Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
File:                     7uQWWQWFpdNR27yh8LPKn2KreF0.mft (raw, json)
Hash identifier:          wTiDPX7Sw+Qd+xhLNtEBWg6aBtpJhCzrT6cazd7zmjQ=
Subject key identifier:   5C:B1:45:B1:7D:1B:D7:8A:C5:6D:FB:91:DD:A3:4D:CE:6A:01:17:64
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Certificate issuer:       /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial:       0193512B71B2C31771C512D7649F085EF367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
Manifest number:          12C7
Signing time:             Fri 22 Nov 2024 00:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:21 +0000
Files and hashes:         1: 5HFQoNbqEyIEAoI0x6eGh3Cgf7w.roa (hash: JsKpRia/bCEI9LdomquX90wtKfIK6XJsu2Rxqgrtd8g=)
                          2: 7uQWWQWFpdNR27yh8LPKn2KreF0.crl (hash: Ib20sJw/kuEM44uup16k1tktxbRIrU8E0s/XXby+OtI=)
                          3: cWCWJ_6NkjRVhkjxvS1Q7ua8mxs.roa (hash: uhhbyqUilx8ko5cCKuTrU1VMN2JJ82KWYLkNNB4pS5E=)
                          4: ce6cWT6p_-ZZz0EHOMK65yFcU68.roa (hash: cGVX0rm99cSkHxKQV4uqpQpFraaGQQIieI/X72hPA+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:71:b2:c3:17:71:c5:12:d7:64:9f:08:5e:f3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
        Validity
            Not Before: Nov 22 00:00:21 2024 GMT
            Not After : Nov 23 00:00:21 2024 GMT
        Subject: CN=5cb145b17d1bd78ac56dfb91dda34dce6a011764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:9b:76:da:a4:c3:bb:b0:03:58:2d:0c:6b:
                    67:08:5c:c7:38:73:18:27:bf:90:f0:ff:b7:a8:79:
                    ec:6e:f0:31:91:b7:e1:c2:e1:69:67:91:ee:0d:cb:
                    6a:fa:be:df:28:88:cc:06:78:97:97:74:43:c1:d0:
                    21:8e:14:c4:21:96:35:0d:67:a1:47:f3:02:ee:1c:
                    42:7b:d8:c5:c8:b1:42:92:18:23:12:7f:66:ff:06:
                    88:97:60:ce:e6:5f:f9:1a:8d:97:19:82:2b:92:07:
                    92:ae:e7:3b:76:20:54:94:82:b0:81:a2:55:2c:a0:
                    43:56:ed:cc:32:95:38:c9:96:fe:9d:3f:a9:99:38:
                    84:58:3b:f7:ff:f4:79:9b:16:83:3f:74:a2:63:d0:
                    ae:0b:63:0c:33:2c:74:71:ea:08:82:aa:9a:8c:f5:
                    49:aa:1b:20:24:f1:3a:9e:01:97:87:d7:52:ef:19:
                    ff:aa:2a:33:81:10:64:b6:fa:26:46:35:cb:35:b5:
                    c8:26:6a:0c:12:62:01:95:62:e3:b1:ba:d8:d7:05:
                    3d:ed:f4:15:fe:c4:cc:3a:20:19:a0:ed:d7:6e:ca:
                    89:77:21:bd:9c:69:4d:21:5c:ea:23:d8:da:09:86:
                    4f:21:4e:be:5f:23:60:c9:c2:10:85:a8:6e:0b:37:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B1:45:B1:7D:1B:D7:8A:C5:6D:FB:91:DD:A3:4D:CE:6A:01:17:64
            X509v3 Authority Key Identifier:
                keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:1f:e4:93:ca:0f:d6:20:5d:aa:e6:78:99:e7:ee:4e:6b:c7:
         0e:31:3a:3d:bf:a1:1f:c0:1f:74:5d:ee:9d:a4:d8:77:3d:41:
         f1:cb:07:65:fc:56:3a:14:4e:35:0e:74:68:71:c4:06:5f:49:
         1c:3f:7d:3b:41:00:df:9b:39:0f:53:45:c6:9e:70:82:cf:f1:
         ca:4b:a4:99:ab:6d:a1:82:80:3c:1a:5f:4a:fd:52:18:63:90:
         71:2b:79:bd:b8:36:b3:08:5a:3a:cd:9c:5b:8a:3b:cc:9f:32:
         80:54:54:f5:d4:bb:3b:f1:29:bf:e8:38:58:2e:14:f9:43:35:
         db:d5:97:66:7b:87:2e:7c:c6:b0:b3:c9:53:59:73:5b:83:0b:
         83:89:25:39:3a:79:1a:77:6d:c4:3e:7f:54:4f:a5:7f:27:62:
         52:0e:72:71:07:91:c9:c6:a2:9e:80:3a:85:0b:7d:ce:ba:e4:
         ce:5e:63:b7:d9:7d:e6:73:7a:05:79:f6:dd:37:88:7f:db:f7:
         b9:28:dc:d5:42:19:a1:8c:bd:70:90:db:51:a0:e8:03:1d:af:
         cd:97:0f:0f:46:94:e1:70:32:09:90:73:6b:8b:ce:10:c3:1e:
         2a:ea:c7:fc:d4:90:c2:82:92:a0:67:d2:7e:4f:7e:3c:e8:54:
         3f:64:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:22 2024 by rpki-client on console-fra.rpki-client.org