Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File:                     B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier:          KFNf/bcHZNi64dp0o1f5YmFYmlV75HPA8zQeKLgdXOU=
Subject key identifier:   07:F8:51:DE:09:E0:BE:43:3D:90:D9:4F:67:03:16:2D:5B:B6:97:C0
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer:       /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial:       019369DA9A335BE0DED4B85C17D521D2B3C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:02:34 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:34 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:34 +0000
Files and hashes:         1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: 80ISfFBOQE0qNEBO9qW6md/r+Bw5Rbj8wwFIadZ3i2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:9a:33:5b:e0:de:d4:b8:5c:17:d5:21:d2:b3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
        Validity
            Not Before: Nov 26 19:02:34 2024 GMT
            Not After : Nov 27 19:02:34 2024 GMT
        Subject: CN=07f851de09e0be433d90d94f6703162d5bb697c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:78:7c:52:18:ec:b6:af:a2:d1:d3:f4:ce:75:
                    f5:ca:11:2a:42:2b:80:f3:9d:28:c1:1f:0d:37:ad:
                    a6:0a:d3:c6:ba:27:89:0a:47:19:0f:35:d6:26:dc:
                    59:70:bd:79:b1:ae:f0:1c:86:b3:be:09:44:ee:ec:
                    94:fd:6d:03:6b:08:78:c2:3a:fe:8f:98:38:61:26:
                    e7:20:a0:1c:56:77:65:6f:85:ef:0d:9d:ae:27:84:
                    1e:76:19:ff:94:25:df:9c:24:a5:ff:70:65:80:ea:
                    f9:5d:06:7f:d7:b8:24:35:38:b1:b6:72:40:33:0f:
                    f7:51:40:41:42:5c:54:9f:de:ab:d1:50:b7:f3:80:
                    bb:46:b1:3d:f6:da:9a:a6:84:4e:69:5a:d4:21:f2:
                    64:e7:b3:17:19:41:cd:ae:4d:78:ac:96:83:ca:4f:
                    dd:3a:1f:0b:03:21:89:cd:8d:07:dd:f4:f8:47:52:
                    67:68:89:e8:8a:11:ef:35:45:2d:49:46:64:7a:ae:
                    62:99:53:87:bb:84:c6:4c:db:79:6f:43:ac:a1:bd:
                    a3:3e:c8:30:e4:12:ab:f0:4a:1e:4e:c0:7e:75:b1:
                    75:70:a2:e0:cb:46:67:b7:61:20:04:80:89:e2:b9:
                    d4:57:f0:57:9e:0d:b2:28:5d:69:70:53:0f:ba:16:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F8:51:DE:09:E0:BE:43:3D:90:D9:4F:67:03:16:2D:5B:B6:97:C0
            X509v3 Authority Key Identifier:
                keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:18:c3:10:21:aa:3e:84:e2:85:17:22:2e:cf:5f:d9:b0:30:
         78:90:9a:a7:01:e8:2d:18:2f:85:ec:ac:5f:70:2a:4c:7d:31:
         a4:ea:d1:45:d5:4f:3c:b6:98:0f:75:73:a6:1b:57:1c:a9:59:
         ed:de:ba:35:4d:34:98:26:d1:65:0e:c1:fa:98:de:cf:24:ea:
         6a:b2:53:8d:71:30:fa:45:e7:0c:b9:e7:b8:67:7c:17:50:af:
         8f:f3:e9:8b:f0:89:0e:0c:37:b1:61:f8:93:8c:4c:d9:59:ea:
         ac:23:09:74:1f:cb:b9:57:e5:a1:7b:b2:c3:de:a0:5f:9b:c6:
         13:65:e1:c0:90:22:aa:14:89:f2:05:80:cc:53:9a:54:00:6f:
         4a:76:7e:51:b5:88:01:a7:6f:1a:d0:f5:44:cd:fc:ae:a2:3f:
         af:09:58:d9:81:f5:d3:7e:dc:05:69:6d:cf:41:59:0f:59:aa:
         56:7e:96:c9:50:89:17:eb:10:57:d7:5f:79:0b:dd:55:93:cc:
         59:7a:b2:ee:e4:4c:63:51:9e:37:3f:e3:c5:3a:66:82:58:46:
         de:25:9d:a4:c4:d7:be:9f:ab:1e:61:f9:ae:b1:90:46:77:a7:
         9c:40:d7:32:4c:26:6c:8b:75:6b:ab:86:13:2c:27:32:92:ea:
         7a:a6:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:18 2024 by rpki-client on console-ams.rpki-client.org