Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File:                     RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier:          7HyDv4kjBJxCzig3+feekAy6GXW82mreenpvWhmtKNk=
Subject key identifier:   E6:98:61:3A:43:EF:2C:43:A5:1F:C6:C1:88:B1:FB:73:37:27:54:B0
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer:       /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial:       01935C54DE0BCA7FBCD831D22794B8A0EE88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number:          1375
Signing time:             Sun 24 Nov 2024 04:01:25 +0000
Manifest this update:     Sun 24 Nov 2024 04:01:25 +0000
Manifest next update:     Mon 25 Nov 2024 04:01:25 +0000
Files and hashes:         1: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: Av851xZ+/BuhxK5yKFFEHiW/5ADMmulUte4L+zjoD4s=)
                          2: mB_ASZNO-_S5wCEnqsnZ-LC625I.roa (hash: OUvcQXQR8Rot9mDD8fMt4AnXI2P5HxIQhp4rmIsBGfI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5c:54:de:0b:ca:7f:bc:d8:31:d2:27:94:b8:a0:ee:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
        Validity
            Not Before: Nov 24 04:01:25 2024 GMT
            Not After : Nov 25 04:01:25 2024 GMT
        Subject: CN=e698613a43ef2c43a51fc6c188b1fb73372754b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:61:76:76:89:44:db:df:c5:3b:85:e6:42:
                    b8:69:82:52:38:85:f4:3c:c5:ae:b8:42:29:7b:85:
                    1f:7c:fb:69:52:f9:2a:07:2b:93:6c:03:a1:f6:70:
                    d5:c4:fc:8c:43:ee:44:1d:9c:7e:c7:f4:21:48:02:
                    c7:4d:11:bc:1f:37:ca:e0:0a:08:25:15:b1:b8:87:
                    f8:ff:bb:60:b1:85:9b:56:b2:57:00:b1:63:ed:36:
                    49:dc:89:88:64:b6:35:05:45:c0:61:c6:6a:4c:e0:
                    81:4c:77:f4:15:8e:ff:4c:ce:a8:b2:67:be:c8:3e:
                    85:f4:2b:19:dd:b1:56:9c:ba:1c:e3:85:f4:68:1e:
                    ca:25:a1:72:f0:90:eb:09:51:2b:66:c3:20:a5:f0:
                    43:19:17:44:61:99:e4:fd:48:72:30:28:b3:c2:ab:
                    19:17:ff:ac:39:14:b9:b1:62:eb:b7:95:72:8f:6e:
                    c5:2f:44:4d:f8:00:dc:e5:06:92:82:50:7e:91:61:
                    21:57:30:74:51:a5:80:55:66:66:3a:46:9c:7b:e1:
                    ea:79:97:4a:52:0c:b8:27:fb:5e:18:11:dc:26:11:
                    45:28:b7:90:09:6d:65:aa:99:27:31:b0:ae:62:6e:
                    ba:34:6f:59:f8:a3:ca:31:8c:26:65:51:5c:28:81:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:98:61:3A:43:EF:2C:43:A5:1F:C6:C1:88:B1:FB:73:37:27:54:B0
            X509v3 Authority Key Identifier:
                keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:23:65:02:a2:99:c5:a8:05:02:f4:20:5c:c2:f2:6e:9d:
         ca:10:f0:dd:fa:94:6a:ba:5a:a9:45:17:2d:77:bd:9e:fe:5a:
         4f:50:07:d5:0d:84:08:eb:23:c2:19:c4:5a:2e:25:ce:f7:d6:
         d5:cc:16:c2:73:26:38:fa:64:7a:4e:35:02:8e:de:d1:93:69:
         9d:03:0f:df:15:6c:5a:ee:b2:64:d3:d8:9b:2c:98:cd:33:b2:
         08:0d:fe:6d:2f:8a:d0:73:7c:4a:e8:1c:7a:a3:8c:5a:a9:7f:
         14:e9:b8:bb:40:cc:bf:5b:04:97:46:0a:68:50:2f:73:67:11:
         30:45:ad:4a:96:8d:ef:a4:71:20:66:63:29:9c:59:b0:b0:f8:
         78:02:06:4d:ee:fb:48:81:99:12:6d:95:90:18:47:1c:6a:30:
         6c:a4:75:19:72:f0:6f:8b:bf:d0:bf:ef:aa:35:56:f2:1d:5a:
         da:9c:20:ba:50:8e:bd:01:48:55:cd:09:b6:77:63:71:88:0d:
         d1:77:4f:48:ee:71:e0:4e:08:9d:a2:79:35:53:4f:a3:92:12:
         70:54:4e:21:e7:c6:49:e0:3c:f6:a9:f0:14:ee:3c:23:ff:0b:
         db:8f:aa:0b:5c:6c:25:d0:41:02:1f:01:ce:fe:cb:1c:ea:40:
         81:55:94:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:20:55 2024 by rpki-client on console-ams.rpki-client.org