Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File:                     f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier:          jl8XJ0VhRmHt5Xy1k+ExRzD0sI7GefaUMM+Rop9e9Gk=
Subject key identifier:   F9:DE:3B:CA:C1:AA:22:D5:E2:84:A2:5C:0E:0A:ED:B8:C9:F5:03:AC
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer:       /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial:       019352750770372EE80586CCEDDAF662B749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number:          1381
Signing time:             Fri 22 Nov 2024 06:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:21 +0000
Files and hashes:         1: 0Cow-eRiXVZf2QDYq-SOFb-oX5w.roa (hash: d6IelubYvJkDJ9RoYbJ+aLU19pHmyb2X+HYHfq8uoGA=)
                          2: 3jTE4dpWGnmN8HGS5QVlUAF50fo.roa (hash: sLyb9aLw8DtAkjmeKgQdQtlJlnsk+r/HhR41SscLYHQ=)
                          3: H-y-W9RsfkQ7Mnls-83J61LoDF4.roa (hash: hUlvJJlD51FGej4NW3Ox3Z0r/Ako/ldikZLmQiBPH5M=)
                          4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: WAtIAgwW47gVEwooNckm9XRv+hpgiI2fyAD9V4zJhDQ=)
                          5: pfi_FF0ImSuPDaNlaP43SqUQDME.roa (hash: JTCvHIRbW+dwrg0CDqHL+4aK1M2G4sHyN2quKYHRde0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:07:70:37:2e:e8:05:86:cc:ed:da:f6:62:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
        Validity
            Not Before: Nov 22 06:00:21 2024 GMT
            Not After : Nov 23 06:00:21 2024 GMT
        Subject: CN=f9de3bcac1aa22d5e284a25c0e0aedb8c9f503ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:52:85:8d:55:a7:37:42:5c:de:30:0c:1d:
                    a2:d9:0b:8f:9e:ca:27:10:0f:b7:8a:bb:16:fb:f7:
                    f9:c0:57:4b:2d:00:a1:57:6f:23:9a:1b:e0:3a:26:
                    6a:3e:a9:07:2e:89:24:c5:94:98:05:06:90:29:ef:
                    6c:7c:e0:54:9f:df:19:0f:d5:c7:e6:ab:23:fc:52:
                    8c:68:f8:e2:42:3a:71:84:37:46:b7:aa:ff:8b:3c:
                    30:69:b6:a8:61:cf:03:5a:76:c1:ae:9a:7c:a7:d9:
                    b1:7d:95:2e:32:0e:e7:74:bb:d8:36:f6:72:f4:6e:
                    e6:b1:10:93:89:b0:36:0e:59:c8:a6:d9:c9:50:62:
                    d4:b4:fd:89:06:a2:91:08:54:78:83:f4:d6:4e:7b:
                    b0:bf:21:5e:cf:f2:7d:cf:5a:64:a0:d7:ea:b5:51:
                    13:68:10:18:e0:0f:f2:8a:06:77:de:98:85:61:eb:
                    0d:c3:81:e1:ab:53:db:e6:7b:30:4b:47:11:cc:5a:
                    6c:eb:e5:f0:27:bd:1c:ac:c3:f3:07:cf:02:64:12:
                    d2:96:aa:c7:4e:31:60:35:d7:c1:a1:bc:a6:c8:43:
                    3c:c0:26:ca:8e:6b:86:11:97:ed:bf:67:18:8f:dd:
                    61:98:58:69:a4:9b:37:68:34:b0:db:2e:d4:d1:e4:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:3B:CA:C1:AA:22:D5:E2:84:A2:5C:0E:0A:ED:B8:C9:F5:03:AC
            X509v3 Authority Key Identifier:
                keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:04:18:aa:56:22:48:9e:d9:bf:f6:87:5f:d0:c1:25:b4:
         6a:65:b9:1c:24:5e:e2:0f:75:64:e2:9c:a9:fe:cc:fc:2b:a1:
         d3:07:16:e4:4a:da:b7:a6:31:a9:f8:f7:d6:71:0c:a9:82:47:
         35:f0:58:87:23:90:d4:5a:6d:23:4a:eb:0e:d2:a8:30:72:1e:
         e6:59:51:62:08:46:7d:ff:79:36:bb:ce:84:7b:8c:1f:3a:2c:
         b3:c6:86:1f:45:81:a3:68:cb:f8:26:1e:bf:48:be:ee:f4:cf:
         da:b7:12:26:ae:8a:f7:c0:d0:5e:e7:a2:c5:8f:89:ca:94:46:
         06:52:61:da:b8:b8:d7:47:f8:ba:5a:a4:eb:b8:44:25:63:a5:
         5f:d4:2d:45:9d:86:0a:72:8f:69:9b:b5:f2:fc:54:2f:54:e6:
         c2:55:46:e4:b9:92:bb:f3:00:d3:7c:63:b8:1e:b8:01:3e:eb:
         73:45:f3:9c:72:c1:38:e9:40:5c:d1:95:53:4a:05:23:89:58:
         f6:2a:49:b4:98:16:0a:4c:5a:16:bd:6a:77:12:4e:b2:32:c9:
         07:5f:df:d3:c1:cf:1f:32:22:59:45:34:46:96:00:9f:14:fe:
         d3:5d:ad:f1:56:e0:7c:1c:c0:ea:d1:a1:0a:80:9f:39:c8:51:
         c5:d3:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:56 2024 by rpki-client on console-fra.rpki-client.org