Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File:                     fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier:          Cp4FFZuzreIutnaTK4uCiyVgypyX0u6E/4QKQDXlvd0=
Subject key identifier:   8F:A2:83:9D:EF:3E:EF:2C:AE:EC:3A:6B:6D:DE:19:64:30:68:BB:B9
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer:       /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial:       0193568A24AFEB291CB7C7AD7CFECF889FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number:          0438
Signing time:             Sat 23 Nov 2024 01:01:54 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:54 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:54 +0000
Files and hashes:         1: BV19u6PVqvy9UlacF5tJKHOvINA.roa (hash: 1eHdiHK7shpDxj8IzEV0xU2NAsx+SZSwhgV8bC6c7QE=)
                          2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: IEz6T1tn8bMZFgpnmbfwh22NtfsVJmkYEHLiTLFAKjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:24:af:eb:29:1c:b7:c7:ad:7c:fe:cf:88:9f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
        Validity
            Not Before: Nov 23 01:01:54 2024 GMT
            Not After : Nov 24 01:01:54 2024 GMT
        Subject: CN=8fa2839def3eef2caeec3a6b6dde19643068bbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:74:ad:b1:5a:04:d0:b4:76:d8:02:fc:a3:
                    3e:5b:02:b4:3a:3a:58:79:ee:91:2c:81:91:c7:9f:
                    4c:15:72:8e:cd:37:09:70:b7:2d:d8:27:c3:6e:2e:
                    20:52:79:e5:05:f2:a5:b8:6b:5d:ea:f0:40:f9:a3:
                    b4:66:21:a1:e8:a7:22:88:7c:e2:ce:8c:26:5d:87:
                    33:bb:c8:4f:b1:82:b2:f9:b6:da:90:e9:c7:7a:de:
                    f7:a0:4a:88:0c:93:ba:6f:95:fe:f8:b0:13:65:08:
                    1f:ed:2a:ab:67:40:ca:17:9f:02:17:01:45:ae:3e:
                    aa:b1:4a:d9:d8:34:9a:5a:b1:fa:00:06:aa:56:03:
                    63:72:fd:4a:55:3a:f2:e7:c5:91:f6:61:15:23:dd:
                    94:c8:b1:5a:b5:a5:7e:6d:39:05:f1:ee:13:a1:94:
                    73:4e:8d:90:ab:46:38:66:18:e5:f8:ef:b4:45:4a:
                    3d:6c:63:e5:2e:53:07:a0:fa:81:eb:92:41:62:a7:
                    6e:5d:ba:10:7d:9d:3b:61:de:e5:4f:8e:61:76:69:
                    7c:e1:fe:85:ac:c0:3e:3f:89:42:e9:2c:ab:47:96:
                    88:67:a1:ed:c1:65:76:40:fd:ec:18:10:43:57:ec:
                    e0:8b:5e:eb:83:84:84:ae:86:0a:aa:3f:9d:9f:0a:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A2:83:9D:EF:3E:EF:2C:AE:EC:3A:6B:6D:DE:19:64:30:68:BB:B9
            X509v3 Authority Key Identifier:
                keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:b0:ec:94:be:17:12:5c:14:07:56:da:6b:6d:84:f0:86:
         a0:1c:b1:bb:1f:6b:09:73:5a:68:87:89:74:dd:34:eb:80:9b:
         4d:ef:40:ee:1e:cf:9a:5e:52:02:2c:ae:c4:1f:ad:e9:d4:42:
         bc:d0:b9:56:07:21:9e:93:d9:e8:44:0c:72:94:d1:6c:03:03:
         20:a5:12:9d:a1:d9:49:12:75:51:ca:65:6c:6f:db:99:ab:0f:
         f5:42:5c:5f:53:03:4e:ee:a9:20:5c:47:78:10:8a:57:b1:b4:
         ab:eb:ba:39:f5:c1:7c:2a:99:13:78:1e:9b:76:85:fe:34:29:
         a1:8b:10:70:fd:c6:32:f3:1d:d8:19:6f:06:9a:77:ad:cb:f5:
         97:c7:64:e0:d3:4b:2d:f1:1a:73:9c:a4:3a:c6:bf:70:8e:89:
         9b:62:df:4a:88:af:84:92:ce:fa:7c:75:40:c5:a9:e1:4c:04:
         6d:c1:42:be:5d:37:1e:4e:99:eb:e3:5a:66:27:31:d4:a7:af:
         88:b3:1f:b1:89:03:76:99:c4:1f:4e:40:17:72:09:a2:71:d0:
         f8:bf:f8:c3:8b:9a:0c:3c:69:6e:ee:6b:fd:b3:e8:53:ba:2b:
         b2:fa:6a:ea:02:52:fc:a0:77:9c:81:c7:cd:e1:0f:b6:36:e0:
         8d:d5:5f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:47 2024 by rpki-client on console-ams.rpki-client.org