Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File:                     z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier:          OD+tdsqkzSVM+QTLnQrb9RT/E1nGNzs60l7HPPrxsuk=
Subject key identifier:   24:11:75:0F:F3:BF:2C:A1:0D:DF:36:98:3C:BC:3D:1A:84:42:D2:97
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer:       /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial:       0193572DFC39459B57CE50FB3DD6A76D28B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number:          0BD6
Signing time:             Sat 23 Nov 2024 04:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:51 +0000
Files and hashes:         1: pxadCBjnp27o8WyIB73oB9AZ9o0.roa (hash: jBptfobYmGGa0dwaqmhwtYdOrdKjV92SX1UEc0zFLIQ=)
                          2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: CdCceO3zYeTDW22rqoMg/c2yzttnuKAyBkLpQ+eTXVo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:fc:39:45:9b:57:ce:50:fb:3d:d6:a7:6d:28:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
        Validity
            Not Before: Nov 23 04:00:51 2024 GMT
            Not After : Nov 24 04:00:51 2024 GMT
        Subject: CN=2411750ff3bf2ca10ddf36983cbc3d1a8442d297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:d1:84:8d:75:34:3f:f7:5f:20:c6:ac:06:
                    e0:00:c3:1b:54:96:f9:82:fb:6a:34:17:25:f3:0e:
                    cd:ed:36:bd:01:b1:b7:5f:49:4f:01:38:80:44:90:
                    a1:d7:78:a0:e6:c1:5e:82:53:60:4f:84:93:5b:10:
                    14:ad:cc:b3:70:18:e6:6f:52:86:21:6a:cc:98:07:
                    3e:0b:49:84:e7:5a:e7:18:b0:97:f0:4b:9e:0b:f8:
                    40:b5:64:b0:c5:f8:da:66:05:72:e3:1b:53:79:5d:
                    3f:82:6a:a8:64:c7:85:f4:de:51:ae:eb:85:d4:b0:
                    dd:93:5f:eb:1a:e9:5f:e9:e6:72:d2:8c:a3:ee:23:
                    7d:a4:0f:3a:06:4c:5d:a7:42:65:c2:23:2e:bc:98:
                    39:f4:36:52:de:54:48:e8:9a:df:d5:11:2c:1b:93:
                    81:b0:55:b4:8e:e0:4d:46:0c:08:57:45:11:8d:8c:
                    29:fe:d8:b7:ed:09:57:59:f4:02:f7:b9:3f:c1:98:
                    fb:6d:3a:5a:1a:f4:3c:ab:bb:ed:84:f8:1e:0b:e6:
                    dc:dc:6d:b7:4e:54:01:9f:15:29:95:46:2f:6b:8c:
                    b5:b8:d7:87:9a:a6:f8:71:60:b0:75:53:73:15:f1:
                    15:33:bb:ac:44:2f:e4:29:17:36:f8:f3:5a:33:15:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:11:75:0F:F3:BF:2C:A1:0D:DF:36:98:3C:BC:3D:1A:84:42:D2:97
            X509v3 Authority Key Identifier:
                keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0f:87:06:be:0f:a8:8c:d3:4c:cd:cd:5c:80:51:74:8e:25:
         3d:36:70:7d:4a:a4:60:cb:13:99:6f:49:ff:09:e5:37:9b:39:
         bd:e2:d7:df:bb:bc:49:52:cf:32:99:60:b7:5b:30:23:6e:7e:
         62:ac:ae:92:e2:b8:65:83:3c:92:7f:b9:23:b8:b0:b9:32:60:
         73:a9:11:cb:0e:8b:69:49:33:e3:32:65:39:ba:e0:97:42:78:
         9e:9f:0b:ce:60:d2:a3:2e:4d:bb:09:22:49:3d:c1:12:78:ef:
         73:e2:c2:2c:8a:6a:39:fa:bf:36:33:52:f0:d7:dc:34:cb:1e:
         c4:55:39:e1:fa:9d:f7:3b:4b:a3:7a:a9:6e:e0:63:f4:60:a5:
         2f:11:2a:1f:5d:f9:39:f5:7a:77:47:66:58:6c:ae:cb:dc:a0:
         38:27:f1:1e:09:2d:2a:4c:f6:0d:12:61:c7:96:9a:2f:e9:c4:
         f6:60:2a:19:fd:5a:3b:66:2d:c8:48:ae:46:54:bf:cb:57:93:
         59:3e:d3:7d:60:0f:66:20:d7:c5:0a:b8:0e:61:be:f7:dc:4f:
         bc:fc:2a:6d:76:b0:19:14:c1:de:3e:5a:6b:b8:b9:07:d4:3d:
         2a:d6:39:42:c6:89:8c:55:db:69:5f:6b:15:fa:37:c2:ee:06:
         a6:5e:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:34 2024 by rpki-client on console-ams.rpki-client.org