Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File:                     bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier:          EhTMKBvUGC/PzxSxTZeooYXQnBV+VEn7eBTtK6nMbFA=
Subject key identifier:   39:73:E0:58:6E:88:6A:B9:35:75:48:CB:5A:48:49:AF:8E:D6:5F:F6
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       019352AC6335831C4A395344E0E494BB5D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number:          112C
Signing time:             Fri 22 Nov 2024 07:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:49 +0000
Files and hashes:         1: 2MV4a-1LjTtJoR1nW1gMfsOgbBQ.roa (hash: yp9900epYtj/psYxW8oSAxveQK7o7+lRc4U7Vso7oHg=)
                          2: IZQT-OryzqFuiMDGSAuqqXnkUXk.roa (hash: ljn+fZmiZu9qPFVwnWH3/Qit/V8AJA+y5L2HzIzpLvo=)
                          3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: Pe+Z6+C9/2tx9Oqpwum2toXq8S6s9rNTPZ9Pvszyny0=)
                          4: iTC8-eoJBSchxjWASjgkfJDQHL0.roa (hash: ObLDQOnSk1TDLa+4oUsofqjbdHooMDEnrQvVg76NYO4=)
                          5: tRhe-hYMpxPhXw5Ksjo52U4YbEk.roa (hash: e7gaKGnC7CQW8aoSpG0FA1lKlnY/8KNGKqvOJRg0yE8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:63:35:83:1c:4a:39:53:44:e0:e4:94:bb:5d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Nov 22 07:00:49 2024 GMT
            Not After : Nov 23 07:00:49 2024 GMT
        Subject: CN=3973e0586e886ab9357548cb5a4849af8ed65ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:87:7b:69:53:0b:07:16:0e:f8:9d:3c:a5:
                    d5:46:9b:b1:86:4e:10:01:bb:22:30:45:d7:a6:87:
                    5b:2a:72:d2:ae:1e:67:3f:dd:db:4f:38:21:d3:9e:
                    49:eb:6c:c6:83:6e:6c:30:a7:b7:87:f0:a4:ac:17:
                    cd:5c:42:3d:18:86:12:ca:ed:c3:89:bd:be:d1:01:
                    0b:53:89:76:c1:47:26:f8:3b:1d:79:3e:69:14:90:
                    92:a8:c4:04:eb:e6:2c:85:de:55:5a:a7:cc:48:53:
                    eb:f6:be:b3:89:70:b8:35:38:3b:cd:33:1a:4f:a7:
                    1c:5e:2e:e5:b3:a8:3f:78:69:67:2c:b7:34:ba:e1:
                    61:6e:4f:9d:b4:61:fa:21:73:01:8a:39:67:c4:9a:
                    88:8d:f8:9e:98:e3:1d:cf:f9:bd:4e:c2:89:c9:96:
                    81:71:d2:f7:1f:88:1e:5f:a7:0f:e7:0a:ba:23:73:
                    b6:de:c9:0b:e6:f6:a5:09:ea:42:fc:63:4d:c1:1a:
                    ff:a3:c5:20:be:91:3e:f1:c5:db:2d:d3:7c:0a:c1:
                    42:af:5a:7d:85:46:88:6e:87:d5:a3:64:4a:ca:13:
                    f9:39:4a:6d:e1:1d:64:6b:50:83:d0:83:4d:59:c2:
                    a8:9e:49:77:d5:41:26:0a:bd:68:c2:19:cd:31:97:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:E0:58:6E:88:6A:B9:35:75:48:CB:5A:48:49:AF:8E:D6:5F:F6
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b2:37:08:0d:33:4e:76:5e:db:21:ac:14:fa:4b:d1:d6:6a:
         ff:8c:ea:77:f7:47:9d:b0:98:47:ae:9e:d8:1b:a4:80:71:b3:
         f7:b1:1b:5b:9a:94:8e:bb:5e:3f:4f:fe:20:6f:84:0e:48:ab:
         89:2c:8f:4b:8b:80:27:6b:34:46:5b:b2:9e:a1:f8:80:af:ca:
         48:d3:2b:52:6c:4c:ca:b9:50:d9:e8:d2:21:3e:ce:fb:e6:d6:
         70:93:bd:8e:f1:18:0c:83:63:16:0b:5b:90:5e:39:76:dd:c6:
         21:de:22:f6:22:60:a3:06:72:61:5b:d7:05:d7:99:c5:d4:ce:
         82:4c:5c:56:7c:81:d5:da:18:c5:5e:4b:c9:69:6b:15:0a:21:
         83:0c:91:86:3c:bf:9d:88:56:4d:3f:e8:e1:25:ee:c2:a1:e7:
         9c:14:40:89:79:62:0b:29:98:1d:61:c0:a7:ff:93:87:d1:81:
         e2:05:3e:14:b6:98:80:92:c3:63:b0:06:77:63:8e:d3:d5:c7:
         73:14:8a:17:58:c1:d2:f0:7a:c9:bb:16:c9:49:72:e7:ad:45:
         d1:e3:9f:df:00:58:7b:95:45:b1:c7:c0:7e:fd:b7:ec:d0:1d:
         c7:cd:f5:c8:b6:25:9b:1e:aa:c7:94:3c:82:ca:03:19:87:28:
         e1:49:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:16:40 2024 by rpki-client on console-fra.rpki-client.org