Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File:                     B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier:          e58SGmgHWG6PKM8wTnKMb42oKD9fGMq9LDIP2+1rg8o=
Subject key identifier:   69:8E:7D:8F:60:2F:F9:97:66:76:71:6D:2F:15:7A:75:81:68:AA:1F
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer:       /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial:       0193647B94D670FC4D4CC456EE9C246AE4EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number:          1378
Signing time:             Mon 25 Nov 2024 18:00:40 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:40 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:40 +0000
Files and hashes:         1: 3SNIpNmJWQv6ffsgR_GBz_x7ems.roa (hash: lDbBc39YuUVAuBKgBux7oBldLWUUleHh5Ut2woZWA+w=)
                          2: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: EdpNqZOCGkcjZ21YoVoZ5ysed42s/pObwOoF/x3ULh0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:94:d6:70:fc:4d:4c:c4:56:ee:9c:24:6a:e4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
        Validity
            Not Before: Nov 25 18:00:40 2024 GMT
            Not After : Nov 26 18:00:40 2024 GMT
        Subject: CN=698e7d8f602ff9976676716d2f157a758168aa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:58:e1:49:45:6f:74:7e:41:63:ed:63:17:
                    86:15:ae:5d:e9:51:30:ab:d7:43:96:8e:1f:d0:53:
                    c2:bc:bf:2c:0b:fa:de:60:14:a1:f7:7f:3e:cd:37:
                    13:d9:cc:02:c6:1b:7e:c5:0c:72:e1:5c:27:09:16:
                    16:62:f0:3c:fa:23:dc:fe:d7:69:d5:9f:46:c4:44:
                    53:c4:25:ba:74:a8:b3:fd:d6:0f:8d:3e:6a:73:b6:
                    d2:78:34:21:d3:04:fb:a8:af:ad:d7:65:d3:3e:24:
                    20:e5:88:e8:29:0d:07:e2:4c:da:87:19:b5:21:04:
                    46:5c:fb:ea:ad:82:28:61:38:7c:7b:d1:c0:8a:2a:
                    a3:ed:78:32:c1:dd:01:b4:e0:07:fe:87:3c:f1:0c:
                    02:da:a3:71:25:02:fd:df:79:5a:1d:3a:fb:c8:d0:
                    d0:14:b1:4c:6c:be:eb:a8:8c:bf:93:e4:a0:ce:be:
                    c1:3d:65:74:1a:c1:bf:3d:b8:07:a0:56:b7:ab:cd:
                    e4:ea:e7:24:a1:d0:68:c0:c1:9a:60:9c:c2:06:95:
                    cc:06:81:48:78:ba:20:18:ef:b1:17:c9:8e:69:f6:
                    b3:ae:29:db:03:84:25:20:43:e2:c3:68:fc:ba:51:
                    1e:b5:0a:58:8e:8d:75:81:a4:84:b1:2f:41:fb:da:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8E:7D:8F:60:2F:F9:97:66:76:71:6D:2F:15:7A:75:81:68:AA:1F
            X509v3 Authority Key Identifier:
                keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:37:9f:60:86:4f:bb:1a:69:ae:2f:80:07:3a:3c:50:50:ff:
         66:29:9c:a4:b8:47:41:73:d4:1a:29:70:93:e1:c2:16:66:53:
         cd:df:4d:3a:96:17:e5:0f:68:bc:e2:69:ef:78:11:6a:ec:02:
         4f:09:29:1d:e4:89:44:14:8c:ad:63:a4:8e:fd:84:6b:6d:55:
         01:a7:32:dc:66:f4:77:1d:1f:e3:18:b6:21:f9:59:9b:1c:e4:
         d5:f1:c7:3e:1f:36:9d:ce:b2:6a:f6:41:69:25:f0:71:6a:d2:
         75:6c:51:94:fa:eb:b6:d6:39:0c:28:70:2a:19:24:11:b9:75:
         23:87:db:d0:b7:25:bc:37:53:8d:49:de:84:37:a5:42:40:e1:
         42:b2:20:e6:2a:9a:57:86:d6:03:28:33:57:86:ac:5b:fd:3e:
         92:62:34:8d:26:da:3f:f9:0d:09:5a:d6:c4:15:d0:02:ad:4d:
         68:84:4e:29:68:63:ee:1d:83:65:5e:cb:73:7d:39:88:cf:a7:
         28:d4:bc:b4:cc:57:bf:fc:68:02:cd:22:a4:9c:3e:4f:b8:5c:
         9f:de:c6:cc:4f:ce:bb:82:32:ff:a2:f1:c8:cd:68:e3:79:ff:
         d5:e9:dd:0b:d2:7c:55:42:19:2f:db:f1:85:b4:03:7d:ff:e9:
         20:73:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:35:37 2024 by rpki-client on console-ams.rpki-client.org