Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File:                     v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier:          joNNDmDQw69Byy80SkEcJ2VU3qcjIfhoAKvXz3adITk=
Subject key identifier:   F6:EA:4E:1E:CA:80:7C:6E:CB:82:6D:EE:06:E1:DB:DB:02:36:C2:F0
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer:       /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial:       01936CD9C650FFD9D8DC459B743DF884D0E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number:          07F8
Signing time:             Wed 27 Nov 2024 09:00:31 +0000
Manifest this update:     Wed 27 Nov 2024 09:00:31 +0000
Manifest next update:     Thu 28 Nov 2024 09:00:31 +0000
Files and hashes:         1: CQLP4uP_J3o1shttMtmssmr6HxE.roa (hash: Rd+w0VPoCg7noGMpJCiZ4lHdAlX9tbB+VZEWPNp4PnA=)
                          2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: Hw91UJOIUvVfshCs18TRHFeB12dcSjfwD/dN4GzByRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 08:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:d9:c6:50:ff:d9:d8:dc:45:9b:74:3d:f8:84:d0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
        Validity
            Not Before: Nov 27 09:00:31 2024 GMT
            Not After : Nov 28 09:00:31 2024 GMT
        Subject: CN=f6ea4e1eca807c6ecb826dee06e1dbdb0236c2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a8:9e:e2:69:ad:94:db:b0:36:ea:56:37:ef:
                    39:62:65:50:16:37:b9:08:6b:01:65:d0:0e:6b:1c:
                    e5:7a:ac:d7:ae:db:c5:2f:fd:d4:92:1a:bc:03:58:
                    ed:33:07:cc:cc:e2:12:6c:23:26:de:39:68:5d:fe:
                    4e:85:8d:22:c2:24:e3:00:55:57:18:33:9b:41:dc:
                    5b:1d:85:b3:90:6f:56:02:2f:28:bb:89:62:11:74:
                    6b:8c:d8:84:f7:f0:93:b5:44:1d:6c:6a:c0:5a:db:
                    d5:ac:40:83:b1:2b:0b:aa:e8:8e:6c:c9:86:6a:1d:
                    47:1f:1d:96:9c:22:ef:e5:22:27:9d:91:ab:44:f2:
                    84:55:a3:29:e5:d7:ae:a9:84:01:14:2c:d1:ff:a8:
                    a5:de:39:5c:ca:8b:8c:63:43:7a:95:5b:3c:67:0a:
                    9b:f2:ba:30:2d:2a:b5:13:91:84:12:8a:7f:3a:bb:
                    6b:19:92:6d:9c:0a:32:f8:a7:1e:c6:b8:78:59:9d:
                    ac:ca:0c:9e:b4:f3:c5:19:d3:d4:80:15:b2:ef:22:
                    ec:25:e1:bb:08:f6:d9:a9:40:07:cf:59:d0:7b:20:
                    23:d1:cb:3f:08:43:9a:9f:c5:77:08:13:03:44:c1:
                    ed:89:df:1a:4c:ab:cf:47:f1:d1:cd:09:86:fe:43:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:4E:1E:CA:80:7C:6E:CB:82:6D:EE:06:E1:DB:DB:02:36:C2:F0
            X509v3 Authority Key Identifier:
                keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a5:6d:f9:f3:f2:0f:63:77:0b:e6:51:bd:65:d8:49:55:a9:
         a7:0e:4b:0d:e7:f1:41:0d:ce:35:26:6b:1f:f6:cb:cd:0a:6a:
         aa:b6:0f:a3:75:57:32:c8:66:30:18:21:36:e2:e3:f1:bf:94:
         43:af:66:7a:a8:c8:f0:cb:dd:ec:32:74:9e:a9:75:ba:96:92:
         73:0e:29:f0:85:ae:5f:7f:c7:8e:1c:be:e4:7b:6d:05:f9:f9:
         44:3a:e5:13:ad:10:d6:a5:e1:02:0a:2d:17:04:86:92:30:d9:
         44:c6:44:24:27:b1:fb:f6:07:b2:0f:d9:d4:f9:a2:c0:15:ce:
         7f:67:88:91:3f:b3:df:a0:52:2b:70:9c:f3:76:36:d9:0d:8d:
         88:90:25:dc:6d:e6:c3:19:72:e6:84:fb:b5:c1:0e:fa:8b:af:
         62:af:3c:55:15:d4:a1:63:1f:25:d2:fb:97:fe:65:df:c6:1e:
         2c:0e:98:ad:a0:28:91:2d:99:37:2f:1b:bf:8d:2e:c1:4e:78:
         78:68:b2:6b:b4:89:2e:d4:4b:e6:33:20:41:55:76:0b:86:d7:
         6a:91:a2:84:15:4b:75:75:2f:80:66:2c:49:36:60:c1:ac:18:
         44:66:2b:33:fd:2f:49:70:a8:bd:96:7b:08:38:10:b0:3a:39:
         b9:7e:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:06:55 2024 by rpki-client on console-ams.rpki-client.org