Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          iI/tSpLamAVT4RTbnjuOMc2q3DEKmnLrG6DMQwJiCNs=
Subject key identifier:   9F:1E:AB:F4:19:89:BD:2F:DA:A2:DA:A0:50:A6:34:5B:7A:55:06:A2
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       0193572DBB618DDE657D0F87267F5A5E7622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          32
Signing time:             Sat 23 Nov 2024 04:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:34 +0000
Files and hashes:         1: A_VCVx-lK-anI7g92auCr_U9niM.roa (hash: 79PPOetAm3EMZZ0JElCSeNOStOoBkCzEkzE79y0z/bs=)
                          2: MLfuOKfM98u-rRIVkCiim-S0pKA.roa (hash: wdbv+sf8Np2reHU2z1q9IM3HFMfnlUkr40ve+ZhzrCM=)
                          3: VZsTozYa0iWud75PXnj5gQFrLLo.roa (hash: vvhxB8nlkjtss9o644l6GCPK56wNHUXEiCl5FbvIjqo=)
                          4: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: bbLcX4m5MNkJLML7kcg+68eNw7mcrgGcnRdBxi6WCzw=)
                          5: q2EgKyfdZlyf-mydXDED7NFVYRE.roa (hash: wZugobMuWNnyMVgBHAFi/ungwwH/WBpcw95tlC0uT8A=)
                          6: qIeP0d3hTru1ZrfqNOfAk51Szko.roa (hash: 7lVYfiKHgdDCYI7s3kRvH7EtgeNY0yCAE0edr2bnBEQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:bb:61:8d:de:65:7d:0f:87:26:7f:5a:5e:76:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: Nov 23 04:00:34 2024 GMT
            Not After : Nov 24 04:00:34 2024 GMT
        Subject: CN=9f1eabf41989bd2fdaa2daa050a6345b7a5506a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:c4:8f:24:65:aa:84:c3:1c:24:c2:2f:f9:
                    24:56:d5:e0:2e:07:d8:06:c7:e6:05:2c:cb:03:e9:
                    a5:26:87:98:1c:42:81:4b:39:d4:f7:26:ca:8e:b9:
                    57:e3:37:31:46:3d:78:dc:55:fb:b9:b4:b2:22:e6:
                    6b:9e:33:2a:2b:eb:86:d9:01:ed:4e:cb:f9:ef:41:
                    09:8c:5f:af:7d:45:41:52:f3:e5:3f:ab:6c:0e:65:
                    54:80:3d:98:29:e8:01:b4:e7:09:a9:1e:29:d6:64:
                    c5:c7:79:b3:39:29:c7:ed:97:60:ef:b9:fe:74:9a:
                    20:32:69:89:42:7f:28:02:35:1e:5f:10:df:af:34:
                    3a:73:ea:8e:1c:da:f1:b1:af:01:d5:18:98:e7:af:
                    a2:b7:28:c3:e9:fd:cd:ff:52:aa:50:e1:25:eb:5a:
                    78:be:9d:7c:ed:e2:0f:b2:f5:d9:c4:f4:da:95:da:
                    f7:bb:59:70:e0:39:f0:49:fc:49:ee:93:e2:bd:17:
                    c9:3e:c7:1d:e7:30:e4:ea:ad:7a:c8:5d:54:f3:d3:
                    6f:42:30:e5:c1:77:af:90:31:60:82:e4:32:40:1e:
                    18:70:2a:e8:dc:17:f6:66:2a:85:26:c6:02:7c:f5:
                    f3:fd:de:9d:61:5d:42:87:6c:e5:61:2e:82:24:36:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:AB:F4:19:89:BD:2F:DA:A2:DA:A0:50:A6:34:5B:7A:55:06:A2
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:dd:ad:a1:30:ee:d9:86:e6:b5:7a:0b:a4:5a:e5:3e:12:
         1b:cb:64:a3:07:6c:69:8b:fc:57:58:8c:13:cb:36:9c:29:b7:
         b3:39:ef:ce:58:c4:9d:b0:08:84:e7:44:96:90:45:c6:dc:d3:
         f5:81:de:d9:c6:8d:2f:85:cd:c4:7a:55:9f:55:6d:72:31:df:
         e3:78:36:58:cc:a2:c4:08:92:90:2c:a4:bc:7c:1f:fc:84:7a:
         f2:ee:41:0a:3c:44:d7:87:11:6c:38:ca:3e:bd:ee:57:00:01:
         5b:94:41:da:06:40:e6:22:65:c4:b3:c2:4d:27:0f:44:af:b1:
         fe:2e:94:46:bb:12:82:ef:ca:65:27:62:3a:ed:fb:a3:aa:2b:
         29:4c:3c:28:3e:ee:71:e2:28:17:47:5e:7b:1a:9e:9c:20:f5:
         1b:73:ed:73:30:eb:e4:6d:ad:8a:bf:d8:bf:2e:ce:05:66:78:
         99:71:7b:57:5d:8e:0e:f4:25:39:06:d1:1d:8f:63:4e:42:7b:
         61:52:90:b1:2e:ae:7d:5d:fb:8c:c6:bf:f3:a8:b1:8a:19:d7:
         89:ed:98:45:ea:39:96:74:92:f1:4b:cd:fe:90:5c:af:74:92:
         65:09:7b:1a:cb:d8:02:d8:8c:ed:c1:87:e6:68:e9:42:fa:94:
         bc:4f:91:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:16 2024 by rpki-client on console-fra.rpki-client.org