Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File:                     bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier:          sLOvADlCqIae4VCNupsty38OeE/7EZQts9xtqy/CT9Y=
Subject key identifier:   FE:44:FD:9B:FF:A8:23:F4:27:96:76:C3:23:A3:0D:EA:9C:E6:AA:83
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer:       /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial:       01936AEBA9DDC082677B27F0D54AA962C94C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number:          10E6
Signing time:             Wed 27 Nov 2024 00:00:49 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:49 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:49 +0000
Files and hashes:         1: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: nUozQSqhP4e5/JgzY0iWqKM3wVyooN9Y851RzvO3FNg=)
                          2: yeeuhXUV56ipS-Jq9ln0Q8NEnMg.roa (hash: EA+ojy9RXNITvFGzmDiTS3c/JR79aePr64hapgB6Ds0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:a9:dd:c0:82:67:7b:27:f0:d5:4a:a9:62:c9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
        Validity
            Not Before: Nov 27 00:00:49 2024 GMT
            Not After : Nov 28 00:00:49 2024 GMT
        Subject: CN=fe44fd9bffa823f4279676c323a30dea9ce6aa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:c9:a2:ee:4c:9a:80:f2:11:f8:5a:46:51:
                    22:3a:fc:57:13:b2:60:98:aa:ea:4f:37:8e:62:c8:
                    bd:e6:6c:f3:4b:da:cb:c0:91:75:16:7d:c2:4b:63:
                    4b:db:44:21:9e:40:2f:ae:5d:a4:8d:c0:17:8f:05:
                    2f:ef:47:33:42:5b:1d:98:a2:81:e0:ba:ed:ce:c0:
                    c5:fe:c0:62:3a:e2:1c:53:87:c5:13:7a:2d:c0:82:
                    da:7a:ab:a5:30:ab:a9:50:2d:4c:89:cb:eb:23:15:
                    36:3c:71:fa:08:da:c5:9f:79:d7:8c:8d:7f:13:07:
                    30:cf:a1:fb:b5:5e:87:f3:d5:09:00:d0:6c:8d:e9:
                    4f:b1:6b:e9:7f:96:95:9d:f9:8d:a7:62:b2:dc:09:
                    1b:c4:f2:ee:74:98:b4:78:e6:cc:b4:8a:72:12:ac:
                    66:0d:0e:e6:4c:f5:d5:e9:d9:1d:7a:72:69:e6:f6:
                    71:85:5c:bd:e5:92:94:9a:e1:c4:3b:21:30:d1:81:
                    d4:c0:a7:5d:1d:ec:f1:8a:b4:44:4f:dc:38:18:02:
                    41:f6:34:d4:5c:62:4c:8b:13:bb:87:b8:c8:e8:ef:
                    b5:f3:ee:13:f0:78:a9:19:e0:23:b7:0e:91:3e:12:
                    77:56:b5:93:ee:1a:92:f5:26:d2:ef:29:88:0e:57:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:44:FD:9B:FF:A8:23:F4:27:96:76:C3:23:A3:0D:EA:9C:E6:AA:83
            X509v3 Authority Key Identifier:
                keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9f:b0:90:b7:38:3f:19:96:40:a1:65:81:5d:fc:60:e3:1a:
         90:bf:b2:4a:d2:60:74:fb:ea:8f:0a:c8:34:8f:a7:32:e3:2a:
         3d:a0:67:09:3e:bb:c1:7d:e5:d6:9d:56:e1:93:a9:98:48:8b:
         96:df:9d:c7:14:6e:b0:d6:39:51:45:17:96:d1:a3:fd:e7:0b:
         f1:4f:84:fa:c9:7c:8d:92:c4:47:cd:16:23:e0:5f:4b:d3:bc:
         ab:6a:1b:f2:b2:b9:6c:3b:dc:96:07:47:66:be:6b:8f:69:4e:
         cd:98:88:e7:d0:c9:fe:3a:2e:08:08:d0:de:37:0b:a3:f3:d5:
         7d:95:96:cb:2c:18:bd:64:ee:c0:63:9e:dd:bd:53:bc:11:b0:
         28:f7:a3:65:d5:29:70:0a:94:95:1e:9e:31:01:3f:e6:63:bb:
         4d:94:8b:b5:61:2a:a6:70:3c:f0:7d:fe:a2:11:e3:3b:3c:d3:
         e0:61:62:ec:d4:ed:23:27:81:20:59:11:c2:b5:34:fa:84:0c:
         85:bf:7a:32:52:b5:2d:38:8e:a9:c2:73:b0:f2:c8:86:ed:de:
         bc:fb:eb:30:37:12:15:a7:a7:3c:3a:e5:8b:26:66:45:ce:85:
         97:b8:e5:e5:9b:f8:a0:8b:de:6c:fb:8f:35:95:2b:a8:12:9e:
         fa:d6:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:11 2024 by rpki-client on console-fra.rpki-client.org