Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File:                     v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier:          z1a1jHETd934XMVo24Q6ixwXzrfRVxXTS4VhAQRVHxM=
Subject key identifier:   C4:14:A7:7C:2A:9E:44:4E:18:C1:AC:14:E5:3F:83:58:73:DA:71:DE
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer:       /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial:       0193549CBC0DF1AC7E542D6478C11E19F794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number:          0B1F
Signing time:             Fri 22 Nov 2024 16:02:57 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:57 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:57 +0000
Files and hashes:         1: Vwb4UbUnCN0nhs5YG-MGoQlYmbE.roa (hash: RHkCpp6gAPNZSyQXYoEWuTSFdUr/G6OJpE0KtWHcquE=)
                          2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: ubtN3I3OUAtVB5T9zkO6FQ2XhDpxMbZMTr8NcsVJGQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:bc:0d:f1:ac:7e:54:2d:64:78:c1:1e:19:f7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
        Validity
            Not Before: Nov 22 16:02:57 2024 GMT
            Not After : Nov 23 16:02:57 2024 GMT
        Subject: CN=c414a77c2a9e444e18c1ac14e53f835873da71de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:29:6f:6a:b2:b4:36:e3:76:e0:0f:82:69:1e:
                    ae:27:f1:0e:15:bb:4c:a6:c9:51:55:a1:8c:51:d7:
                    cb:c2:a6:89:cb:f2:a0:9e:5a:33:0c:c4:54:1a:12:
                    40:1f:63:35:d3:29:2a:e8:12:78:ec:57:6c:ce:fb:
                    ba:ba:35:b9:75:ac:ea:d1:5a:37:31:b1:34:cf:2c:
                    0d:e7:36:35:e6:49:28:fc:ae:62:86:26:2c:b7:37:
                    c8:df:ac:69:ee:0b:2b:2d:88:6b:c1:66:0c:3f:2c:
                    ba:35:c8:3f:8e:eb:74:c2:73:ba:6e:e8:b7:d9:eb:
                    90:40:57:e9:73:e7:23:89:09:b8:f8:6a:51:5c:c0:
                    19:84:d8:20:1e:bd:e3:0b:44:72:10:81:2e:90:90:
                    b9:c3:1e:6e:62:f8:9e:cc:2c:a2:61:54:3b:c6:18:
                    53:bf:e5:7b:50:ac:b7:eb:62:95:07:1d:18:a2:6d:
                    a2:8f:67:b4:69:b4:36:97:cf:d7:aa:08:bc:6b:f4:
                    fa:e0:c0:9e:bf:40:ad:bd:fd:75:35:3a:d8:24:67:
                    8f:0f:21:9b:e6:18:30:5f:b1:5c:b6:9d:31:fe:23:
                    ca:c5:8c:fb:97:29:d6:ee:94:90:74:33:2c:68:89:
                    2d:0a:18:78:da:15:90:3a:6f:60:7a:4f:e6:fe:f0:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:A7:7C:2A:9E:44:4E:18:C1:AC:14:E5:3F:83:58:73:DA:71:DE
            X509v3 Authority Key Identifier:
                keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:35:1e:6a:1f:80:53:87:fb:cb:b5:7d:1d:8a:d1:ce:d4:
         0f:de:de:6b:ba:7e:75:5c:d7:28:8a:d7:ee:5f:42:aa:6d:00:
         9b:40:cf:24:f6:be:61:25:5d:14:fd:92:79:b7:12:97:61:2f:
         7a:f7:40:a6:cb:ed:39:43:4d:7a:03:18:31:08:9d:ea:f6:0a:
         fe:a0:13:b4:ea:57:8f:a2:88:14:ce:7e:51:05:71:8e:f2:b7:
         83:ba:aa:2e:bd:d6:30:ec:d1:f2:d9:8d:e0:eb:05:8c:3c:e9:
         03:0a:78:6d:a5:2d:3e:b6:8e:90:92:f6:94:11:a9:41:aa:ef:
         82:d9:16:17:b2:e5:17:a6:7f:7f:93:19:f4:06:90:23:7d:62:
         9f:67:5c:9b:27:bb:6e:ea:2e:f8:1f:af:b5:47:c1:f7:e8:73:
         f9:c3:8d:d3:b7:ff:f3:af:59:49:8e:89:e6:70:84:0f:9f:f4:
         e6:11:37:5b:79:58:c4:a4:8f:34:23:2b:03:42:69:a2:8d:6f:
         1e:dc:8d:55:ae:7c:22:af:c2:2c:ad:3e:ae:83:ce:d6:60:b0:
         3b:5b:0b:f2:62:d7:83:b5:53:d9:25:93:4b:eb:57:dd:c5:6a:
         01:18:41:31:de:45:ff:3f:71:72:f5:75:0f:43:6e:90:3c:1d:
         dc:5b:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:20 2024 by rpki-client on console-ams.rpki-client.org