Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File:                     buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier:          ofeIVrPynF5zYDSgYn+fQLECRB9ZUXA+rt1HivC3Fj8=
Subject key identifier:   83:E6:98:C1:21:55:CF:4E:4D:45:73:A2:EC:3C:93:1E:54:38:91:04
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer:       /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial:       019356893753DDDB57EE1FD742B2C2C73EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:53 +0000
Files and hashes:         1: VwBzQ1zcNWCdVqI8IhgLT4zbUeM.roa (hash: PXb+IqK8mgcYPL3W5uJ6G8IGbAztqC/G037RZzZoXfU=)
                          2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: CR/FSHDlnIGpJUA/i1t9ehYVL3qc6SncYWkBilBi8sU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:37:53:dd:db:57:ee:1f:d7:42:b2:c2:c7:3e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
        Validity
            Not Before: Nov 23 01:00:53 2024 GMT
            Not After : Nov 24 01:00:53 2024 GMT
        Subject: CN=83e698c12155cf4e4d4573a2ec3c931e54389104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:37:30:8b:ac:87:b8:6b:f4:f6:9c:46:c1:
                    1c:5e:19:44:c3:bd:fc:3f:fe:a7:4a:28:15:cf:30:
                    11:7d:bd:d3:17:c5:a2:c5:05:47:76:33:ca:2a:77:
                    16:f3:a1:78:57:d9:ca:dd:f6:ca:87:fc:65:2c:19:
                    74:2d:f2:86:ea:98:31:24:82:f1:50:17:c1:38:7f:
                    23:a0:88:2c:d6:19:83:51:03:06:35:59:62:00:0e:
                    a9:f3:5a:08:23:99:d7:4d:45:ad:1a:56:a3:86:4f:
                    d8:c3:e6:92:84:c7:ba:aa:19:75:0c:a6:db:20:52:
                    64:84:f4:e5:e1:7d:9b:94:d7:d4:12:d2:16:ea:a7:
                    37:10:14:ef:93:67:d6:b4:a8:0a:d2:24:4c:0b:5f:
                    7a:64:a9:4c:a1:25:84:f6:79:6e:01:dc:71:fc:83:
                    10:67:86:45:05:f6:f3:fc:93:4f:57:65:23:c5:7c:
                    01:9b:fd:96:40:28:94:46:63:f9:03:2b:57:77:de:
                    1c:4e:82:bc:90:9e:09:27:9c:13:75:ee:f0:71:18:
                    68:44:83:ad:d8:da:60:fe:4e:7a:81:43:4b:db:53:
                    90:03:ee:0e:39:27:28:54:fd:87:44:39:a7:4a:5b:
                    57:a3:c4:96:c8:4c:db:65:26:61:be:0e:1d:c7:21:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E6:98:C1:21:55:CF:4E:4D:45:73:A2:EC:3C:93:1E:54:38:91:04
            X509v3 Authority Key Identifier:
                keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ab:9f:19:76:7e:7f:e3:30:b1:a2:67:fe:7a:e2:97:77:fe:
         3e:5f:6a:3a:67:a0:7f:3b:ec:ac:cd:d1:bf:87:73:f3:0b:0d:
         62:e1:21:55:a9:1e:12:9b:c8:12:7e:48:01:9e:96:c9:2b:b8:
         e9:99:dd:88:68:8c:a8:26:fa:cb:e5:1a:d3:76:0f:e3:2f:ff:
         f9:83:fd:50:b7:62:20:85:20:09:a2:f9:44:1f:72:1d:32:e2:
         9b:35:31:40:4e:d1:1b:b0:5e:40:d6:8a:d1:04:86:90:8b:6f:
         eb:5e:80:41:54:84:3a:12:31:e6:18:c0:bc:86:01:9c:41:30:
         43:e8:fe:f2:13:c4:f3:33:ac:fc:60:8e:1b:29:bf:0e:68:df:
         f1:88:8f:0f:19:a6:90:86:17:4e:d4:bd:f3:4e:8d:67:93:62:
         72:65:72:01:8b:a5:9e:f7:cc:16:ad:ca:5f:41:2d:01:f8:c8:
         a3:64:2e:b4:56:69:35:e3:df:cb:ed:d9:5d:33:07:67:93:58:
         ec:ff:88:f9:03:8a:7c:b3:06:ba:58:1c:50:b9:8b:da:d1:9f:
         05:69:f1:3f:e2:bc:4b:e4:95:7d:e9:3f:8d:d5:5f:fa:b5:18:
         3e:23:33:4c:ad:36:4d:0a:bc:c4:7f:86:f2:b6:56:15:af:9a:
         0e:64:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:28 2024 by rpki-client on console-ams.rpki-client.org