Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File:                     bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier:          mh78SV3inVyVjifCUP+XO2H4aYZHVH7rFi7nrZN5iXU=
Subject key identifier:   BE:A9:88:C5:60:C4:6A:04:A9:E5:0C:BD:BE:F7:EC:64:7F:8A:08:D2
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer:       /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial:       019355E41FDE806E167963E642532B1BC5DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 22:00:33 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:33 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:33 +0000
Files and hashes:         1: GoSg5lmZ3Wx0_anl8-czu8ixfTM.roa (hash: i/dq+aF4HEsssAvntSk4PEuypmTWbk+eLnz1a/0kM00=)
                          2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: Kq0//hylbPVqtYT7UQTAjs6xKIT2QLz0Xf5RkUuBxQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:1f:de:80:6e:16:79:63:e6:42:53:2b:1b:c5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
        Validity
            Not Before: Nov 22 22:00:33 2024 GMT
            Not After : Nov 23 22:00:33 2024 GMT
        Subject: CN=bea988c560c46a04a9e50cbdbef7ec647f8a08d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:42:9b:e4:55:00:97:fd:10:44:ef:96:f7:
                    0b:86:b3:6f:8e:4c:23:1b:a0:5e:c6:02:ef:07:56:
                    c0:ef:33:24:39:e8:8e:00:31:ef:a9:4f:17:04:f6:
                    29:7b:9d:ce:25:c1:08:36:d4:1b:3e:cd:d7:8f:93:
                    85:27:5f:72:ae:b2:57:0a:e6:50:2c:7a:d7:79:6e:
                    b3:ba:b0:eb:fc:8d:5a:0d:d8:59:2f:ed:3c:5e:68:
                    d9:bb:52:fb:1b:70:69:25:44:b4:53:b1:4e:20:b5:
                    4c:84:51:11:b3:55:c4:14:73:ad:2c:54:29:12:70:
                    1c:90:a0:80:c0:11:c8:87:55:21:45:4d:39:5a:f1:
                    06:23:b8:fb:fb:3e:07:b2:54:4e:2e:fe:1c:1a:90:
                    b0:ed:a5:35:c6:a5:18:02:53:6f:92:fd:26:11:5f:
                    ba:f3:98:bb:e3:f9:ed:ac:3a:87:dd:96:ac:70:97:
                    b1:b4:82:ab:3e:b0:ec:ee:ee:a1:13:1a:a6:11:5c:
                    45:61:79:e4:81:5c:8e:a0:b0:b8:2d:52:d8:39:aa:
                    ce:97:21:19:7c:58:3d:e7:08:02:45:12:b0:b2:78:
                    60:43:05:6b:0b:c5:fb:a4:81:01:b7:4e:2c:01:5d:
                    2d:63:f4:59:87:10:bc:41:24:29:1d:04:5c:b1:57:
                    62:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:88:C5:60:C4:6A:04:A9:E5:0C:BD:BE:F7:EC:64:7F:8A:08:D2
            X509v3 Authority Key Identifier:
                keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:a8:d9:fe:e8:e6:09:42:3d:c8:02:84:24:86:4d:9d:69:
         92:26:7d:13:d4:f1:51:19:2f:f5:a1:4f:93:68:08:67:d6:9c:
         37:da:b4:99:ae:af:8a:10:9d:d8:d0:05:49:42:c6:3b:ed:95:
         41:62:2c:32:c7:22:e8:5c:33:9b:c9:76:8c:a5:d9:7c:e1:18:
         54:d6:24:88:7b:85:b0:5a:25:78:64:3a:be:1d:2e:29:45:6d:
         34:cd:27:53:da:c4:97:50:ef:ab:b4:96:df:db:53:88:ce:84:
         bb:d1:77:87:f7:cb:94:21:76:b0:21:5c:1e:f0:d3:87:50:58:
         e4:fc:e9:b5:dc:86:40:2b:76:84:e2:31:ea:33:4d:08:08:95:
         b8:4d:3f:65:47:c9:52:01:a7:69:d2:f6:f2:5e:9a:69:21:95:
         66:67:9d:3d:f7:8b:b9:ab:77:1e:5d:11:64:76:f3:bf:24:a3:
         bf:d2:2f:8e:ea:0f:0a:82:c2:dc:69:b2:c9:bd:70:af:2b:e0:
         2d:f0:fe:ef:d1:00:20:24:64:78:b5:2e:aa:70:ac:44:42:4b:
         7f:2f:6e:a4:f5:85:79:45:58:ce:8c:45:ee:9c:f2:35:08:9e:
         3c:44:71:81:b8:d0:40:4e:f9:f9:ec:c7:e1:7c:11:95:2d:8f:
         9d:8b:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:16 2024 by rpki-client on console-fra.rpki-client.org