Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File:                     vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier:          HqjGIasUtj20yB0yYVRanAHxNzGbbWwOu9DIcms37Bk=
Subject key identifier:   BA:15:CE:CE:BF:3C:BB:BB:99:8D:D5:1B:86:91:03:8D:01:A3:90:D3
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer:       /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial:       0193576468D45925D683EFD2E17F59C433C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 05:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:18 +0000
Files and hashes:         1: HasPSV8hg4L1tTixMFZgiyib0PM.roa (hash: TK8CzcOalBj6MspCSWaobDj860V0bhQhkvDbEIxPlR4=)
                          2: WIwRysGtrQJ4NQocZVCl3nhJgcY.roa (hash: hru4RRyfLyllRyft5Za7jErHKNOYaVt5z6FQg11crjE=)
                          3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: 68++juT4SlBgGzO45CBBSeLBW4v9+KQUsgaYV50K3GQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:68:d4:59:25:d6:83:ef:d2:e1:7f:59:c4:33:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
        Validity
            Not Before: Nov 23 05:00:18 2024 GMT
            Not After : Nov 24 05:00:18 2024 GMT
        Subject: CN=ba15cecebf3cbbbb998dd51b8691038d01a390d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:0b:16:2e:2a:38:7b:2e:92:25:b5:4e:4b:
                    64:e6:43:db:4b:64:de:25:a0:a5:38:a2:04:3b:13:
                    eb:f5:69:5a:b6:69:27:ac:dd:67:52:07:4a:ef:8e:
                    7c:a3:87:2d:04:9f:d3:b5:86:3f:76:76:de:71:af:
                    4c:2c:bc:db:c4:28:0b:a6:d5:be:44:29:c6:6e:2b:
                    16:9e:56:2c:50:d0:b5:79:e1:05:8c:df:b8:27:f7:
                    84:73:5e:4b:c7:fb:a1:00:eb:f2:39:a5:62:89:2c:
                    3f:c7:4d:c5:a8:c9:00:0f:0c:27:37:cc:a6:52:1d:
                    80:1d:5a:b2:a7:66:b8:c6:81:32:ce:1b:24:0e:28:
                    2c:67:21:82:de:d6:73:41:94:ce:f4:be:96:24:f0:
                    0c:c2:03:64:ac:1d:b4:30:3a:37:be:34:77:47:22:
                    c0:28:e4:c1:5a:b7:ed:14:b3:2a:7b:2e:63:d7:b0:
                    e3:34:35:34:88:d1:25:83:2c:40:7b:6e:59:17:c1:
                    32:56:83:62:75:5a:04:37:43:03:98:98:f7:05:e9:
                    ce:7b:c4:fd:32:d7:c0:d3:18:d3:c9:25:5c:64:5e:
                    99:a4:0c:af:db:10:47:78:df:99:3d:62:64:cc:9f:
                    74:35:eb:15:18:b5:62:b9:62:69:d8:42:42:8e:24:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:15:CE:CE:BF:3C:BB:BB:99:8D:D5:1B:86:91:03:8D:01:A3:90:D3
            X509v3 Authority Key Identifier:
                keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:62:dd:18:c3:06:cf:ae:a0:72:9d:02:bd:bc:4f:29:39:5a:
         ec:b5:3f:a8:5d:dc:9b:d8:cf:59:f8:37:94:03:b2:d7:38:62:
         38:57:85:e3:6c:a8:d8:b8:36:3a:8b:5a:8e:ee:e2:12:95:38:
         58:65:7f:7c:6d:f8:02:6a:ad:2e:f2:af:54:55:c6:56:eb:70:
         e3:64:6d:39:4b:a9:6e:d7:f5:ab:3f:f8:33:db:14:ef:28:2b:
         f6:2c:b4:e7:99:c9:85:bd:87:d1:06:d9:77:95:05:5d:ee:15:
         89:d9:20:be:42:30:1c:c9:82:78:32:d0:ed:33:a4:74:3a:84:
         90:70:1e:3a:78:b9:cc:13:f7:f5:9c:41:86:fe:3b:32:e0:6b:
         09:f6:43:19:4d:08:07:77:67:54:2a:22:19:e6:0e:ac:fa:7d:
         49:6b:26:a8:8e:6b:8a:33:9a:bc:85:44:00:30:53:22:68:f3:
         45:c7:1a:05:c8:05:d6:52:27:2c:ec:0a:0d:36:a1:34:58:61:
         25:51:b1:0a:3a:6c:3d:67:e8:61:70:cf:8c:60:c7:f3:4d:da:
         a8:86:fb:9d:61:4b:a0:f7:9d:62:eb:56:08:27:30:b8:2f:80:
         ee:39:da:5e:3d:a9:99:25:16:97:98:20:3e:f2:26:1e:97:48:
         d6:01:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:41 2024 by rpki-client on console-fra.rpki-client.org