Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File:                     bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier:          nNBrlI8++MYt8BoNMZlHd/zveSN0+Rgl2IqeWWvdX50=
Subject key identifier:   45:EE:08:B5:B4:06:65:65:3B:21:49:DE:58:0F:F3:72:2D:47:4A:38
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer:       /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial:       0193579B8402D2CD58138D5780D4436FF307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 06:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:29 +0000
Files and hashes:         1: U8exogbXmh0pspjX2P2PCr7Jrqg.roa (hash: aLfYvJPLerhyKOI4hRBk9uzzv8WBUTqbZ3grEOEIAwo=)
                          2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: HBtRK9Mi2yp+AJ5EV1CCb2j/gwmtf+Ej2Ivw2walWAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:84:02:d2:cd:58:13:8d:57:80:d4:43:6f:f3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
        Validity
            Not Before: Nov 23 06:00:29 2024 GMT
            Not After : Nov 24 06:00:29 2024 GMT
        Subject: CN=45ee08b5b40665653b2149de580ff3722d474a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:f6:05:c5:d2:bd:53:06:88:9b:9d:69:f9:
                    cc:6d:95:f5:99:80:80:6e:0b:3f:86:e5:ad:5f:c9:
                    da:27:11:e0:3b:57:3f:57:b0:f9:7d:d7:7e:78:bf:
                    ef:bb:e3:28:fa:d8:40:51:55:cf:32:04:da:59:13:
                    fb:a8:75:78:a7:08:94:bb:d4:5e:47:ea:f7:21:9a:
                    f0:16:da:45:3e:5e:9a:01:ab:c7:4c:ee:8e:56:30:
                    5b:8c:73:d7:0a:84:af:d3:f5:0c:9d:dc:d6:18:9c:
                    d2:80:a5:67:4f:1b:c7:16:94:9b:ce:77:ad:25:a5:
                    cc:06:66:34:42:5d:0a:95:05:25:04:61:3c:86:0e:
                    f2:de:f5:94:8f:7e:60:62:cd:b9:d3:6d:38:d0:4d:
                    7b:b6:25:4b:71:fc:04:e9:dd:1c:d8:e6:63:4f:42:
                    cf:17:40:0f:28:1b:7b:43:9f:cd:ca:47:2e:29:28:
                    a3:b7:7c:51:1d:43:02:9b:53:91:4a:d0:26:46:38:
                    17:7d:6b:62:33:9f:cd:58:56:af:94:2a:f4:02:6d:
                    56:5d:4a:0f:49:77:20:b5:c2:d7:b6:70:f7:fb:91:
                    b5:e7:cf:02:36:4c:11:d3:49:8c:0c:2a:7e:83:8b:
                    33:6d:34:5a:b3:3c:d8:b8:1f:27:ee:35:32:d0:26:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EE:08:B5:B4:06:65:65:3B:21:49:DE:58:0F:F3:72:2D:47:4A:38
            X509v3 Authority Key Identifier:
                keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:65:37:87:2a:16:80:d0:4b:8d:21:cd:70:07:66:bf:2a:b9:
         ed:81:d6:d7:40:b3:f1:c8:a8:da:00:3b:7a:a8:61:8d:c0:51:
         f1:52:4c:97:29:ab:44:68:86:2a:45:95:b5:9a:9e:dd:e2:76:
         4d:29:f1:bb:87:83:2d:17:34:7d:14:41:13:06:a2:8b:fc:f8:
         c6:85:ac:44:0b:b3:46:cd:62:ee:51:4b:74:9c:c5:e7:1d:57:
         ab:87:69:cb:45:18:60:70:03:92:92:59:44:86:cf:02:17:bb:
         b5:ef:f8:2e:fd:19:3f:f8:34:25:45:c2:7d:f7:04:83:e3:66:
         09:18:74:99:30:16:63:24:37:8c:be:bd:c0:9b:af:62:89:1c:
         b3:92:ea:75:3c:13:78:12:37:85:31:9f:a7:29:29:7e:ff:5c:
         2b:f3:98:ce:d9:c6:57:20:21:9c:97:73:98:52:b6:0c:4f:4d:
         cc:7c:2e:07:99:7d:4c:f7:46:43:e8:db:34:13:0f:98:e0:5a:
         45:68:b8:5c:a9:fc:34:68:94:ad:a3:96:39:99:c0:c3:e8:71:
         d0:fe:5a:db:d6:77:68:38:dc:fe:ca:e7:a7:6f:12:63:6e:16:
         19:3c:fb:18:dc:a0:c5:6f:2c:bf:88:e0:3b:8b:b4:03:9e:8d:
         a8:f6:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:24 2024 by rpki-client on console-ams.rpki-client.org