Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File:                     v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier:          84H4ksBC+nbyE8zfC1pj3BDDnwMZhDE8sZ/cavTLqNI=
Subject key identifier:   46:2D:69:EE:AC:07:7C:D3:30:ED:B0:36:E6:B4:DC:AD:25:85:F3:18
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer:       /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial:       01901AEA727A8D76E72FE7D3886517BE37C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number:          0102
Signing time:             Sat 15 Jun 2024 08:01:30 +0000
Manifest this update:     Sat 15 Jun 2024 08:01:30 +0000
Manifest next update:     Sun 16 Jun 2024 08:01:30 +0000
Files and hashes:         1: BocOZQwPV4MYslalTRVu5bKaSTc.roa (hash: Enm2ooftgo+lJHbwmMyL1O6aEtwge9eUOZ+RfI/cKaI=)
                          2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: JhZey1xzKH215SOEjyR1ioh2dO+Uffp5XyFvhAkgD+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:ea:72:7a:8d:76:e7:2f:e7:d3:88:65:17:be:37:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
        Validity
            Not Before: Jun 15 08:01:30 2024 GMT
            Not After : Jun 16 08:01:30 2024 GMT
        Subject: CN=462d69eeac077cd330edb036e6b4dcad2585f318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:02:da:ca:aa:4d:07:30:bf:22:3a:12:7e:
                    0b:2f:e1:d2:90:00:af:71:0c:fa:9b:90:5d:01:b4:
                    ba:bc:da:00:f4:65:c4:1e:22:b6:e5:ab:95:a0:d8:
                    6a:38:16:3c:56:49:da:db:48:a3:e9:00:70:66:41:
                    39:ae:4c:28:de:47:d0:fd:6b:f3:2e:44:9a:ad:16:
                    33:72:99:ae:62:41:2c:b5:fe:64:71:d0:bb:1e:c1:
                    bc:36:9b:0c:55:c2:74:c7:9e:ed:f1:21:cf:5e:8e:
                    24:d2:e8:ca:91:31:1c:7c:51:b6:b1:8f:0c:e4:de:
                    0c:fd:a0:74:12:ed:a5:26:5c:3f:01:46:76:77:fd:
                    9f:99:06:75:73:4b:61:21:03:73:0a:06:44:e7:78:
                    da:a5:85:ec:1d:cd:40:87:1a:a4:b6:88:ee:ea:b3:
                    9e:32:e3:52:b5:2c:2e:1d:ad:b9:d8:4f:63:ad:52:
                    a1:cf:a7:2f:de:12:f8:54:c8:4a:80:0a:f1:ea:2d:
                    a0:36:68:b6:56:78:fd:7d:b2:05:18:03:b8:a0:29:
                    63:87:95:0f:37:d9:1a:b8:ff:50:bb:90:a5:cf:67:
                    3b:5e:3b:54:a7:38:b7:1e:d6:0d:9e:1d:c0:49:f5:
                    82:05:8b:2e:af:d3:00:3d:02:47:55:73:df:19:1c:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:69:EE:AC:07:7C:D3:30:ED:B0:36:E6:B4:DC:AD:25:85:F3:18
            X509v3 Authority Key Identifier:
                keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:8f:87:f0:1e:40:81:3a:35:a5:46:0d:1b:14:4b:d9:a8:83:
         88:b0:f4:10:61:ff:56:9c:cd:98:11:46:de:ef:93:cc:f6:73:
         dc:4c:51:31:d0:24:f3:45:16:65:a9:f7:be:7e:70:43:68:3d:
         2a:c9:66:2c:d9:b3:50:bf:09:e0:05:f9:a1:23:42:48:b4:fa:
         65:9b:ff:3b:be:38:01:d2:ee:50:16:7e:f0:7a:06:78:2d:b5:
         21:76:d6:74:e5:d0:42:23:98:54:4f:1a:07:b6:0c:dc:c0:46:
         74:b1:8d:71:c4:09:c9:3a:03:3d:7d:ff:c2:c3:0d:ee:68:eb:
         28:f0:fb:8b:47:65:75:8a:47:ee:3c:3d:de:17:79:41:c1:bc:
         7c:35:55:10:32:e7:12:03:95:6c:5c:93:c8:e9:33:9c:9b:26:
         57:ad:b2:4f:fe:2f:bc:78:df:69:be:19:1c:3b:37:6f:ee:40:
         32:7b:18:e8:ec:62:f1:40:e4:a4:32:1a:6c:e8:63:77:df:8c:
         8a:ca:51:c2:ea:27:92:52:86:85:04:88:c2:ab:e0:40:e6:0b:
         9f:91:2c:78:5b:35:42:37:1c:e1:60:ab:8b:dc:9f:1c:eb:8e:
         44:f5:be:60:fe:89:b6:9a:b1:3b:26:11:12:7b:b6:30:bf:8a:
         a0:0d:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:35:18 2024 by rpki-client on console-fra.rpki-client.org