Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File:                     B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier:          qbWgmLJEltWX+q6Uv8TT/49uhF74s2YPvm8giWvgi6g=
Subject key identifier:   D1:FA:A6:C8:93:3B:B8:6E:7E:B0:D7:60:B5:49:18:C3:68:0C:96:3B
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer:       /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial:       0193549C852718C393B3CBF0781E8CC53E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number:          09F3
Signing time:             Fri 22 Nov 2024 16:02:43 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:43 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:43 +0000
Files and hashes:         1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: JNat3RQF0XUYqLDp3CoiX4DfhyVK8jXRZ3e3Jj+M0pI=)
                          2: Wps5zB5HXSoh-aThSrhBkudXZQM.roa (hash: pXypMrh+Cp4Odo0DNRSbecVbraHkewSm/x9jEul+Juc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:85:27:18:c3:93:b3:cb:f0:78:1e:8c:c5:3e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
        Validity
            Not Before: Nov 22 16:02:43 2024 GMT
            Not After : Nov 23 16:02:43 2024 GMT
        Subject: CN=d1faa6c8933bb86e7eb0d760b54918c3680c963b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:67:72:50:59:81:d8:0e:17:f0:c9:ce:52:
                    ae:09:fa:ff:34:58:57:6f:02:0d:45:fc:d6:03:0d:
                    12:54:01:58:7c:51:29:3a:46:e9:d2:2c:3d:59:a5:
                    88:1b:9e:f1:d4:dc:09:3d:41:86:90:c7:aa:1e:0c:
                    d2:99:57:0d:8b:1f:7f:34:ee:59:16:bc:7d:9b:9c:
                    fb:10:9c:e1:7c:c1:b2:30:0e:8c:ad:2f:71:4e:57:
                    99:39:86:ff:94:99:1b:d3:43:23:97:b3:69:87:ce:
                    b4:cd:ee:db:ab:cc:a1:8e:37:7b:6d:01:f7:57:50:
                    ed:98:99:9a:7b:2a:0f:f7:42:c9:eb:e9:57:20:5b:
                    de:67:d2:73:69:35:cc:12:14:d4:87:7b:62:52:79:
                    58:03:b9:c8:e5:a3:15:2c:12:3d:1e:1a:7c:6e:a4:
                    70:2d:f1:ee:c3:80:31:ee:65:ac:de:37:6e:e0:82:
                    37:76:13:e0:b0:e2:2b:15:1f:a1:6f:64:15:db:6b:
                    a4:73:4d:73:df:3b:9c:24:38:c1:7f:43:ac:78:98:
                    2e:ad:d4:c4:af:ff:2b:cd:58:65:06:06:37:25:b1:
                    c3:6b:6f:68:2c:78:dc:b9:7f:54:4d:80:66:8d:5e:
                    58:8a:45:40:8d:d8:f0:0a:6d:3b:12:82:dc:30:11:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FA:A6:C8:93:3B:B8:6E:7E:B0:D7:60:B5:49:18:C3:68:0C:96:3B
            X509v3 Authority Key Identifier:
                keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d1:fe:1a:cd:a3:47:f0:62:45:c3:be:a8:8c:ae:84:6b:06:
         07:b7:25:bc:ac:d1:6e:fd:14:aa:7e:bc:5c:dd:ea:be:8a:d1:
         3e:0f:29:08:c4:6d:ab:32:94:ae:2c:c3:33:9c:df:c0:78:ff:
         6b:9e:eb:f9:e8:a7:dc:4f:ae:0c:0c:ae:ab:06:29:b5:95:71:
         8d:c9:47:f6:85:da:18:4b:f0:6a:7c:2f:1f:ff:64:6e:db:c9:
         0e:8b:75:1c:d4:d1:b9:d1:44:61:7e:2d:79:0c:7f:15:fa:76:
         ea:9f:43:d5:eb:5e:1e:09:db:28:c2:f3:48:28:ac:1d:5a:7d:
         f4:ed:96:f3:95:4a:ad:58:22:0c:2c:e3:11:1e:c3:2d:b6:42:
         f5:07:d9:a8:d8:6d:45:4d:4e:d3:c5:25:25:4c:72:64:80:1b:
         84:df:9f:cb:8d:19:5f:fe:7c:8e:64:7d:9b:ee:e6:04:7c:49:
         7e:2b:5a:38:d7:51:92:8b:dd:1b:13:c2:5a:f0:d6:50:e8:4c:
         29:6d:c1:6b:34:a6:fb:a3:a9:6c:4c:2a:87:05:1f:3d:50:2e:
         c7:c1:4b:c6:93:ce:f8:e4:4f:ab:7d:cb:17:44:da:11:7e:9a:
         c0:c7:f3:ab:ae:4c:de:72:9f:a3:b4:4f:02:99:b5:3b:20:fe:
         de:f7:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:31 2024 by rpki-client on console-ams.rpki-client.org