Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File:                     BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier:          l0RQQoXyzWY+qyb6D4a1/Q3q3p8Xj+RO8GP4PZErwM0=
Subject key identifier:   3F:67:6D:75:83:C0:2C:67:8B:3B:19:40:41:C4:AF:2C:B4:79:B8:4C
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer:       /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial:       0193587857CA9ECE88DBB97A92FA33000546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 10:01:42 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:42 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:42 +0000
Files and hashes:         1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: MNw8X15PwdjVRfomn7iOKJUOruzJIx2NKxral5AJZoI=)
                          2: TkEYkt4ztdTUIJ7a5_qrI5gW3ds.roa (hash: FFu6uRp6vzUWqmfOeSkC77qrOhaQtiESJwNd6t0IKuE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:57:ca:9e:ce:88:db:b9:7a:92:fa:33:00:05:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
        Validity
            Not Before: Nov 23 10:01:42 2024 GMT
            Not After : Nov 24 10:01:42 2024 GMT
        Subject: CN=3f676d7583c02c678b3b194041c4af2cb479b84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:2a:f3:05:4f:71:5e:3d:8a:bc:bb:75:07:
                    63:d5:e4:3f:29:fd:84:31:c9:68:2f:94:7f:6d:57:
                    35:c1:01:2c:9d:bd:dd:ea:9e:dc:75:7f:34:5a:04:
                    f9:cd:2f:e2:ff:29:51:08:6f:28:c0:b5:c5:d5:c4:
                    97:10:96:ca:59:c5:ff:25:ad:d6:58:2c:ed:e8:c4:
                    c9:e2:42:80:c3:79:a6:da:4a:55:d9:79:35:bc:57:
                    09:c5:34:b7:0d:8c:dc:77:e7:15:38:c7:ce:4e:8c:
                    58:3e:92:a6:cd:c3:09:9f:b8:b6:9f:f3:aa:0c:38:
                    54:93:8a:19:b5:35:84:4f:01:89:fd:9f:f6:d3:f1:
                    e6:d1:1d:2d:1e:46:b8:0a:58:97:55:11:2f:e0:aa:
                    ce:e3:7d:46:d1:7d:43:5d:fe:2d:58:fc:23:e7:8c:
                    3e:6d:bd:f7:b7:52:40:28:64:64:45:52:43:9c:0f:
                    1a:c6:c8:68:01:81:f5:b4:b3:73:f8:38:e5:be:0e:
                    a7:d3:9c:10:83:8e:07:31:d1:ea:c3:ab:b1:11:ed:
                    b8:fa:63:19:4e:41:ce:b8:3b:36:8b:f5:d9:90:c9:
                    ab:9d:f1:8e:3c:39:cb:bf:67:3f:42:c0:be:e8:c5:
                    01:3e:40:98:3c:51:4a:de:ec:1a:8b:66:f8:92:7f:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:67:6D:75:83:C0:2C:67:8B:3B:19:40:41:C4:AF:2C:B4:79:B8:4C
            X509v3 Authority Key Identifier:
                keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:08:0f:9b:43:c3:87:16:ff:5d:c5:29:c0:73:f1:23:fd:a5:
         0e:88:52:61:da:5e:eb:45:3c:c8:7e:d7:81:dc:a0:79:60:44:
         16:8c:9d:1b:37:af:b2:f1:a0:60:37:22:e8:df:3c:98:e8:2a:
         cb:46:68:ac:57:a4:ca:ae:26:fe:54:fa:da:73:b1:5d:0a:b8:
         93:34:c8:98:7d:a4:72:40:92:7c:5f:da:17:aa:b4:9c:ab:ca:
         12:50:0d:d4:94:91:41:64:42:1f:4c:07:59:3e:9d:3c:f3:f0:
         d7:de:0d:0e:1b:46:69:c4:47:5b:69:c3:3c:3c:9c:24:df:12:
         08:81:af:91:06:7f:42:e0:dd:96:6a:c4:0e:8a:46:6e:c0:01:
         76:f1:52:86:2c:45:6f:d2:63:61:3d:2d:b3:24:8e:21:3c:be:
         52:62:da:64:d8:4a:d9:82:16:34:8d:7c:82:6e:1c:20:1b:90:
         d9:48:88:e9:73:2e:38:3f:17:f1:53:1a:b1:3d:54:13:33:2b:
         48:47:e6:5a:02:94:2b:c9:08:5a:0a:ab:8a:f0:86:eb:47:9b:
         69:a4:eb:5e:f7:a4:84:b0:a3:c1:34:45:ef:96:bf:f1:1c:1e:
         96:6f:db:38:27:28:66:ae:b2:2a:a6:a6:75:ac:e2:72:b4:83:
         56:40:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:30 2024 by rpki-client on console-fra.rpki-client.org