Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File:                     bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier:          578zS5xj6ak0D9pTPLG2cEeD0hEjrOJpQswQFdZkM7A=
Subject key identifier:   98:CB:00:3D:D4:96:E6:71:78:85:53:4F:A3:25:97:DF:F4:D2:B9:2B
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer:       /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial:       0193591BEF59E368498A36D256254C864912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number:          1377
Signing time:             Sat 23 Nov 2024 13:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:22 +0000
Files and hashes:         1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: Ok86TgpDv43tlXsggM5LV9AiRqUuYVpOFWkICKeF07k=)
                          2: iGvmj0LKrR3GKFYu3rlxdhs_WT8.roa (hash: r3XYWXbDkX+A9qPixByJiQ3ohgEvyg6CcUqSA1jUi+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1b:ef:59:e3:68:49:8a:36:d2:56:25:4c:86:49:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
        Validity
            Not Before: Nov 23 13:00:22 2024 GMT
            Not After : Nov 24 13:00:22 2024 GMT
        Subject: CN=98cb003dd496e6717885534fa32597dff4d2b92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:f5:94:16:0d:3f:bf:c9:12:a4:d2:a4:43:
                    03:08:f1:1f:aa:8f:2c:b2:95:28:46:a8:94:77:be:
                    52:fb:64:83:65:51:b8:38:dc:78:22:d5:95:43:72:
                    50:04:93:94:58:6a:52:6b:cd:a6:85:b7:18:69:00:
                    a5:cc:f6:f1:0e:07:14:b9:98:53:25:4f:a7:3e:23:
                    f0:91:07:ba:fe:78:0d:b6:f5:39:f3:ca:d7:af:ce:
                    ed:1b:60:07:67:65:84:84:ad:92:94:79:49:89:03:
                    cd:8a:1a:11:05:99:ff:1a:f8:d2:e1:c0:42:f8:99:
                    20:51:9e:ac:7f:a9:e7:ed:ff:1c:51:52:8c:c2:71:
                    e5:71:f2:37:7e:bf:72:34:81:7b:e2:3f:4e:6e:48:
                    52:13:33:11:5e:86:25:d0:66:d1:a1:c2:08:c4:a8:
                    4a:d8:5c:2d:22:24:82:76:3f:b7:1b:03:49:6b:f2:
                    ff:39:37:8e:2a:1e:ec:a7:74:23:2d:ec:d7:db:12:
                    e9:36:50:60:44:29:b3:35:bb:11:05:07:d2:03:d0:
                    27:93:38:18:1d:06:f7:ea:a2:37:07:ba:62:2e:89:
                    2d:59:8d:ab:89:6a:7f:dd:79:05:3b:4e:ce:f7:31:
                    70:30:4e:cd:a7:c6:45:6a:87:6a:e4:20:f6:1c:fc:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CB:00:3D:D4:96:E6:71:78:85:53:4F:A3:25:97:DF:F4:D2:B9:2B
            X509v3 Authority Key Identifier:
                keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:89:88:49:94:10:5d:82:87:50:bc:fb:c5:96:16:78:61:77:
         07:11:c0:4a:2a:de:8f:79:73:80:f2:39:a3:4a:cc:61:cb:0a:
         0e:f3:ec:7f:ad:7a:da:73:22:17:23:cd:81:3e:7d:5b:0c:8e:
         50:bf:e4:e5:b1:ae:61:1c:eb:3c:0f:d8:d7:ec:a5:2b:4a:08:
         8d:2f:ba:34:87:f2:b0:6f:14:a0:41:b4:94:5e:35:02:e4:f7:
         6c:4f:ff:f1:58:1e:8d:93:90:8f:4a:03:6b:b9:1d:68:63:96:
         c1:2c:ed:86:d0:2d:77:ea:5a:9a:d3:ec:e0:ed:72:fe:d4:7f:
         96:af:a3:d6:5a:d9:75:eb:70:ba:19:c8:c7:4d:28:d9:69:ec:
         3d:32:09:0e:98:2d:6c:04:9d:a5:7f:e6:b3:71:17:ba:02:b4:
         9f:3f:0e:b1:a4:2d:20:7b:65:7c:30:f3:65:d8:1e:c3:3f:c2:
         ee:3f:ea:7e:dd:e9:92:cc:fd:30:e0:40:d3:6d:c0:02:0f:5c:
         d5:88:42:aa:30:ee:5b:a0:7e:51:e1:7c:68:ec:d8:7a:f8:27:
         e4:34:1f:09:33:68:0a:a4:f6:36:b2:6a:4d:10:9a:73:75:77:
         e5:cf:38:c0:f8:f3:f8:b0:ba:c1:5c:b6:53:95:7e:51:bf:ed:
         39:54:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:37 2024 by rpki-client on console-fra.rpki-client.org