Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File:                     bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier:          WIRIo+600/5PoKQImrm1p3YFVMvjsqt+UO35St6sw3w=
Subject key identifier:   E2:92:42:01:18:05:33:5D:17:13:1E:29:A5:1E:E3:43:D8:9F:C0:AF
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer:       /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial:       019352E2CABFFF54E47DFD1D4F1263DE43BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number:          091C
Signing time:             Fri 22 Nov 2024 08:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:14 +0000
Files and hashes:         1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: hQpKdF48waNwBwlqhU1h4bAtGnqcNnbzXr92b9/VACM=)
                          2: t_NfG1xZ6AYS8YaVfirBcomKsSc.roa (hash: HLCn5IIm78OjdAbyeT5gTOtspdLp8AKngR0ZKfjO34g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:ca:bf:ff:54:e4:7d:fd:1d:4f:12:63:de:43:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
        Validity
            Not Before: Nov 22 08:00:14 2024 GMT
            Not After : Nov 23 08:00:14 2024 GMT
        Subject: CN=e29242011805335d17131e29a51ee343d89fc0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:91:7e:b1:15:d4:4b:3e:f5:50:fa:c0:7a:
                    06:27:77:98:32:ce:ec:56:56:44:90:90:56:16:a3:
                    1f:95:81:8f:78:98:f4:5f:bc:d1:48:c2:86:a1:e6:
                    15:08:96:db:68:91:3e:08:bc:e0:32:6d:9f:51:bd:
                    1d:7e:c8:fa:c8:6e:c7:4f:ad:c7:d2:20:0e:d4:14:
                    37:35:85:38:7d:2e:73:95:bf:0f:bb:03:32:84:2e:
                    05:db:76:bc:87:fd:08:d8:f1:47:ed:d7:e2:f0:50:
                    f4:c3:1b:a2:b9:c5:fb:e2:21:7a:8d:70:26:9a:70:
                    77:39:bd:b3:bf:53:09:a1:78:22:13:09:08:1a:fb:
                    2e:94:b0:f3:ad:06:9f:c0:9b:3b:c0:61:80:6c:f2:
                    42:cf:c1:69:eb:78:b8:c6:80:6b:9f:b4:33:1c:09:
                    e1:94:0f:96:f5:2c:fc:5f:0a:b3:97:3a:99:40:39:
                    54:3c:b3:0c:97:a5:29:de:0a:ff:0f:d4:07:3d:70:
                    9d:1d:93:f2:62:9e:23:f2:de:5d:62:47:4f:46:ca:
                    b5:3f:29:96:8b:94:b0:df:7d:23:b1:d4:26:25:31:
                    4a:31:b2:94:7c:aa:72:5a:a9:56:33:0c:fb:66:69:
                    4c:ce:1c:40:ab:3f:b5:ee:e3:29:6e:57:85:b0:32:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:92:42:01:18:05:33:5D:17:13:1E:29:A5:1E:E3:43:D8:9F:C0:AF
            X509v3 Authority Key Identifier:
                keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:68:df:d7:0a:e5:da:ba:6c:05:8d:0b:88:31:be:5b:7e:b2:
         fe:04:a2:ac:2f:9a:6c:b0:bd:64:a4:4c:27:ed:2f:f5:b8:d2:
         16:29:03:dc:05:4b:f7:4f:d0:5d:27:7d:57:0a:16:9b:b7:9f:
         0d:e2:45:c7:96:93:2f:c7:8f:fe:d9:82:47:cd:61:7a:fa:2b:
         34:fc:9d:5f:59:ac:22:a9:17:6d:7d:43:27:32:17:f9:db:57:
         cd:de:fb:b0:3c:d7:7a:38:33:ef:b0:fc:f6:1c:4b:bb:5f:f7:
         ee:dc:26:19:f2:06:3a:b0:b4:45:e6:d5:33:c6:53:bf:3d:c7:
         c6:34:96:39:35:95:91:2b:66:d5:61:67:27:ce:34:07:e1:d4:
         f8:5e:48:47:b2:8c:13:fc:7b:46:b4:d0:24:db:90:e8:4e:fd:
         c3:a6:7d:80:89:23:33:a8:53:e3:65:b8:7c:95:d4:78:12:c1:
         eb:43:96:62:8d:18:9c:ba:d5:a2:84:da:70:3d:bd:04:33:60:
         88:32:37:db:0d:94:25:de:5f:b8:01:3a:83:d9:7e:7e:a7:77:
         3b:c0:79:44:4e:f9:c7:3a:d9:05:8b:25:ab:a2:45:42:23:c5:
         67:b7:b3:81:d8:9b:90:a9:2d:2e:a4:41:5f:ed:8d:d1:61:0c:
         f3:02:1a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:35:47 2024 by rpki-client on console-ams.rpki-client.org