Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          li5h7DZ/MqLDSZowNoynmw+9s93xerkru1dH2cvh7cA=
Subject key identifier:   10:57:C7:DF:5A:8A:E8:47:3F:F1:AC:29:C7:F8:AA:4C:CE:29:C1:73
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       019352AC0D7C982FF12B8F2765E9C6CF8CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          057E
Signing time:             Fri 22 Nov 2024 07:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:27 +0000
Files and hashes:         1: 0ENZgtloNsItLMv-0ohLJXkH4FU.roa (hash: HRJXJv+RP5Y5gK4WwoYh2rlTOq3f0Vgu33byzehSXjk=)
                          2: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: cSYys0FKNuQ7bjc2ufvzQ3kyKjEb8E/FgCbHZu/pax8=)
                          3: aKZJP0DEzUXJ-aF7XWCKwEg_KX0.roa (hash: 68lkjcJ9z/QFmgoq7nyO2oC0TgK8YEhUgXa9kTboFhI=)
                          4: h5YdmnvV1AQtSkmCWQI_s8TbR68.roa (hash: Q3KRHEm4NFuGLlfKOJgY1hSGzXdFqc7/yE81XLjJwY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:0d:7c:98:2f:f1:2b:8f:27:65:e9:c6:cf:8c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: Nov 22 07:00:27 2024 GMT
            Not After : Nov 23 07:00:27 2024 GMT
        Subject: CN=1057c7df5a8ae8473ff1ac29c7f8aa4cce29c173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:ff:e3:f4:8d:cc:2d:63:7e:aa:88:c7:d3:
                    22:68:fb:2e:e3:38:d5:0a:bb:9f:64:14:fa:e5:e4:
                    2f:b6:8f:24:d3:ba:f8:b4:76:8e:81:1e:98:51:4a:
                    79:03:a2:36:3b:5b:41:c9:37:49:6e:4f:9c:6b:cb:
                    c2:3c:07:37:56:ad:36:19:7d:2b:76:53:a3:af:f0:
                    97:d7:b4:42:15:75:92:02:c2:76:fc:c9:5e:b4:a9:
                    68:2b:bf:b6:91:65:4c:53:9a:42:2d:e6:2d:c6:5c:
                    79:46:df:66:92:0c:52:06:0e:9f:1b:a6:9b:f8:2f:
                    97:95:d7:da:48:93:6d:8e:b2:52:99:a3:10:0f:b1:
                    eb:6c:1b:9c:13:32:5a:4c:33:a2:61:c2:bb:fe:38:
                    dc:b3:67:c2:4b:57:33:96:3a:9b:6d:d3:7b:3b:5f:
                    4b:d8:fc:89:f0:47:6e:62:0a:1e:7b:05:1d:a4:b1:
                    43:cb:76:83:c0:5e:ba:f6:60:52:dd:05:f9:a3:83:
                    ae:c9:49:7d:69:ab:dc:2f:e4:ca:49:9c:8c:cb:35:
                    e5:88:81:af:71:b7:ab:ee:6b:e7:a1:da:5d:80:20:
                    0c:46:91:cc:30:4c:2d:1d:ee:43:28:f5:60:9e:e9:
                    ce:49:23:8e:5e:ea:e8:fb:5a:5b:d4:7f:be:d4:7c:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:57:C7:DF:5A:8A:E8:47:3F:F1:AC:29:C7:F8:AA:4C:CE:29:C1:73
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:df:df:3a:6c:7e:94:8a:24:4f:12:3c:5e:1f:32:be:02:00:
         14:59:9f:ca:d6:98:64:2b:18:3a:ea:d4:c2:e2:5f:98:58:bb:
         c0:d5:95:92:a3:66:4e:3c:d1:f1:51:c4:e6:bc:a9:8b:32:30:
         1b:2b:0d:8f:30:ae:5f:4e:26:5f:ff:c0:cd:64:ed:1b:ba:91:
         82:06:78:d4:bf:9c:e4:a2:08:1e:ff:4b:f0:cf:d0:f9:19:f5:
         fa:96:7e:a2:8b:60:07:d1:83:51:fc:97:65:f3:fa:8e:13:41:
         e7:48:89:74:ed:69:59:a9:9a:b6:0d:e0:ee:71:89:21:03:04:
         db:6b:68:89:24:f8:b2:db:c6:7f:b3:60:30:59:59:51:3b:78:
         4d:0f:d8:9e:29:2c:d2:69:27:b9:86:99:0b:06:12:cf:d7:95:
         7a:07:49:0c:f4:cd:20:9e:0b:c8:35:dd:ee:50:04:64:68:36:
         b2:38:a9:0e:a7:ea:f0:58:16:30:d3:9c:a9:f5:6c:07:6a:b4:
         33:a3:61:50:c4:0d:0c:e3:34:56:8c:f1:70:6c:0c:1f:7d:a2:
         de:99:68:fd:a1:8b:ce:79:e3:b5:6e:23:10:3e:4a:b9:62:3a:
         c1:da:f6:f6:af:e6:d4:8a:d6:32:86:27:4e:8c:49:9a:7c:d4:
         a9:6a:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:16:11 2024 by rpki-client on console-fra.rpki-client.org