Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File:                     bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier:          eNlCgKEgPxxeQSz2VCOqeteHKXqdpgkflzwLaeqQEm4=
Subject key identifier:   4F:C4:14:1E:66:60:FA:A5:CB:8E:53:E6:0E:39:B8:2F:33:76:DC:39
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer:       /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial:       0193549B9830D58493C403833E127F004A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 16:01:43 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:43 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:43 +0000
Files and hashes:         1: GuYk0aQA0pgEw3N0C-v50Ls9Jpc.roa (hash: SznoNB6LAigw17DW19M9EYVuTCRz/FY3elEsd4ZSwDk=)
                          2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: BgC1q/xhdg/6AX6tWdTrg1UERifzm2LgPulpnLCgerU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:98:30:d5:84:93:c4:03:83:3e:12:7f:00:4a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
        Validity
            Not Before: Nov 22 16:01:43 2024 GMT
            Not After : Nov 23 16:01:43 2024 GMT
        Subject: CN=4fc4141e6660faa5cb8e53e60e39b82f3376dc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:16:fa:6c:17:35:64:3d:d3:72:75:3f:5c:
                    96:29:a6:38:c3:3f:a5:cd:1b:c0:5c:cd:86:99:4a:
                    0d:a7:85:94:71:21:1f:96:16:32:cc:9e:c4:65:74:
                    b1:3b:5e:1d:a8:b0:ce:be:31:1d:4b:b5:06:71:c1:
                    d5:59:4e:ab:ee:93:41:c6:8e:b3:6c:2f:a2:fe:b5:
                    22:c4:1f:2e:03:80:ee:24:2a:10:06:f8:ef:c5:f0:
                    53:c6:7d:52:84:c7:ff:b7:24:3a:47:ab:60:28:2c:
                    fb:eb:f5:ba:3e:77:e6:b5:9d:cc:c2:a3:bf:b5:7d:
                    b0:99:db:48:ce:94:31:f0:b2:3f:0b:aa:2e:0b:cd:
                    a9:43:aa:b6:97:be:b2:fd:05:53:68:71:52:e2:20:
                    d4:d1:0e:4a:87:70:7f:79:e2:c4:fa:9d:1c:22:e2:
                    2c:30:3a:97:96:17:5e:61:8f:a0:0c:36:74:5a:a4:
                    bb:c4:9e:86:42:85:43:21:ca:89:12:80:d0:24:41:
                    a7:df:88:94:7b:9a:a5:c6:46:76:32:e3:22:d5:3f:
                    6f:db:de:43:b2:7d:b3:74:6e:1c:07:cf:75:66:8c:
                    63:ac:46:3a:48:7e:5c:35:3a:e2:9a:29:15:33:36:
                    dc:3e:5b:89:b2:b8:c0:92:d3:81:67:a9:08:0b:da:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:14:1E:66:60:FA:A5:CB:8E:53:E6:0E:39:B8:2F:33:76:DC:39
            X509v3 Authority Key Identifier:
                keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:17:ef:27:c3:8d:d2:fc:83:73:14:e8:c4:6d:8a:97:f9:4f:
         09:76:30:af:57:df:8d:11:01:2d:8e:81:d8:ec:fe:e4:6c:e5:
         6b:3e:ac:23:ff:84:c1:71:32:1d:4a:a0:a8:b0:da:99:88:02:
         7f:66:0c:f6:2b:70:cc:73:eb:ab:e1:d6:cb:66:96:e6:a5:e6:
         19:f7:2b:5d:21:46:d8:e8:8f:ba:f4:45:e2:79:76:3d:73:57:
         fb:64:0e:f8:27:5d:44:63:82:a0:fa:32:dd:d6:ee:ee:19:6e:
         22:6a:fc:61:02:68:ec:c4:3b:b5:99:f1:13:7e:1b:88:bf:d0:
         1c:31:72:71:8f:95:58:27:61:1b:22:3e:37:ca:d2:d4:de:c0:
         06:a0:c6:ae:56:6f:27:67:0b:d4:30:ed:f2:5a:79:af:2e:3e:
         09:d3:d5:e5:0d:ce:55:06:44:58:1c:8c:ea:5f:6a:f4:e3:d1:
         fa:4b:c0:42:d5:2b:76:53:32:90:44:37:1c:3f:57:2e:43:db:
         d5:c2:7b:19:c5:02:1e:03:90:f6:1a:a0:5c:25:25:b5:04:e7:
         7a:1d:44:f0:cb:84:6a:ea:07:41:4d:7b:af:1c:ef:8f:24:e7:
         83:4d:e8:dc:bd:75:a6:d2:23:07:43:8b:3a:72:b8:fd:e4:26:
         d8:5a:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:18:56 2024 by rpki-client on console-ams.rpki-client.org