Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          POi8hkubzLgWiuprlrgcFZ84Mt6qsoYI/3dlkJYql9I=
Subject key identifier:   65:98:53:5E:41:D4:15:EE:BA:A1:1C:53:6E:32:59:65:47:2B:3C:93
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       0193549B67ACF761AB073D28F9F83CA642A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          133D
Signing time:             Fri 22 Nov 2024 16:01:30 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:30 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:30 +0000
Files and hashes:         1: IAvzKw60vtm0vuuFrXAYGfGynoU.roa (hash: Yf0VPpvEXUex/brZhZa0DSQ43+/El1hPq0tFajWjdnY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: yeYRtwssthMMcBMun87URV106IAq3yNE/dxUKzsuzX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:67:ac:f7:61:ab:07:3d:28:f9:f8:3c:a6:42:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Nov 22 16:01:30 2024 GMT
            Not After : Nov 23 16:01:30 2024 GMT
        Subject: CN=6598535e41d415eebaa11c536e325965472b3c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:83:85:bb:11:44:52:eb:90:58:31:4e:a4:
                    de:6a:fb:8d:ae:f8:da:18:6c:67:e9:0e:a5:f9:0c:
                    f1:d4:f6:fa:73:88:e6:5a:3e:d0:db:fc:b9:70:00:
                    8d:6e:7c:9e:e8:95:95:15:93:94:c5:ec:b4:68:3b:
                    99:f1:e4:ee:40:1d:a0:66:a2:fc:46:41:06:25:c6:
                    dc:d7:d2:54:a2:19:39:74:ee:95:d4:a8:3f:38:5e:
                    c0:70:50:92:2d:1c:60:35:1b:0f:da:9f:dc:20:4e:
                    cb:70:d6:eb:0a:39:dc:68:e9:38:b9:fc:5c:b0:d2:
                    41:d6:ce:ad:e8:c7:63:f0:65:81:2f:4d:07:c2:9c:
                    62:68:46:7c:cf:12:47:e4:e7:16:b5:e9:40:2b:aa:
                    62:d5:20:e9:8a:00:12:d9:5b:1c:58:5a:69:d3:92:
                    01:cc:99:46:45:4f:18:86:dd:9a:c3:7c:b6:58:cc:
                    c9:33:f8:43:58:ca:f0:24:c3:b9:d9:52:af:cf:b6:
                    da:8d:b1:b0:33:77:f4:89:47:05:5d:db:74:e1:9d:
                    e5:e3:75:8e:98:56:38:ef:e1:f8:66:0e:fb:41:f6:
                    77:ec:c9:9f:fc:ac:e5:65:16:14:ad:fe:76:86:cd:
                    62:2f:46:5e:e1:e1:81:18:50:9b:7c:e8:01:c1:5c:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:98:53:5E:41:D4:15:EE:BA:A1:1C:53:6E:32:59:65:47:2B:3C:93
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:d6:12:30:42:6c:03:9c:c0:16:88:a5:13:5a:dd:32:5e:
         62:e8:6e:e5:7a:fe:6d:fa:9b:1e:af:b6:b5:b1:34:7a:c1:3a:
         2d:72:b9:71:e1:c9:25:70:58:17:2a:e2:c3:0f:c1:80:c1:ea:
         92:ee:5e:73:4a:d2:8f:e8:e8:96:4b:b2:0f:b0:5d:b4:e5:78:
         c3:fc:f1:15:96:c4:07:6d:d4:fc:04:be:02:9c:6d:db:2a:0b:
         40:d2:43:f7:78:82:94:d6:42:72:5d:98:76:62:a2:ef:34:44:
         f1:dd:98:9c:2c:80:dc:aa:04:e0:51:77:80:41:34:91:9e:eb:
         3e:71:20:3f:d2:e0:e3:6a:cf:f8:b5:e4:f2:83:5d:18:6c:8f:
         76:63:73:91:e1:72:4d:92:e9:58:b2:a8:08:ea:ca:44:78:d7:
         10:d0:0a:c5:f1:31:29:48:45:a2:ce:17:e9:89:d7:4b:cf:42:
         9e:c3:d8:51:f0:3a:81:97:7e:b5:30:4f:e8:22:2d:03:17:89:
         f4:03:ad:dd:f3:ad:24:c2:66:ea:67:06:60:cf:01:f3:51:4d:
         31:30:e7:87:bd:37:9c:90:c1:d3:3d:9a:23:1f:37:a9:33:ab:
         1a:39:ba:20:09:b7:fc:97:f6:34:eb:26:8e:d1:cf:30:24:e6:
         41:5c:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:55 2024 by rpki-client on console-fra.rpki-client.org