Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File:                     b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier:          FdnpWzD906s4LbbpLPuqv1ds2CWyMgQTgmYwvA8mSdE=
Subject key identifier:   CC:90:AF:49:03:33:84:02:62:7F:E0:3B:D6:13:E4:F7:16:E8:4E:B8
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer:       /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial:       0193549CCE142B4AB1AC694F302EE17EDC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 16:03:02 +0000
Manifest this update:     Fri 22 Nov 2024 16:03:02 +0000
Manifest next update:     Sat 23 Nov 2024 16:03:02 +0000
Files and hashes:         1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: IHYkERmZe15OLN1iwuUkPRo0RaDB8MrLu4DTGvGCfnU=)
                          2: yhbUdTNsDEhsZtbFzpHVylyaSI8.roa (hash: ZxykO7puuZOHGdOmsjCkSxjvO7z+VfkLHmGeWcbukjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:ce:14:2b:4a:b1:ac:69:4f:30:2e:e1:7e:dc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
        Validity
            Not Before: Nov 22 16:03:02 2024 GMT
            Not After : Nov 23 16:03:02 2024 GMT
        Subject: CN=cc90af4903338402627fe03bd613e4f716e84eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:aa:46:2b:92:78:aa:e2:e7:a1:34:34:39:
                    11:8e:fd:a3:3f:d7:0f:03:6e:98:c5:7f:7a:2e:2e:
                    8f:4d:78:b2:37:82:fd:85:aa:e4:21:66:33:3f:25:
                    7e:6a:20:3e:5c:cf:d1:4c:41:02:87:5f:50:48:e5:
                    85:a3:86:27:97:3c:b2:e6:01:6c:c6:79:d4:a1:21:
                    d6:c1:62:96:e2:be:8f:a9:82:b5:da:a3:c7:f3:f8:
                    e4:92:93:2a:a0:a5:ad:10:21:9c:3a:e8:30:d5:11:
                    f3:14:78:e8:54:43:03:35:a5:07:8b:6d:f2:41:37:
                    c1:92:a7:39:6e:89:7a:9b:55:a1:c3:78:99:37:7f:
                    9a:a2:e4:47:16:d8:17:6c:95:2d:03:ae:77:4a:4b:
                    83:4a:12:39:ba:19:c8:9c:0a:f2:0b:66:3d:ca:b5:
                    6b:c5:a1:81:52:a0:51:b1:30:34:e5:8d:3a:44:10:
                    cb:b4:0f:79:bc:cb:02:da:f8:69:0f:ba:35:a4:98:
                    92:1b:48:36:93:35:c7:06:bb:ba:79:7a:65:92:f5:
                    8d:c0:cc:56:d6:f5:54:3e:31:3e:f4:6c:34:80:39:
                    d7:84:62:5b:b6:53:55:ce:2e:b8:69:cb:42:10:a6:
                    54:0c:9b:c4:d9:d5:82:04:fc:c2:35:83:bb:37:ed:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:90:AF:49:03:33:84:02:62:7F:E0:3B:D6:13:E4:F7:16:E8:4E:B8
            X509v3 Authority Key Identifier:
                keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:13:7f:5e:ca:47:e5:d2:cc:6d:79:d0:11:af:74:fc:2e:
         4d:e9:93:b6:da:b1:9a:95:3e:46:58:1a:d2:3a:08:42:25:3e:
         46:27:27:5c:12:57:b9:e2:7c:dc:8d:c3:0b:5e:6a:9b:98:6e:
         2b:df:25:0a:94:8b:a3:f2:3d:7c:98:31:20:c7:90:f7:93:9f:
         91:e1:dd:9c:fe:d3:74:1e:e5:a5:38:be:b4:0a:eb:90:7d:27:
         5b:b2:d9:7c:ba:d6:db:39:94:0d:9b:d3:96:cb:a1:9e:84:6f:
         fe:a5:fd:cb:ad:c5:38:fc:95:02:f2:6b:e9:1e:1b:72:7e:17:
         0e:fa:db:18:1f:9b:3e:be:f0:7d:70:62:6b:5f:8c:f5:e4:47:
         9f:ff:4b:b5:04:ad:bf:fe:c0:d3:08:cb:f4:2c:14:60:15:a5:
         7c:af:23:db:f8:1a:cc:cd:ce:23:27:51:28:39:a1:3e:a1:aa:
         e0:92:c2:fb:26:98:01:a6:1f:78:03:68:27:1b:f0:42:46:f8:
         2f:36:ff:c8:17:b0:f5:69:b8:8c:9b:0e:d9:8b:f5:fd:81:36:
         69:6f:e4:17:ae:57:ec:a7:74:9b:77:ad:7c:fe:68:11:b9:f0:
         78:76:ef:f2:6d:b5:16:9a:8c:a2:4b:e7:88:3b:c6:ac:1a:ee:
         95:a2:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:02 2024 by rpki-client on console-fra.rpki-client.org