Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
File:                     6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft (raw, json)
Hash identifier:          R7CC/lUz/1wJiOHPKxF2mYt/8ZLjQTj/Abh4UtKKByY=
Subject key identifier:   A2:A2:13:CD:54:68:44:3A:E2:66:48:CD:13:1E:02:18:BD:D8:DA:72
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Certificate issuer:       /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial:       019357D254BF5E307F10A164BF6DB76AE8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
Manifest number:          07C1
Signing time:             Sat 23 Nov 2024 07:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:22 +0000
Files and hashes:         1: 4PP6Ig7JR0BI6zoV04TcFhbOdLM.roa (hash: DuV/7LP0Xlz0SWvrYGIKxmdNIYUeQE3zqqUUi1s4fTc=)
                          2: 6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl (hash: 3GtF6wz6tFUe6Rh+AWJzx8tx0nz+CQyFpoM2m3yu1TU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:54:bf:5e:30:7f:10:a1:64:bf:6d:b7:6a:e8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
        Validity
            Not Before: Nov 23 07:00:22 2024 GMT
            Not After : Nov 24 07:00:22 2024 GMT
        Subject: CN=a2a213cd5468443ae26648cd131e0218bdd8da72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:87:cd:b6:05:84:2d:42:44:a6:1e:10:63:02:
                    4e:21:67:82:7d:56:4e:cd:d4:61:3c:24:25:25:82:
                    f8:ed:4a:b5:b0:51:f9:69:5a:3b:e2:03:d1:f9:6b:
                    73:8c:69:95:bb:8f:e8:33:48:88:35:c4:ad:1e:16:
                    3c:b8:3f:fe:7d:3b:42:bb:d4:f7:a1:fd:2c:4c:37:
                    32:4b:8e:85:64:cb:f4:8d:31:c7:08:df:86:67:a9:
                    75:09:fb:0b:53:bb:bb:80:b7:5c:8f:94:0a:35:02:
                    5d:df:54:3e:b7:8f:f5:5a:7f:a8:c6:af:bc:8a:5d:
                    15:1a:c6:c0:86:3f:6f:79:73:42:48:61:96:90:fe:
                    26:43:3d:4d:31:40:17:10:35:38:31:83:21:57:8f:
                    f5:a0:f1:65:d9:f2:65:b1:6d:e1:74:73:ce:30:cb:
                    56:c5:b5:00:98:24:71:eb:10:dc:70:9c:86:d8:1a:
                    e8:b5:6b:2d:6b:23:d2:90:f0:df:09:a2:21:d5:a4:
                    15:fc:89:fc:ea:df:65:0d:52:11:8d:99:50:f3:44:
                    e0:fc:23:d7:e8:ca:60:c6:81:bb:59:1f:fb:d5:2c:
                    48:4b:3c:6e:f5:a1:2a:d3:3c:25:ed:a3:2c:8a:9d:
                    56:11:2b:39:fb:20:b6:ea:44:1d:68:39:b0:f9:cd:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:13:CD:54:68:44:3A:E2:66:48:CD:13:1E:02:18:BD:D8:DA:72
            X509v3 Authority Key Identifier:
                keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e5:cc:2e:4d:5d:94:85:19:f2:3b:06:ed:a0:72:c7:19:73:
         dd:f9:11:e0:02:f2:b4:98:6f:34:73:72:ca:23:f1:fe:3d:50:
         09:91:dd:6d:38:a8:87:20:41:07:77:f3:00:ed:94:68:9c:f6:
         38:f1:86:05:ce:3e:12:34:1d:38:18:f8:39:08:34:21:02:d8:
         99:db:4b:45:59:43:42:e1:ce:25:bf:75:b2:c0:67:c3:42:b8:
         10:26:a9:44:17:ee:9b:c7:df:6d:0e:65:96:11:63:c0:64:98:
         80:cb:85:b4:03:9e:f7:18:07:0c:cf:2b:1d:0b:08:2c:d5:bb:
         67:26:e6:23:36:03:9c:c6:86:0b:56:d8:e0:5c:b4:91:e5:b9:
         0a:2c:24:d2:4a:36:ea:0a:0d:5b:23:82:50:6c:48:8c:54:40:
         bb:2d:7c:47:26:0e:c7:05:f9:f7:c5:4d:49:13:5f:24:3a:21:
         f6:6b:85:3a:5b:8e:66:04:4d:18:fc:22:67:bd:7f:a8:04:b4:
         1f:03:35:35:00:10:c4:ad:b3:80:6d:aa:99:c7:13:c9:ca:74:
         ce:bf:b1:29:b5:ef:3b:77:71:30:21:8b:a4:5c:31:0f:29:2d:
         cc:41:68:6b:cd:b5:14:39:28:7a:1c:60:b9:0f:7a:c8:c0:1f:
         7a:95:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:46 2024 by rpki-client on console-ams.rpki-client.org