Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File:                     faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier:          WsKbGkacCg2/0OSo82vOe/dEr4ywYTDoainAm4qSEgY=
Subject key identifier:   60:81:F1:56:29:84:C7:A4:71:22:5F:3C:75:31:3B:24:FB:7C:3B:50
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer:       /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial:       01935764920E6063B7326647D3E5147C6AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number:          10A6
Signing time:             Sat 23 Nov 2024 05:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:28 +0000
Files and hashes:         1: QUpf1J_3RxUUgAkvMa8-rfIa_1g.roa (hash: 0qAmA8DUVvyAp5wyyAqAuRjZd3E+DzeRUtib4gn4qOo=)
                          2: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: U6rNVykYaVXyvyi1/l7Ynmf+xZiGS3bH4i+8v6hDL5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:92:0e:60:63:b7:32:66:47:d3:e5:14:7c:6a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
        Validity
            Not Before: Nov 23 05:00:28 2024 GMT
            Not After : Nov 24 05:00:28 2024 GMT
        Subject: CN=6081f1562984c7a471225f3c75313b24fb7c3b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:12:09:0f:fa:18:1b:c1:1b:b8:c6:f3:91:
                    42:27:14:a5:b1:95:30:7d:65:80:49:d5:a8:64:da:
                    77:6d:d6:5b:0e:19:9e:a8:f5:ef:e6:91:2d:64:03:
                    b3:5d:43:00:b9:bc:18:b3:de:42:d6:ba:0f:b7:18:
                    f3:1c:8b:83:92:90:1d:89:af:78:9c:a2:4b:1b:15:
                    7e:72:76:b7:08:75:04:1a:70:69:c5:af:ba:cb:f0:
                    e9:20:51:77:06:75:81:5a:3d:7c:d7:0a:8f:d4:a6:
                    7d:f9:78:e4:63:19:af:c6:6c:58:69:18:36:21:af:
                    5e:c7:9b:2a:0c:d4:7c:9c:bb:96:10:96:1c:ed:c2:
                    80:41:a9:7a:42:dd:b1:c8:af:a0:56:ac:ad:9c:b3:
                    37:62:7a:5e:67:f9:5a:30:cd:d6:70:d9:21:d5:ec:
                    ad:8c:a4:51:7b:58:d8:33:f5:c0:5e:b1:d6:97:89:
                    42:35:ed:8e:51:49:76:c5:35:b2:7f:8b:3b:db:dd:
                    44:26:b2:f9:b2:f6:e5:53:8c:f9:f1:d8:71:a8:1b:
                    aa:36:f8:87:4a:ce:d3:41:ad:c7:a5:70:c7:f2:10:
                    00:79:b5:5d:cf:1d:ce:66:04:1f:96:8e:5f:92:7b:
                    85:63:20:2d:94:bb:7a:bc:84:5d:1c:d7:92:6b:f9:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:81:F1:56:29:84:C7:A4:71:22:5F:3C:75:31:3B:24:FB:7C:3B:50
            X509v3 Authority Key Identifier:
                keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:91:fa:aa:71:db:91:32:9a:6a:b2:ee:27:c5:7f:35:c7:c3:
         e2:6a:5e:ba:71:df:e5:d7:c0:d8:22:3e:cd:bf:66:6f:f1:5b:
         4b:cf:19:3d:f4:f2:b9:53:3f:2d:4b:37:a4:b1:ed:9d:38:7d:
         f8:f4:ab:ed:a3:3b:70:45:31:1b:3d:91:3c:a0:57:21:ec:7e:
         80:1b:8c:40:ea:09:c2:06:9e:46:06:a1:cc:6a:4a:32:a4:f3:
         bd:4a:74:a5:5e:15:49:49:24:44:d7:69:3c:4e:a3:be:2a:23:
         b1:3a:fd:e9:c0:a6:e3:34:c0:c0:85:42:80:93:38:a8:eb:f1:
         45:bd:a2:fe:7e:cc:48:3a:22:c9:c2:dc:f8:27:ae:28:21:02:
         28:9f:02:68:b2:89:fa:b3:ac:2a:bd:46:65:38:b0:75:4e:3f:
         99:c9:49:2b:71:21:e7:19:9b:c4:b3:67:54:2d:a1:ff:8c:3a:
         85:7f:94:59:c6:dc:96:84:58:e1:6c:74:d7:ce:07:96:0a:99:
         6b:a3:ce:88:12:c8:47:52:f3:a0:9c:83:07:40:ec:a4:0c:a3:
         be:fe:27:82:a3:25:e6:d3:f7:94:ab:42:aa:a8:28:f8:78:f5:
         c2:a7:c0:2b:b2:b2:80:a1:db:38:f5:4d:78:d8:e7:4f:ae:9a:
         f4:ac:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:28 2024 by rpki-client on console-fra.rpki-client.org