Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File:                     B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier:          QiCGscsN8bUvC5Wdub6JAqPjCaY5WoH/iHcfWlYr9Ac=
Subject key identifier:   8B:5F:25:9F:19:EE:E7:95:C0:09:C9:FA:88:F3:BA:C4:4A:B6:84:48
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer:       /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial:       019357649E37BB3D00E9F301A72993199C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number:          01CC
Signing time:             Sat 23 Nov 2024 05:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:32 +0000
Files and hashes:         1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: zUN8HWuu5zp6PcY0zqh6cOOuuqfxR7Pxc8t4+vZFgnY=)
                          2: _SBDKGIyGAdS_OkB1pf3LwkP4Ho.roa (hash: cgKC1caVsfHvIhcCvZxz2r06+VCMKnlln1BOk9n+qME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:9e:37:bb:3d:00:e9:f3:01:a7:29:93:19:9c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
        Validity
            Not Before: Nov 23 05:00:32 2024 GMT
            Not After : Nov 24 05:00:32 2024 GMT
        Subject: CN=8b5f259f19eee795c009c9fa88f3bac44ab68448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f7:8c:b7:24:99:ed:41:07:c8:ef:ba:d2:af:
                    17:31:03:ca:95:e6:bb:a6:51:3d:fe:93:37:3a:c8:
                    c2:b3:28:4f:37:16:e2:39:85:24:0f:af:d6:b4:8c:
                    13:18:86:3f:ca:d7:d4:11:80:8b:97:28:38:a6:d0:
                    ab:20:11:01:3f:cc:9a:4c:57:53:7e:53:b4:2e:87:
                    f9:88:39:21:39:c2:62:d7:7e:1e:e4:ce:06:88:d7:
                    b4:9b:e4:d7:c5:c6:3a:f1:c4:15:a9:0a:6b:db:84:
                    49:70:c9:93:54:96:f0:3a:72:51:4d:d4:ed:43:7b:
                    62:e2:f1:a4:86:d2:73:a4:d6:75:ef:b2:03:46:60:
                    2a:8c:ee:01:26:e7:fd:19:3e:8d:dd:95:6b:05:5c:
                    e4:3c:02:09:7a:8a:ea:3a:42:82:b1:74:f8:1c:b9:
                    0c:51:66:7b:da:b9:16:ae:1c:ab:0f:1f:47:b7:a2:
                    78:68:55:de:03:63:50:21:c2:60:69:ed:3b:dd:d4:
                    fe:58:4f:cb:cd:e1:ff:56:53:7a:84:42:cf:32:18:
                    eb:3c:84:37:5b:4f:7d:a4:79:72:e7:b6:47:59:3e:
                    18:a6:b6:16:33:46:a3:ac:dc:06:32:d2:2e:e5:f7:
                    fc:37:2f:61:b9:9e:01:4d:01:7c:b5:93:a1:92:f6:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5F:25:9F:19:EE:E7:95:C0:09:C9:FA:88:F3:BA:C4:4A:B6:84:48
            X509v3 Authority Key Identifier:
                keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:92:f6:f3:74:5d:49:19:f2:53:39:95:3b:d9:77:a3:36:
         86:ff:1f:5a:c4:e7:68:f2:e0:a6:cb:09:fc:6a:b6:c2:65:69:
         07:de:d7:37:81:13:55:86:2a:5f:fa:34:04:c2:90:f8:24:11:
         d2:09:f0:59:21:d8:85:cc:12:7a:26:ef:1c:fe:76:5a:97:cf:
         66:b6:91:52:16:eb:05:f2:87:1f:27:57:0a:79:55:24:13:e8:
         75:c9:c6:3a:b2:78:f4:4d:45:13:02:6b:1a:3a:20:dc:e2:fc:
         b3:15:46:1b:f9:0b:40:43:30:0f:db:9c:15:0f:0d:35:09:b6:
         9c:2b:50:f8:a5:5d:b3:8d:05:77:8a:94:b6:7c:7e:60:b2:b1:
         15:44:bb:35:a8:16:bb:57:ec:33:92:02:05:a3:b1:eb:3b:2a:
         b8:1d:e4:89:6b:33:99:0a:a0:a3:f8:06:25:3f:98:d5:16:64:
         e6:a4:15:9f:d9:e7:de:94:a8:67:9a:61:41:39:62:5d:64:8a:
         35:e0:7a:29:46:84:7c:75:4b:ce:3b:fa:c7:58:a0:6f:a6:e7:
         db:c5:33:c1:3b:fb:15:87:00:0e:d8:aa:69:0c:d2:9e:c4:ad:
         a3:60:90:c2:6b:18:7e:64:0c:ce:d7:0e:3a:0c:6d:57:9f:d7:
         d7:99:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:00 2024 by rpki-client on console-ams.rpki-client.org