Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
File:                     2RTaVuGpNGSdoClkrBLro0xcuE8.mft (raw, json)
Hash identifier:          vMPMZ5Oj2Cram2OM/deULdl74/fD666I0j3sYFP/AQ8=
Subject key identifier:   FF:DF:AE:CA:C1:C9:EE:B6:54:D7:1C:21:3F:DE:1E:56:75:7E:00:23
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Certificate issuer:       /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial:       0193549C613FAA9069B1CBAEFD9DB599F72F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
Manifest number:          C6
Signing time:             Fri 22 Nov 2024 16:02:34 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:34 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:34 +0000
Files and hashes:         1: 2RTaVuGpNGSdoClkrBLro0xcuE8.crl (hash: NTElH/mIhE18LBIx5qsIPMuBrhEJeJk0DQO47pptBBs=)
                          2: 81RowbbGhAH0ExWdR2kJlYIfwGo.roa (hash: U9dTmFDCy/CbsyETpHvLeo3WxH/wEv8I5+o2CDXGiiQ=)
                          3: 8OelRsniWUa4q2dQVNy5q4QTFiA.roa (hash: lm1c/2sQppLOKhumB7rmxa0Yml9y0ELJcsV2W8odepE=)
                          4: DN_LzUjWjePswxKOdbOhYNqDtJ0.roa (hash: Wem1I0QV0qZXp9EOkHkj66A6zn6ZoUUMHLMi6RCHcJM=)
                          5: FQkLFzbAkhYx5mqDHbY_eGuz5-s.roa (hash: 9bo4qEKE96nnDuilTa0l+3wVd4786ZsMJsfKsB5F8Xo=)
                          6: FgFzuhNVaV5UcM49lsvPMAsZCg4.roa (hash: cDY0wZvLObaI4uXeRP3+PLwEmy4+zjWMQ9IkXMSLOlU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:61:3f:aa:90:69:b1:cb:ae:fd:9d:b5:99:f7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
        Validity
            Not Before: Nov 22 16:02:34 2024 GMT
            Not After : Nov 23 16:02:34 2024 GMT
        Subject: CN=ffdfaecac1c9eeb654d71c213fde1e56757e0023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:15:5f:82:f0:07:69:cc:3b:da:95:ad:c7:
                    69:fc:8f:e7:fc:ec:3d:b5:e9:69:3d:93:bf:03:9e:
                    52:30:cf:0b:40:6b:45:40:ff:25:52:0e:a5:8e:13:
                    93:b4:c1:e4:48:03:75:18:0c:72:f9:9c:c9:3a:a7:
                    11:e0:53:1a:58:20:48:9d:09:14:50:8a:97:d6:33:
                    86:cc:29:b7:7a:29:5b:95:36:38:3b:12:25:1f:56:
                    c4:b5:a4:2f:cf:22:59:b8:89:f5:e3:ff:f6:c1:31:
                    c3:a4:28:ae:12:c9:38:c5:4e:ff:2c:c4:00:29:a8:
                    b0:96:f6:38:d5:15:ad:a0:62:b0:4a:0f:ff:f0:fd:
                    ff:02:e1:eb:f4:68:b3:4c:a4:a3:ed:ac:ff:12:78:
                    a6:7a:21:d7:24:45:2b:67:a3:99:03:9d:56:5a:a8:
                    79:2c:bd:3b:d6:57:8f:90:03:3b:87:8c:a9:4d:c2:
                    df:38:17:da:ab:b1:32:cd:e1:ae:cc:cb:ba:4b:ac:
                    92:56:d4:8a:9a:68:af:5c:c3:f3:48:67:a7:8a:a6:
                    3c:43:67:15:95:8a:3e:e6:bf:72:68:3a:0b:c7:ba:
                    da:57:b4:85:fc:52:43:5b:e0:7b:29:f1:80:18:c5:
                    bb:e4:d7:c0:f3:f9:6c:d3:f3:96:81:41:4f:53:34:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:AE:CA:C1:C9:EE:B6:54:D7:1C:21:3F:DE:1E:56:75:7E:00:23
            X509v3 Authority Key Identifier:
                keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:7d:61:87:93:2c:7e:d3:dc:82:11:50:a3:ef:04:ba:dc:df:
         0b:e8:b0:01:b1:f3:8c:67:c1:1e:fb:66:a5:dd:3e:95:71:5b:
         76:50:01:10:34:fa:66:2e:83:b3:fe:85:a0:dc:d7:79:1c:b0:
         5e:ef:74:6e:91:63:aa:07:18:a2:9b:b5:ec:7d:e9:22:f6:7c:
         a0:c8:26:bd:7c:0b:d1:27:ff:7d:cc:66:c6:69:8c:2b:f7:80:
         1a:bf:fb:68:94:ba:47:48:22:6a:27:7d:fb:f1:9a:20:62:2d:
         0a:c2:30:e0:5e:fb:99:6e:dd:a5:82:f4:db:04:32:57:e6:d1:
         27:d3:0f:c3:74:a6:91:60:e1:6a:28:8b:8b:f8:d8:66:07:45:
         72:a2:a4:72:90:d8:2d:f2:42:12:86:22:43:16:f7:00:f4:4f:
         dc:6b:50:0b:19:d8:00:2d:c0:39:80:17:5b:4a:9b:3a:59:5c:
         a8:58:1e:da:78:3b:30:72:f2:bf:82:bd:c4:d2:ef:30:af:b8:
         6b:fa:d8:88:ac:0b:d9:c5:bb:33:ab:30:86:6b:a9:1f:c2:f2:
         76:6d:e8:55:b1:f9:f2:93:44:a4:63:48:0b:80:7d:4e:f7:fa:
         47:08:cc:56:55:5d:44:db:b6:21:61:6f:3c:98:b3:41:b8:99:
         8b:b5:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:07:25 2024 by rpki-client on console-ams.rpki-client.org