Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File:                     Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier:          5JxtCBNAylv5Ap9p4T/ciPrSednVPlSS9KJ4GdXKRDM=
Subject key identifier:   6B:9E:6B:59:27:81:75:5A:B6:3B:68:35:CB:EA:68:A8:05:A1:37:E9
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer:       /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial:       01936A467AD6C8345E64DC066FBA884CE3A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number:          044E
Signing time:             Tue 26 Nov 2024 21:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:24 +0000
Files and hashes:         1: WDAg4lQjP4uLvaLEoH2QPmw642I.roa (hash: zSKo5ZMdgxPBBrxGMoSPTwmkIu6AUhlLZF0lZh7LOqs=)
                          2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: tfgpQULNj0AsQljmqzX02lNmY81QIJBQnfUYy89Av8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:7a:d6:c8:34:5e:64:dc:06:6f:ba:88:4c:e3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
        Validity
            Not Before: Nov 26 21:00:24 2024 GMT
            Not After : Nov 27 21:00:24 2024 GMT
        Subject: CN=6b9e6b592781755ab63b6835cbea68a805a137e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bb:09:f8:01:0d:65:b3:f7:68:56:dc:03:07:
                    fd:0d:a0:5b:9b:0a:ca:6f:43:66:cc:b9:32:23:18:
                    e9:e8:12:a9:ec:c2:eb:0b:34:ec:14:6c:32:83:7d:
                    7e:c5:94:a4:52:6c:67:1d:52:d1:be:05:ce:fa:7a:
                    72:e6:dc:87:a9:4e:3a:74:05:66:d7:67:f0:2b:b0:
                    55:bf:db:5f:c5:e7:a1:00:7b:f6:43:1c:e1:3d:84:
                    6d:8f:e3:cb:1e:4b:dc:d7:87:e4:4d:fe:ea:8a:d2:
                    75:bb:b8:cd:bb:13:40:6e:fd:ae:a3:21:87:e0:bc:
                    9f:27:0b:17:f1:80:39:f2:cd:43:f3:bf:88:ed:ad:
                    95:c0:0b:aa:c0:fc:31:53:cb:6d:14:75:e7:61:ee:
                    b4:0d:af:b6:a5:3f:e1:9e:fc:ac:db:d1:e3:84:46:
                    66:0c:ef:0e:05:5d:24:b2:20:c9:6d:07:9c:1a:a4:
                    82:90:ae:bd:56:bc:ab:6f:72:8f:93:7c:14:f7:b9:
                    05:d5:eb:d2:03:95:b1:21:5d:6e:1e:db:f9:47:a5:
                    04:c1:24:f4:af:30:c8:bb:e1:d3:58:03:62:18:e0:
                    ec:5b:12:6e:2b:10:e9:27:01:a5:fd:32:14:4b:34:
                    c7:3f:b1:d7:7e:e6:7b:ca:2a:11:e0:0a:5d:e8:0a:
                    25:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:6B:59:27:81:75:5A:B6:3B:68:35:CB:EA:68:A8:05:A1:37:E9
            X509v3 Authority Key Identifier:
                keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:83:27:cb:bc:2f:06:d1:7e:05:c0:e3:82:9d:7e:f2:b6:52:
         36:e0:93:24:bd:e0:19:f5:f8:59:78:ac:4d:62:63:8b:4d:1f:
         83:2c:8a:6d:e6:b4:2c:28:82:76:62:65:22:3d:b3:cf:fe:12:
         a9:07:e2:38:d2:a4:35:45:10:8f:90:d0:fa:4d:8a:92:f0:ab:
         04:91:95:5c:e0:db:80:8b:13:49:a9:a5:7e:a3:fc:dc:47:17:
         f7:3d:bb:a1:78:0d:ee:5f:e1:46:c2:4c:d9:f6:20:d3:36:ca:
         f9:12:ee:27:2b:86:e9:b1:ad:b6:77:fc:48:f5:dd:65:af:65:
         6f:bf:72:54:58:1f:25:bf:5c:d6:58:8d:62:78:82:d9:03:7d:
         ef:50:17:f9:ee:8b:6c:15:82:50:3c:b3:ba:90:17:bb:79:ad:
         9f:91:ab:be:b5:96:2c:d8:97:e5:96:e3:94:d2:9f:5e:06:87:
         d7:0e:c3:28:d2:52:46:55:18:f2:35:e6:54:83:8d:b3:60:b5:
         0a:7f:9d:66:11:5a:5a:23:92:40:5c:35:cd:9b:83:37:99:12:
         64:9f:f0:ba:f2:a7:e7:ef:7c:da:44:d9:ca:ca:15:f1:03:3e:
         cc:4c:85:c0:c0:56:f1:fb:9b:f5:8d:d5:40:13:e7:a5:0b:ce:
         7e:3f:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:28 2024 by rpki-client on console-fra.rpki-client.org