Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          4u1dJSQUJK/kBg1SlBu+My6pHOD9DvTmNxc0MkLh/lk=
Subject key identifier:   25:72:27:1E:48:87:13:BC:88:BF:FF:A7:47:33:53:8B:57:3B:E0:0E
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       0193572E06D9277BE2E9D2AB0BD1DF305C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          0BF7
Signing time:             Sat 23 Nov 2024 04:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:54 +0000
Files and hashes:         1: MPeEU5qoofCuRp-y6y3oU3mDt9w.roa (hash: FhNtQm50BmFpda858KdO0LT2Kj0Yyp6OnxyoEHGN4js=)
                          2: mZMSwYxRjGtgDdEB0srYHp0deyo.roa (hash: dzLQE+86iKyfmKpa61IMb3iFatlc4bAn2BhBwEZn5Y8=)
                          3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: hlhCOCRLAghXIl0bCwSwijU0SdE9IUt33WtetrQtAKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:06:d9:27:7b:e2:e9:d2:ab:0b:d1:df:30:5c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Nov 23 04:00:54 2024 GMT
            Not After : Nov 24 04:00:54 2024 GMT
        Subject: CN=2572271e488713bc88bfffa74733538b573be00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:32:a3:e8:19:74:38:93:ec:ef:4c:22:30:
                    a9:e3:1a:a5:ec:f2:94:2b:3c:c4:91:36:86:65:16:
                    93:aa:78:1e:12:77:da:ca:0f:a8:1b:b8:13:f0:e5:
                    8e:72:72:fb:0c:c2:0b:0d:06:d2:25:b0:28:c3:00:
                    52:be:6f:b9:49:47:37:2d:6d:c0:16:ea:ff:24:ca:
                    54:20:cb:26:af:1a:0e:83:06:08:e9:30:ea:72:87:
                    c0:26:37:d2:30:65:23:23:fb:51:cc:63:3d:7a:6c:
                    c1:ab:73:c2:8e:8d:30:58:9b:7c:2c:58:f0:b4:2e:
                    8c:00:08:2e:81:19:f0:fd:2b:ca:a8:cc:98:8b:8d:
                    8f:5a:c1:94:cd:89:ee:af:9e:44:f1:d6:9b:57:0b:
                    86:2a:11:0e:0d:a8:9e:d8:f8:82:cf:5a:4d:66:0e:
                    fe:fd:31:67:da:ee:00:3d:08:d2:fa:30:f0:40:1f:
                    13:a9:3d:17:2c:c0:73:36:45:1a:b4:f3:ba:92:5f:
                    4d:2e:b3:7c:48:8b:8c:b9:f7:b6:32:7c:0b:70:d9:
                    f9:db:f3:f5:5d:e6:73:76:55:ea:df:ca:76:3d:2b:
                    88:6f:62:0c:69:b8:ba:6b:f4:13:70:c9:99:51:3a:
                    f0:92:af:56:5d:25:f5:1b:a3:4e:31:65:43:ad:27:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:72:27:1E:48:87:13:BC:88:BF:FF:A7:47:33:53:8B:57:3B:E0:0E
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:0c:44:b7:f3:71:13:0b:0f:14:7a:d8:41:f4:83:89:d6:
         14:e2:44:81:fb:ff:81:41:6e:d0:29:ad:99:0d:b6:f8:0e:2d:
         d2:bf:bd:a4:2d:45:36:46:d9:10:1a:35:10:87:4b:cc:25:42:
         31:f4:9f:63:78:97:1b:37:56:03:f0:b2:11:5d:39:41:00:9f:
         52:a5:85:46:9b:a1:50:79:bf:d4:4d:2b:a6:9a:5a:e2:9c:72:
         8a:f2:f7:bb:a3:00:a2:dc:c1:6b:13:a5:ad:94:91:4a:38:2b:
         f4:63:bd:08:ca:63:75:2a:cb:1c:fb:4f:e2:16:6d:e3:13:21:
         cc:cb:86:fc:92:d3:05:54:93:d0:43:b1:25:de:a5:fe:f2:1a:
         8b:08:09:85:a7:0f:79:e3:56:f1:2d:b3:8f:77:f7:d7:08:d6:
         43:c7:c1:fe:be:93:dc:f0:37:da:e6:6c:83:ab:ce:64:3a:04:
         44:69:2f:e6:27:82:d7:51:dc:ac:2b:43:54:6e:50:00:43:cf:
         66:f7:02:ee:93:04:62:c3:0e:8d:ec:56:36:76:5b:d2:fe:69:
         da:68:a1:0b:83:47:fb:de:dc:94:29:78:64:31:db:1d:57:39:
         e8:66:ce:44:58:0c:0a:0d:fb:26:c4:01:6e:bd:de:bb:20:01:
         e4:b2:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:16 2024 by rpki-client on console-ams.rpki-client.org