Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
File:                     bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json)
Hash identifier:          RTQAzqHjxhLicEUENMTO1DF03K+cRNgYR/y6IqQ5KYI=
Subject key identifier:   AF:85:EC:6B:19:E5:83:42:CD:A9:31:72:24:0B:8C:4F:2E:AB:83:CA
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Certificate issuer:       /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial:       018F87ECF955A964E6506BA1D2E1D1F53D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
Manifest number:          0A11
Signing time:             Fri 17 May 2024 19:00:05 +0000
Manifest this update:     Fri 17 May 2024 19:00:05 +0000
Manifest next update:     Sat 18 May 2024 19:00:05 +0000
Files and hashes:         1: 7gf2_veyPBdUK5SiNElSz5407Gg.roa (hash: +LTe6WOdGX3UTqAXYxKJpd6Jl4v21yxydJGVS+cSpVc=)
                          2: AHF4xp8qs5fddO-3swxFJzctflI.roa (hash: VqM3oUqDHgZwClC3RTcbyA78v4+Ofi+oDPTPssqjOvQ=)
                          3: DQ19szoE9qoA_YXemfEVJb9M780.roa (hash: F8Stvp5KT6PPd1cmhK9VwHqdUC28MCZBEggWM7khpJQ=)
                          4: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: zW8IDaE/ZQGcfGoc8A8VJVJROmTVt2uXbfAi0mDgiV4=)
                          5: n6bIDzDvFOD1wwWY66NXA76hacc.roa (hash: D0fCMhjJVhYFGLZgqDi6VomwxU3ODoqvDawZkliMQWI=)
                          6: qKlaqFW9kjJvD-3tCCrHShLIAEo.roa (hash: uEATkJ0iCMDPHGOQjjwpfSFTyfgw8NnRQCjjtcDRpAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:f9:55:a9:64:e6:50:6b:a1:d2:e1:d1:f5:3d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
        Validity
            Not Before: May 17 19:00:05 2024 GMT
            Not After : May 18 19:00:05 2024 GMT
        Subject: CN=af85ec6b19e58342cda93172240b8c4f2eab83ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:e7:05:89:c9:53:42:2f:4f:70:87:4c:5a:
                    f3:64:07:d0:46:f1:79:dd:d8:84:08:db:92:d9:8c:
                    a4:5e:89:f3:9e:4c:0c:aa:9b:8d:47:da:78:33:f3:
                    2d:8d:9b:7b:c3:4b:6c:73:09:9d:c1:cb:ec:43:51:
                    9f:6e:37:1c:75:57:34:13:ee:3c:82:a7:29:d6:4a:
                    26:17:35:bf:82:c9:54:3c:08:fb:4d:2f:20:6d:0e:
                    43:d2:3a:e6:64:b6:45:7c:07:26:10:fb:a0:e6:6b:
                    70:81:b5:03:24:13:f8:e2:b1:ed:92:69:4c:29:3a:
                    aa:fc:7e:05:42:9e:0b:16:4b:02:67:25:1d:20:85:
                    4c:c9:a0:ce:90:bc:69:00:24:d2:6b:da:30:c3:b8:
                    95:86:7e:2e:fa:d4:ba:66:f7:0a:a1:2c:62:68:8a:
                    d4:3b:37:a0:c9:23:58:ce:c4:04:cc:8d:8c:88:32:
                    b2:1c:a8:4e:0c:03:94:e9:91:ce:f4:37:05:81:bc:
                    40:c4:d8:c0:fa:c6:8e:ef:61:b6:58:4b:30:c1:9e:
                    00:1d:a9:74:4c:ac:f1:6c:c6:57:2d:bc:43:c2:72:
                    64:c6:62:ca:51:0b:a8:72:75:c9:57:c1:ee:9d:4f:
                    74:e4:9d:a4:ce:f2:3b:a8:54:dd:50:df:5e:10:45:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:85:EC:6B:19:E5:83:42:CD:A9:31:72:24:0B:8C:4F:2E:AB:83:CA
            X509v3 Authority Key Identifier:
                keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b2:fe:6a:27:b6:f7:98:5c:72:86:31:f6:db:5a:54:3e:7f:
         e9:ef:f1:05:ee:1f:e6:04:06:c8:c8:07:2f:80:01:c4:6b:c7:
         f8:69:44:72:3f:86:2b:f4:4e:4b:54:fc:5d:48:02:45:7b:2d:
         4e:a6:67:28:ca:b4:9f:6c:a7:ef:78:05:32:c9:39:88:ff:0c:
         13:0f:16:f9:fa:06:8a:d5:a7:42:1e:6a:36:ba:1b:73:73:86:
         ef:fb:9c:4c:53:bd:4b:2b:19:56:5b:ed:59:bd:fd:d0:ae:75:
         26:98:d4:45:28:f4:30:b2:18:ba:62:7e:78:a4:a8:5e:a3:e5:
         e9:c5:fa:e2:c8:12:eb:ab:35:5b:d2:f3:8d:5f:08:2e:8f:a1:
         ff:6b:fc:29:72:1f:2a:77:6f:11:d5:1c:00:71:3c:04:27:69:
         d4:e1:fa:aa:22:37:96:24:42:62:fc:79:eb:64:61:3d:2a:f3:
         88:41:e3:ea:7c:39:8f:07:76:d5:4c:4d:9c:61:a3:53:40:cf:
         f6:40:2b:bf:c8:cb:2c:e2:3e:a5:38:46:81:14:ca:f4:7d:03:
         e5:c7:17:a1:9c:60:47:47:c6:ff:13:90:8a:04:f2:99:a7:39:
         c5:e7:2c:0d:33:43:bb:4b:64:a9:c1:85:97:1b:6d:5b:a5:18:
         b7:6c:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:22 2024 by rpki-client on console-fra.rpki-client.org