D:50:02:84:6D:86:06:5B:C0:9A:1E:F9
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bb:a9:28:f4:19:01:ce:21:ec:32:e5:d8:76:6f:7b:7e:39:
         a2:5b:f5:08:2b:2a:b1:86:5b:98:01:d3:b3:d1:25:06:bd:0b:
         48:85:11:ff:3b:88:e2:ba:cb:36:04:b9:42:1a:e8:89:45:6c:
         00:7d:e8:26:1a:9e:40:33:c8:83:85:48:7f:64:57:c7:95:1e:
         20:7c:8b:31:84:5d:b2:85:c3:d8:a1:59:6a:ec:5b:d9:1f:c3:
         03:09:ba:c4:af:c4:ef:b7:35:a0:07:3a:01:cd:50:4d:46:f4:
         26:e4:04:f5:ff:6f:f1:2d:79:11:f9:e7:cb:01:a7:d9:9e:86:
         72:9b:c0:2c:ad:43:99:f7:6b:9e:82:67:43:51:db:f0:a7:ef:
         1c:a8:d4:5d:96:a1:ba:20:ba:74:5e:27:09:fe:35:65:ca:0a:
         8a:74:6b:e5:8f:0d:10:2a:4f:32:b3:e4:8b:2e:16:3f:f5:f6:
         d8:b1:8c:28:5e:19:55:d9:74:42:3d:dd:6f:e2:75:53:5b:6a:
         8b:90:5d:a6:93:65:e1:61:e3:b9:63:f0:ed:ec:2d:64:80:88:
         71:a9:7f:13:93:e2:e2:56:fe:f5:bb:c7:90:d1:02:08:29:38:
         76:69:df:48:1f:82:46:9b:4b:13:41:18:b1:48:0e:15:6f:3e:
         45:d3:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:51 2024 by rpki-client on console-fra.rpki-client.org