Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File:                     tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier:          dTo0IjQz1Uj1Cr3idsZWuhjeg9CXGjMLCrG0sogq+mM=
Subject key identifier:   AC:18:B5:3B:B8:E7:8B:DA:AE:4C:52:9A:8F:3B:42:2D:07:E3:CF:3E
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer:       /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial:       019350BDB3CC470AAC8556E391ED90C2F169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number:          06C7
Signing time:             Thu 21 Nov 2024 22:00:29 +0000
Manifest this update:     Thu 21 Nov 2024 22:00:29 +0000
Manifest next update:     Fri 22 Nov 2024 22:00:29 +0000
Files and hashes:         1: d2Q5XhdBNaLOJ0JlzWKqnSr9XIY.roa (hash: hSfHhFW6pknw0YwjCOxxz/oUcoq/RaESjWYlyrkfLlo=)
                          2: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: b1sD9W0uide/T/yMxP8GpWfGK6JIZD2mz1B0sZVt+sE=)
                          3: vXtE71rFjE-7S-Wx3V9vBBb8-Gg.roa (hash: gyjTo+BgwSYy6jrQqKUAMUCpDvSClUwOfaUrJGBEqtE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bd:b3:cc:47:0a:ac:85:56:e3:91:ed:90:c2:f1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
        Validity
            Not Before: Nov 21 22:00:29 2024 GMT
            Not After : Nov 22 22:00:29 2024 GMT
        Subject: CN=ac18b53bb8e78bdaae4c529a8f3b422d07e3cf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:9e:96:e5:00:8e:a2:19:0e:38:8e:09:bd:
                    68:69:39:79:d8:a4:a7:e0:5e:80:d4:73:e0:82:55:
                    d1:b6:13:3b:d2:3c:7f:9b:50:85:03:7e:23:51:0b:
                    7b:34:1e:78:dc:7f:72:54:21:d8:89:97:e3:02:44:
                    b3:31:d1:9e:a8:31:ca:6c:44:d0:0c:f9:4f:77:e5:
                    f2:b4:3c:8e:e1:0d:f1:0d:00:7c:fb:c1:c1:ab:a0:
                    fa:68:e6:f3:cb:88:63:f2:3d:09:fc:65:55:8c:86:
                    13:a7:2b:f2:e5:c0:bd:0f:e3:20:78:6e:2d:a3:f1:
                    6e:12:65:2e:9e:34:ed:8b:d3:8c:19:d0:a1:af:56:
                    73:77:ea:ab:65:20:80:c8:de:21:32:7c:26:22:94:
                    6d:ba:a4:13:00:36:62:4f:d0:48:ba:fe:53:89:ed:
                    0e:8c:25:5a:a6:0a:fc:b3:e5:72:e4:df:6b:b6:bb:
                    08:da:f2:2f:8d:e1:09:59:90:6f:59:f6:d0:7d:07:
                    2f:b9:43:ed:39:a0:58:9b:4d:85:8c:b5:52:86:f9:
                    32:81:e6:68:56:bf:e9:c1:88:eb:ec:5d:03:e0:c3:
                    d7:fd:45:ac:8d:55:ac:95:f5:a0:3a:19:19:d3:40:
                    9e:9e:94:3c:44:c6:54:d6:ca:a0:47:b9:94:48:f7:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:18:B5:3B:B8:E7:8B:DA:AE:4C:52:9A:8F:3B:42:2D:07:E3:CF:3E
            X509v3 Authority Key Identifier:
                keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:1d:10:5d:d5:9f:50:66:4d:17:45:c4:44:49:ed:e3:75:30:
         cc:f1:e7:90:65:aa:f8:1b:c1:31:aa:a3:08:83:95:28:7c:64:
         c8:ca:be:5e:85:d0:ea:22:7c:eb:84:f6:7e:af:71:6d:04:f4:
         e0:95:6f:ff:38:af:69:9f:99:12:5e:3c:96:b7:e0:ca:fe:b1:
         3a:04:78:da:b7:5c:cd:6d:95:28:bb:14:88:ec:bc:54:11:06:
         e9:10:8d:1e:0c:f3:0f:c2:76:6f:66:03:f4:ae:41:23:85:3f:
         d2:cf:35:cc:d8:0a:de:3a:3b:fc:e0:99:7d:f5:aa:6d:61:58:
         54:e9:14:6c:47:03:8a:76:4a:7b:89:12:43:65:be:1b:d8:a7:
         f2:8b:96:7b:c7:46:02:c9:d8:97:c7:f7:60:8d:96:d3:e8:c3:
         c8:e1:71:3d:74:56:b2:64:68:d4:31:1d:93:94:45:1b:02:b9:
         e7:3b:aa:6c:d2:dd:29:a1:5d:67:69:51:65:82:69:98:d1:df:
         6b:f8:57:47:62:05:ce:2f:36:3c:23:1b:a2:4b:1b:dc:6d:22:
         61:23:61:98:74:a9:f1:42:fa:87:d5:34:15:00:f0:df:6b:6f:
         39:51:4d:ba:2d:42:35:aa:1e:9b:e7:e4:f4:65:13:09:c9:a6:
         03:2b:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:19 2024 by rpki-client on console-fra.rpki-client.org