Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File:                     u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier:          Fx6TsPPgF0JtREj8bGgeBYSL6kB9w/Ij556dges+5nU=
Subject key identifier:   BD:EC:BD:61:2D:71:DC:21:DD:2C:07:3B:39:BB:75:FC:CF:11:4B:0A
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer:       /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial:       0193572D8666CB9633D88EDEDEF4404BE9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 04:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:21 +0000
Files and hashes:         1: eP1vtEB8LXRK3KsF15g8zdf1Rgo.roa (hash: TxNsVmfMx/HeGiZz+wnRSCKSas2g6K0tVoQDIapLIZ4=)
                          2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: 5BPM3VKgJ13G0rCorULOl+4ozFoYayWp5LJhyr+8pvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:86:66:cb:96:33:d8:8e:de:de:f4:40:4b:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
        Validity
            Not Before: Nov 23 04:00:21 2024 GMT
            Not After : Nov 24 04:00:21 2024 GMT
        Subject: CN=bdecbd612d71dc21dd2c073b39bb75fccf114b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:b6:2c:2d:3c:bc:69:59:a1:7f:f3:dd:8e:
                    53:99:ba:62:54:f9:b6:66:7a:16:3e:d4:6d:dc:46:
                    ef:fa:8d:e0:25:0e:96:36:ed:50:67:f3:3c:79:13:
                    d6:3f:82:96:ad:e3:6d:1b:5f:ff:b0:c3:e9:15:30:
                    d4:01:90:59:45:93:6b:f4:22:9d:d1:01:d0:53:7b:
                    37:45:c0:91:0f:ab:5d:e7:b7:06:13:73:e3:15:2d:
                    0c:ef:32:92:e2:fa:76:15:db:85:c6:a9:a7:18:40:
                    bf:6a:15:d3:2b:4a:11:3f:18:e1:2d:72:bb:1d:13:
                    8c:05:28:c6:3f:fd:44:8f:d2:9f:b6:c9:5d:78:de:
                    0d:cb:d1:7d:b7:17:ed:61:19:3b:c7:bb:b5:f1:b5:
                    2d:df:bb:2e:c0:8e:66:8e:88:ef:17:c9:5c:cd:39:
                    d8:ab:5e:0d:80:55:75:0b:03:f5:29:0e:62:82:ce:
                    e9:fe:fa:6c:86:da:7f:9b:2c:67:ea:ce:26:a1:71:
                    43:ee:be:bb:f7:74:d6:50:2e:d0:cd:94:94:ae:25:
                    fa:cf:09:28:18:9a:61:ec:89:87:1c:36:2a:32:a9:
                    48:8e:2f:ab:42:50:07:df:82:25:c4:ad:0c:ad:c5:
                    20:25:35:df:46:f2:45:35:cb:ed:9f:9e:83:cf:9f:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EC:BD:61:2D:71:DC:21:DD:2C:07:3B:39:BB:75:FC:CF:11:4B:0A
            X509v3 Authority Key Identifier:
                keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:cc:1f:2e:1a:d1:5d:e0:8b:e3:e8:81:2e:1f:57:d3:6e:4c:
         e9:41:40:a2:b7:8b:fb:09:cc:61:ba:b3:cb:2d:8e:7b:52:c5:
         3e:95:37:f3:2b:6e:9f:a9:aa:88:35:5e:29:45:70:74:13:33:
         0c:ff:98:44:82:ce:7a:e3:07:ed:99:8c:5d:32:fd:93:61:76:
         0e:66:f2:00:6b:87:ef:e1:11:8a:8c:e3:d1:4c:b3:3a:fd:c8:
         6d:79:05:8c:00:a3:7d:8f:57:3e:f0:a4:7a:19:ad:92:b9:38:
         24:54:7e:5a:25:ec:9e:37:76:0a:95:ca:46:f8:b9:a1:51:25:
         98:d0:81:7c:7b:f4:f8:a4:9b:24:60:4d:2a:6a:c6:5e:ea:d7:
         ac:8a:c8:66:df:14:ef:63:98:0f:39:74:f3:2d:53:76:84:89:
         62:96:79:c3:0c:b6:10:ef:a2:17:6f:55:4c:d1:11:6e:02:2f:
         c6:a8:f1:15:6e:3f:04:9e:1b:9b:f2:f3:51:40:ee:32:de:8f:
         3b:ed:ce:09:8d:3e:17:7d:bd:c3:8f:7f:79:a2:30:0c:28:39:
         23:04:f1:fd:8d:80:b8:b7:3d:68:e2:11:c7:d0:f5:e8:13:16:
         8a:7d:f4:08:62:96:18:4e:a1:8e:2a:36:e3:5f:3a:e6:8f:e5:
         21:0e:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:18 2024 by rpki-client on console-ams.rpki-client.org