Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
File:                     s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft (raw, json)
Hash identifier:          dWON9Cc6sTz1VK0umfXZHJpuzVGxtuAMsqru0Mfg33c=
Subject key identifier:   BC:98:2A:25:E3:0D:C7:5D:EC:85:8D:CE:1E:01:BA:A3:68:7A:BC:8F
Authority key identifier: B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
Certificate issuer:       /CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Certificate serial:       019355E3E2DBF0A2C66F6F6BC3AAD3BD06D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
Manifest number:          077D
Signing time:             Fri 22 Nov 2024 22:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:18 +0000
Files and hashes:         1: 2qDOfbZICzIhoMUglyR1__Cwbms.roa (hash: bx1v1Pi50TYbZ+MVZAOrYRGwddKYfBE11+6k/7BC85w=)
                          2: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl (hash: 1MVN8JziqLNnD9EH3RpTe5M9+bvGu5dicXL7axprp9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:e2:db:f0:a2:c6:6f:6f:6b:c3:aa:d3:bd:06:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ba47605cf367626263e57f16d0d87916ceddc8
        Validity
            Not Before: Nov 22 22:00:18 2024 GMT
            Not After : Nov 23 22:00:18 2024 GMT
        Subject: CN=bc982a25e30dc75dec858dce1e01baa3687abc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3d:86:4e:90:e8:6e:ff:63:49:90:8a:bb:7e:
                    ac:e3:4a:fb:b7:4f:ea:54:f9:5e:85:3a:a8:d1:17:
                    5e:ae:12:da:f0:a2:bf:26:69:2a:74:3e:74:27:ec:
                    87:40:ce:e7:8c:65:fd:b0:b4:55:98:2e:e9:8c:0b:
                    c1:07:93:a6:52:9b:46:23:67:18:37:12:25:e7:47:
                    61:d7:23:1c:8c:83:0b:9e:98:e3:be:cb:2d:6e:13:
                    96:2c:b2:34:c2:e6:1d:15:eb:10:a9:15:5c:7b:1c:
                    07:b8:70:59:79:9d:38:c5:fa:4c:84:45:d1:da:aa:
                    21:72:ab:0d:59:63:f5:53:6d:d2:32:38:60:ae:2b:
                    9a:31:7d:ae:fe:e6:5d:f2:85:2c:be:72:04:30:b0:
                    76:a8:67:9f:bb:5e:c4:d8:e2:b3:c3:8e:26:4e:7b:
                    6c:7e:e1:29:48:53:48:32:60:55:0e:33:58:f8:64:
                    31:54:6f:be:2b:35:c7:5e:9b:8a:ce:de:51:26:5d:
                    5e:d3:b2:f2:c6:a3:fe:96:37:c2:7a:65:6a:70:6f:
                    32:bc:3c:84:99:1a:25:e1:b1:f5:ad:fc:5b:c5:b2:
                    67:8a:4b:48:1a:a1:df:0e:b2:dc:cc:66:1a:6e:ab:
                    7f:70:f4:70:cd:9f:f8:62:53:12:b5:5c:27:47:00:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:98:2A:25:E3:0D:C7:5D:EC:85:8D:CE:1E:01:BA:A3:68:7A:BC:8F
            X509v3 Authority Key Identifier:
                keyid:B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bf:c4:06:8a:ed:56:fe:5a:c8:5f:2a:c4:a0:c2:a3:ac:23:
         32:7d:ad:e4:43:bf:96:44:03:7f:8d:29:86:3d:bb:67:9a:bd:
         72:75:5e:ba:58:28:99:2f:b9:0f:11:32:2b:05:34:11:79:af:
         d1:e3:d0:ac:bd:b3:ab:6e:b5:db:8f:7a:ab:d8:08:90:bd:b0:
         74:a0:76:89:e6:a2:33:ab:65:a9:a3:ea:3b:25:99:61:2d:28:
         db:03:24:23:5b:39:71:53:a5:e0:3c:96:27:b4:59:9d:73:8c:
         42:db:ae:c1:3c:bc:dd:b9:ef:ea:0e:d9:aa:0a:c6:fa:99:ea:
         92:ad:ff:3c:85:fd:d8:55:75:cd:98:e9:05:44:35:a5:cc:bb:
         75:08:06:dc:57:97:d0:c9:2f:b5:35:22:5c:05:d7:65:26:12:
         b5:ad:d4:34:48:35:46:98:cd:fe:c6:dd:2f:ac:54:98:e6:e6:
         d3:37:60:7a:76:7d:10:67:db:d1:8d:98:c1:64:18:e7:4d:60:
         44:e9:73:fb:0f:6e:94:43:0a:dc:c8:ba:35:13:bc:ad:92:8e:
         ec:64:64:62:42:4f:bb:82:91:f4:57:78:74:72:0e:69:ef:fa:
         14:d1:4f:e3:b5:15:11:db:3d:55:d7:1d:e0:96:de:c2:44:e0:
         52:81:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:28 2024 by rpki-client on console-ams.rpki-client.org