Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          pYt94AVJ9ASPTnwlEdvBO3erdTXRUx29TxfDDPufHzg=
Subject key identifier:   93:B8:0F:1F:AE:89:D6:01:55:B9:4C:EC:1F:D9:A1:00:8A:08:CD:BE
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       019363D67464D0FCAF4CC853DD5D1C0B1A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          07F7
Signing time:             Mon 25 Nov 2024 15:00:18 +0000
Manifest this update:     Mon 25 Nov 2024 15:00:18 +0000
Manifest next update:     Tue 26 Nov 2024 15:00:18 +0000
Files and hashes:         1: 71zM8Wk0rk6pBl4HU2iKa9Ew0Gc.roa (hash: FL53nB7QnrgLYVTB08YRUONzu6GdN8zDRV1KXvQQS0k=)
                          2: iRr-8TgVPWkMigQLYX1kpHoXN9U.roa (hash: QRzCbqIVDuEWdEOu5CYWZEYslxHeLKQy6zrAu21WkvM=)
                          3: jXfBMxCXbwAjsUgukQZWYCX3TMw.roa (hash: W2FIrVLit4XEsoXrGkqx/hdfBvdxL3Nx9Wyy6C6q2sk=)
                          4: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: DRlHpyrCv1CGv74tpbEUMjKujq5IBbDKDMUgtd4M9Mw=)
                          5: zmjfgUnvdnrup3edZ1IinUrQDuA.roa (hash: o9xZHpakuBydvJ54ZUWMz6ztbLziWvDd1Anbq1M0W8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:d6:74:64:d0:fc:af:4c:c8:53:dd:5d:1c:0b:1a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Nov 25 15:00:18 2024 GMT
            Not After : Nov 26 15:00:18 2024 GMT
        Subject: CN=93b80f1fae89d60155b94cec1fd9a1008a08cdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:22:8f:4f:ab:3a:d5:3e:08:47:d2:fe:d9:
                    2d:ee:85:cd:0a:0f:66:f0:2e:f6:d5:64:0a:d0:aa:
                    4d:d2:81:c8:a0:29:c8:a6:e6:0f:b0:99:c1:b9:7e:
                    c7:c6:96:36:c6:84:8d:8c:8a:94:76:59:10:5c:07:
                    64:dc:85:b2:2d:fc:bb:8c:15:65:f5:be:91:42:75:
                    e6:57:1b:bf:a0:a8:ee:11:99:a4:1b:37:47:e0:cc:
                    3c:31:34:82:2e:c9:dd:44:3c:38:80:d2:30:e0:d1:
                    06:70:68:67:c0:a6:4d:31:4d:37:e4:c3:4e:f7:99:
                    81:b1:62:7f:b6:43:2e:4f:e7:e4:6e:fb:9a:73:8a:
                    28:9d:ff:2d:6b:27:b8:88:4e:62:a6:79:1e:ee:ca:
                    7d:31:9f:34:48:7b:b2:e3:35:fd:d2:70:1f:7e:7d:
                    90:0f:eb:85:75:63:47:5b:e1:ad:5d:9d:77:1e:0c:
                    db:81:88:ef:55:b4:63:c0:aa:30:e7:29:1b:01:ec:
                    7b:82:68:c7:0a:ac:b6:12:e6:0c:80:10:74:5f:82:
                    c8:ff:d1:d5:d4:96:b5:e4:fd:06:59:54:f8:d4:5d:
                    fd:39:4a:2b:d6:09:4b:04:a6:ba:cb:68:fc:28:0f:
                    d0:21:6d:b0:39:f4:28:cf:44:19:64:b7:b5:f2:09:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B8:0F:1F:AE:89:D6:01:55:B9:4C:EC:1F:D9:A1:00:8A:08:CD:BE
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a2:f6:14:53:09:fe:94:af:8d:b1:31:44:f1:f1:02:c6:7f:
         f8:ab:8a:f1:be:6b:ee:83:31:5b:ae:21:57:70:18:aa:09:30:
         d0:31:44:1d:6f:07:0e:45:d8:a0:38:2f:45:43:52:98:16:0c:
         13:f5:72:eb:47:62:c1:9c:5c:0f:10:2a:2d:55:39:fc:a2:b0:
         c7:37:95:44:da:53:a2:48:af:fb:bb:30:18:d4:5a:e8:15:cc:
         c6:85:19:95:88:66:85:a9:21:cc:19:4c:78:d9:53:3a:50:dd:
         7b:fb:0b:96:49:1f:af:d3:ee:08:26:f9:ff:f3:4a:ef:4b:aa:
         5f:20:59:9e:a8:b4:f8:02:53:e8:dd:80:ce:63:5b:3f:fb:06:
         0c:11:f3:fe:ec:82:9f:1f:e6:f3:bc:28:99:c7:78:67:6f:65:
         9a:fb:16:7a:0c:15:b3:56:51:6a:7e:d5:a0:04:c8:03:7b:f6:
         d1:b6:b6:c1:6d:d6:d9:58:2e:c2:49:c8:13:23:0a:c1:68:a6:
         e3:24:f2:8e:33:2c:91:a4:c7:d9:fd:ec:7b:29:15:a3:e4:1a:
         21:24:7f:1f:2e:7c:f8:55:d6:ff:c6:2c:94:0b:6c:9c:4c:1a:
         a1:83:bd:1e:4e:42:71:27:46:34:bc:ec:42:2f:d3:d6:19:e4:
         3d:0b:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:15:09 2024 by rpki-client on console-ams.rpki-client.org