Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          UVtD01L4Dptmw7RH/kcDHU5bKz5Cn0slW4f27SvTbyI=
Subject key identifier:   20:2E:F8:D1:5A:32:F9:B4:5D:A1:0A:FF:DB:5A:04:CA:4A:B6:0B:F5
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       019350BEBC2EA112225AA96B4F3DC4C3D1B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          0B67
Signing time:             Thu 21 Nov 2024 22:01:37 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:37 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:37 +0000
Files and hashes:         1: Btrmjlwg9KcbA2WRnwd3dHiL7dE.roa (hash: zHz8V/Ju9qYX/9xa1SSNzb2WQHQ7JeI5nzQFSSsTfqg=)
                          2: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: qXTZiqrPxhCYoAqdgFM5LdihMBLuaLXGAuKLYfBRYWk=)
                          3: Mh6iRhOOzPLBEHKvTg2WIigrrAo.roa (hash: FlYsQy3FJRkh7+3H12hBdljAcej+kwZPcIjQjnX8cRE=)
                          4: UHjKwXh3iAco30LbzcIRSMKap2s.roa (hash: XoeSupmMmlkPO7N8pf/JYVf/IZDK/cocNpsMYTZ/qbo=)
                          5: a0MFoK3OU5hJ83l_M4I3t6GftkU.roa (hash: /muYzSQm+bJ/6f4RTQIaumVGQZtwSAedPdZfV4at7L0=)
                          6: e4GF2Ip_aryiQcI0BepBmvM1bYY.roa (hash: MnYittfeKJ7pBklKAs4J9hjPz15VaazM3tgOZte9HkY=)
                          7: zO4Yh6Pnp55xsnZT9iC1tIZBpS8.roa (hash: TpAK7sxzTSgxZoOhiTlrX8i+6tu8JNF1guStMj9zNgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:be:bc:2e:a1:12:22:5a:a9:6b:4f:3d:c4:c3:d1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Nov 21 22:01:37 2024 GMT
            Not After : Nov 22 22:01:37 2024 GMT
        Subject: CN=202ef8d15a32f9b45da10affdb5a04ca4ab60bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:57:8a:93:0c:2d:e3:a9:b9:bd:a3:99:53:
                    5d:71:3f:a0:85:01:93:b2:a7:52:1b:89:db:00:d0:
                    33:90:5d:a8:46:4b:e4:1d:a2:ce:02:7f:12:63:21:
                    36:4b:32:18:e9:c8:bb:80:b6:06:9f:4c:fb:25:54:
                    48:41:9d:ad:96:ec:29:fe:8e:b9:52:79:f3:c5:91:
                    9e:3e:98:2b:70:b3:48:3b:0a:e5:03:eb:45:b6:4a:
                    d6:89:3f:31:b3:18:fa:97:c3:cc:fc:22:7b:3c:e2:
                    32:83:41:65:fe:47:91:9e:a3:1a:93:67:23:02:4f:
                    b3:c9:54:6f:37:7e:7a:5d:b1:78:eb:48:cb:b4:d3:
                    f3:a1:d5:94:8f:64:67:84:6c:50:e6:e9:80:e1:3a:
                    a9:68:39:ec:19:bf:5e:78:0c:ed:b3:51:e6:cb:bc:
                    5b:6d:85:63:51:f2:38:75:16:dd:7e:88:55:d2:4e:
                    42:11:e9:46:61:6c:e1:32:27:84:76:68:3f:b2:90:
                    8d:c0:86:3d:9e:2d:c1:4e:5f:38:bf:b0:c6:f5:94:
                    49:42:ef:63:71:c6:7a:a7:80:df:53:c5:6a:a6:30:
                    d2:a7:3c:6c:5d:21:1d:68:5d:95:c0:ca:ed:50:d3:
                    3f:cc:44:d7:b8:d1:b4:62:d9:79:a5:a7:6b:ab:d2:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2E:F8:D1:5A:32:F9:B4:5D:A1:0A:FF:DB:5A:04:CA:4A:B6:0B:F5
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:04:a3:c3:2d:dd:0f:aa:94:f7:e1:20:3d:60:63:fa:23:
         66:e4:05:73:ad:69:12:a2:0d:a2:ec:3f:7b:18:8d:3b:f2:07:
         4c:32:c2:e7:1b:be:e8:a2:cc:6b:d5:c1:7a:bc:c0:ed:c3:28:
         92:38:2f:f0:6f:05:72:89:a4:b7:90:fe:09:a8:db:7b:55:93:
         96:23:cc:a1:f7:aa:6d:75:92:af:1a:3f:a1:f2:3f:0d:c9:89:
         e4:77:54:b4:6b:f9:e6:2a:9e:76:91:85:48:9e:1a:18:17:0a:
         7e:98:66:a4:7a:3f:29:bb:c1:19:fe:7c:5f:88:bc:bd:a1:59:
         54:1a:51:e1:19:36:5b:43:45:4f:79:fe:41:b6:8f:9b:dc:0e:
         5b:32:47:2c:15:1f:59:b9:cc:8d:bd:5c:73:e5:fa:a2:ce:a9:
         8e:4b:c3:de:c1:78:b5:1c:2e:69:0f:6a:0a:7b:9b:3f:cc:02:
         90:cb:3b:a6:42:a1:6e:cf:fe:b9:5f:45:05:92:66:23:3d:b2:
         f8:4a:21:8a:e5:60:dd:00:64:b2:34:0f:2b:fa:82:80:ab:ec:
         63:ec:d9:c1:17:b0:d6:47:0f:05:44:f2:81:1f:18:6f:91:90:
         05:9e:ea:a4:d9:78:90:53:c8:e1:5d:d5:a9:85:64:4c:7c:fd:
         1c:15:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:26:06 2024 by rpki-client on console-fra.rpki-client.org