Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          3blTU78GGRjmdp56BY4jkSriG+XQDe3gqHQ6RAFB1MY=
Subject key identifier:   54:65:41:2E:97:DE:B7:F9:4E:9E:54:33:EA:B0:2F:51:8F:B7:EC:4D
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       0193647B8202F52A9E0515391773BC5DB1EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          0DA7
Signing time:             Mon 25 Nov 2024 18:00:35 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:35 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:35 +0000
Files and hashes:         1: 7w3n7jSIfnbkXSnBx6eOaAKpv18.roa (hash: i81ht2xA0FNkaBJV6QEvUldChrlNo4A2ajl6erPnj4s=)
                          2: AqmhTMhYX1IC2o8Hrxnbe1BqDnM.roa (hash: qD+8u9c2T3V004pnO+CwWaYty7xXRGpTPV8uEjLGQwc=)
                          3: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: kr6SC9gxhTLI0PAoQYCboY1Sdy3s4XOgyApGg27/Yxk=)
                          4: bgFnmrtXKGvjwpoFeTD_N-miuj8.roa (hash: Ve/ao7RuqEuExM0Z2Y2EOc3CplaSR2qTIiqLpDGLXoQ=)
                          5: hNybeu7KKTOOo-ofR4wAusRzRT4.roa (hash: boTnZQSW4KkTYdPqtXlvA5YoYyWEtE8IKlaLPUQ5af8=)
                          6: pnLawbumiASHK-pjp_EOmy8oJoU.roa (hash: 0up7yp+0nNxsSYfKZ1XfzJorGao+qb74jKN8CjpJOfY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:82:02:f5:2a:9e:05:15:39:17:73:bc:5d:b1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Nov 25 18:00:35 2024 GMT
            Not After : Nov 26 18:00:35 2024 GMT
        Subject: CN=5465412e97deb7f94e9e5433eab02f518fb7ec4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:25:ee:19:83:31:7a:ed:33:aa:5a:f9:d7:
                    d9:57:69:da:4f:b4:cb:c7:75:59:7d:68:1e:09:d3:
                    80:3b:c8:7f:7d:5e:de:c0:14:89:8b:b4:8e:07:6b:
                    62:f9:5c:b9:8b:70:d3:8f:93:a1:fd:83:4a:a2:88:
                    0e:12:97:1e:ed:a2:0b:4b:85:3e:0f:37:91:3f:eb:
                    01:02:c5:68:b5:ec:da:fb:96:13:4d:0a:fb:dd:e6:
                    15:a7:7d:4f:a8:8b:be:d6:c7:58:b1:97:4b:35:75:
                    38:48:24:e5:56:fc:19:79:b7:c0:20:7b:47:88:77:
                    8b:af:73:84:fb:92:b6:5f:79:3a:4b:1d:87:7f:eb:
                    91:f9:c3:96:33:17:a1:ae:48:b4:89:f2:fd:0d:f3:
                    c0:7a:d1:69:cf:97:0a:20:5a:48:d6:0a:50:55:9a:
                    28:e3:59:1b:3f:61:a7:d6:1f:88:16:29:45:de:78:
                    d2:58:43:82:82:a3:e6:cd:84:af:be:e5:e0:34:79:
                    79:88:2a:db:9d:3f:87:5f:6c:cc:0c:00:f8:cb:85:
                    ad:f1:12:e8:f4:52:84:8e:3a:07:b7:b1:17:ba:d1:
                    11:42:5e:98:52:d4:fb:da:70:d7:38:5f:de:68:bc:
                    24:fc:30:93:98:dc:36:a7:2b:a0:c3:af:f5:b7:d1:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:65:41:2E:97:DE:B7:F9:4E:9E:54:33:EA:B0:2F:51:8F:B7:EC:4D
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7c:c4:ae:1f:55:74:87:6d:c0:0a:9c:d4:50:df:50:22:a8:
         41:73:f3:36:99:f7:99:9e:f0:c8:f2:7b:2f:f7:36:42:58:fa:
         ca:b9:f1:d0:19:c4:82:f9:b7:82:d4:52:53:10:2f:59:58:d7:
         ee:c6:db:fd:0e:45:35:76:98:b9:8b:31:d6:61:c0:73:c7:e1:
         d6:d1:4b:6a:c4:bf:c5:4e:58:bc:e9:68:64:12:60:b1:9e:4d:
         74:db:9f:c4:b3:77:87:9d:77:74:b0:35:f0:60:75:46:e1:19:
         ba:69:da:8b:75:4a:ea:0c:35:79:8d:23:b0:6f:27:c4:2f:c4:
         45:6e:39:9a:52:fb:87:08:04:ec:2e:b1:d5:40:c6:14:48:7e:
         9a:6a:08:4a:0a:70:fc:9e:15:91:93:8f:50:f3:72:3f:68:b2:
         1b:29:95:6e:c7:b7:1c:4c:fc:62:5d:45:fa:54:6f:94:b5:b4:
         08:b3:e0:33:99:bb:4d:4f:f2:52:aa:fc:e3:3d:c1:db:0d:0e:
         52:3e:00:97:2d:08:08:db:23:6b:dc:b5:79:2b:a1:20:dc:c0:
         78:eb:0c:82:dd:78:71:96:be:3c:46:b9:25:b9:f4:0a:49:cb:
         10:de:37:6a:1a:c3:7a:cf:ad:5a:70:8e:f9:23:b1:44:8a:68:
         c3:57:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:02 2024 by rpki-client on console-ams.rpki-client.org