Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
File:                     bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json)
Hash identifier:          PzQk+CUUx9GkDw3C7QMz6Vw8wEazUB2Nxf4eslshXL8=
Subject key identifier:   78:91:DC:DE:DD:D5:D1:32:6D:73:06:A9:5B:37:EE:A6:79:3E:74:FA
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Certificate issuer:       /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial:       019364B2BC246BEC7E85CDFB3E0C8EBB84E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
Manifest number:          0C11
Signing time:             Mon 25 Nov 2024 19:00:55 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:55 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:55 +0000
Files and hashes:         1: 7gf2_veyPBdUK5SiNElSz5407Gg.roa (hash: +LTe6WOdGX3UTqAXYxKJpd6Jl4v21yxydJGVS+cSpVc=)
                          2: AHF4xp8qs5fddO-3swxFJzctflI.roa (hash: VqM3oUqDHgZwClC3RTcbyA78v4+Ofi+oDPTPssqjOvQ=)
                          3: DQ19szoE9qoA_YXemfEVJb9M780.roa (hash: F8Stvp5KT6PPd1cmhK9VwHqdUC28MCZBEggWM7khpJQ=)
                          4: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: Egzqp8Xlj6TeBr3M5XTbCg1/4LbSOFMK9XsUILKh1qI=)
                          5: n6bIDzDvFOD1wwWY66NXA76hacc.roa (hash: D0fCMhjJVhYFGLZgqDi6VomwxU3ODoqvDawZkliMQWI=)
                          6: qKlaqFW9kjJvD-3tCCrHShLIAEo.roa (hash: uEATkJ0iCMDPHGOQjjwpfSFTyfgw8NnRQCjjtcDRpAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:bc:24:6b:ec:7e:85:cd:fb:3e:0c:8e:bb:84:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
        Validity
            Not Before: Nov 25 19:00:55 2024 GMT
            Not After : Nov 26 19:00:55 2024 GMT
        Subject: CN=7891dcdeddd5d1326d7306a95b37eea6793e74fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3f:2c:23:04:e4:43:d4:86:13:f6:7c:4e:9a:
                    fa:24:83:92:a7:96:88:12:2f:d7:34:b2:2d:ce:76:
                    9c:2d:71:10:0e:65:03:d4:ad:91:a3:15:71:42:86:
                    b0:ad:69:5a:0e:52:4c:8e:ff:c0:5b:86:10:29:5e:
                    ca:88:33:62:de:e6:ab:cd:61:67:e5:bd:52:7d:db:
                    c2:c3:00:0a:af:2c:4b:0c:22:9a:d8:54:d0:b2:34:
                    e1:c1:f3:a1:75:3e:9d:98:5e:0d:35:21:f4:cd:7c:
                    92:9c:25:f8:41:f7:ca:cb:bb:f7:58:db:9c:57:5b:
                    48:c0:ca:a2:23:44:ad:1e:c5:7c:68:62:ad:7f:de:
                    7c:2d:8b:87:af:68:d3:56:ee:96:28:e8:0f:5f:07:
                    37:cc:85:43:c5:0d:f3:39:ee:f1:5c:b7:d7:5c:5d:
                    57:f8:8c:e1:66:f0:9a:cd:3e:75:be:de:6a:ab:f3:
                    d4:cc:89:de:5f:52:30:94:b0:3f:de:0d:c1:34:7b:
                    ba:b5:1b:22:b7:8e:fe:ab:db:f9:67:1e:1e:30:39:
                    27:9e:4c:d7:b3:b5:13:88:33:03:6e:ae:89:82:6a:
                    cf:0a:f7:3c:bd:64:19:38:a4:e1:d1:fc:ff:81:0a:
                    87:26:1a:42:88:e7:6b:97:0f:a4:ab:a7:02:45:c0:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:91:DC:DE:DD:D5:D1:32:6D:73:06:A9:5B:37:EE:A6:79:3E:74:FA
            X509v3 Authority Key Identifier:
                keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:62:20:9f:7a:9d:77:01:64:11:c4:b7:6b:30:58:c0:66:e1:
         ab:04:a4:d0:28:65:96:02:9c:c0:f9:8e:3d:0a:f5:dd:f7:b9:
         4f:b7:89:7a:e3:65:dc:c3:45:91:b7:6b:ba:9d:d0:11:76:af:
         2e:ad:50:6d:e6:47:c8:89:d0:9c:df:62:54:d5:c6:e8:69:3f:
         2e:3b:3d:33:ef:c1:ad:9a:a4:f4:64:67:af:89:44:33:7d:0f:
         99:6d:80:9e:ef:5c:5c:d1:56:18:a1:9c:15:0f:6e:dc:e0:fd:
         06:8e:77:f8:a3:06:a8:d5:de:a5:15:6e:bc:43:ac:59:df:f2:
         23:fe:75:4d:7d:72:1e:59:17:64:fb:f8:a1:56:71:a3:bd:0d:
         26:16:b6:f4:a5:0f:d7:42:0c:43:8e:d6:48:10:91:1e:d7:80:
         de:1f:6a:6d:09:89:47:bd:23:49:a9:fb:29:3f:4e:0f:64:0c:
         b0:79:8d:67:61:9c:f5:f5:be:d6:42:0f:71:ef:63:6c:75:5a:
         a4:cd:98:6b:4d:9f:f2:e5:dc:a9:46:af:46:51:c9:79:99:1c:
         40:fa:c2:e1:8b:ea:8f:c8:85:5a:d3:52:89:00:f7:9b:b5:3e:
         69:dd:3a:ad:2e:40:4a:d6:c2:87:e4:1b:c5:fc:aa:49:34:7b:
         6b:93:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:46:46 2024 by rpki-client on console-fra.rpki-client.org