Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File:                     1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier:          BUELj43vnH9MdvwcCC2LyIla5xvk5gOHAI06IjGVlTE=
Subject key identifier:   4C:C4:D6:F9:95:3A:45:47:1F:A2:A2:1B:AE:E4:7A:CD:33:32:C5:7A
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer:       /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial:       019356BF7FBDF1319834D1668A636C9D621A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 02:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:10 +0000
Files and hashes:         1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: z3CBVUYi5A/AAw+pQ+/X72wdfMBq7ZzIoiA5xzY8lx0=)
                          2: JMSYg9obBYNMUz-REwRLG4WwiwI.roa (hash: gWXkhgjCHu7hwpuJYCM6ImqFUCKJCoTxsKC6SjB1SBU=)
                          3: mP813yLtGa0C_KgKDqjO6_4QLAA.roa (hash: gbqYtp/+9kkCctWkcxfoAcWPo9CQEiI1jqeuzTrrv8w=)
                          4: nY9WTpmUEGZkmE_VupP-WWfJl-g.roa (hash: dZOgOkwi1dT5Nr+d5x9P6LSsn+TYCydDKYrdJavua7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:7f:bd:f1:31:98:34:d1:66:8a:63:6c:9d:62:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
        Validity
            Not Before: Nov 23 02:00:10 2024 GMT
            Not After : Nov 24 02:00:10 2024 GMT
        Subject: CN=4cc4d6f9953a45471fa2a21baee47acd3332c57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:16:d2:78:bd:01:38:dc:98:81:2d:cb:05:
                    98:35:4c:d2:c7:77:1f:d7:28:84:ac:8b:ae:9b:b0:
                    38:d6:48:37:81:3b:34:64:26:74:05:fe:67:74:09:
                    4e:cb:2c:44:a7:f8:e6:e8:84:91:b8:c0:40:49:9b:
                    70:aa:fe:6b:f7:2a:49:e1:cb:52:76:1e:1f:1f:aa:
                    79:df:03:8e:2a:5a:b9:52:ed:cc:2f:7f:5e:81:15:
                    b6:69:bf:c4:10:f0:47:57:37:1e:9e:4b:7d:d9:e4:
                    46:58:d7:a2:f5:36:5c:f5:75:6c:b9:f1:f6:20:12:
                    e5:e2:73:ad:72:eb:9a:f8:e2:ad:a8:f4:4f:a3:75:
                    ae:78:3f:8d:eb:cb:b4:05:5b:74:b3:e9:a4:1a:13:
                    a5:30:36:14:26:90:ec:79:18:bb:90:3a:a5:6f:7f:
                    9a:73:3f:56:7b:2f:44:04:a1:4a:ea:0c:18:4c:97:
                    5d:98:ef:57:45:ee:ee:c5:20:ff:d0:d0:b8:c4:36:
                    67:f3:42:58:87:48:a9:7f:fc:d5:96:d1:15:6b:90:
                    c4:9d:d2:29:16:17:04:6a:60:b6:68:da:a3:83:e1:
                    1f:71:9e:0d:9c:15:2c:39:25:f4:d4:dc:e8:27:f1:
                    70:05:29:8c:62:96:14:01:a8:26:50:62:7c:ba:f9:
                    4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C4:D6:F9:95:3A:45:47:1F:A2:A2:1B:AE:E4:7A:CD:33:32:C5:7A
            X509v3 Authority Key Identifier:
                keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ed:86:ba:b7:b8:96:c6:18:c4:8f:34:90:03:46:d3:b5:5f:
         07:8f:1a:a0:26:91:4a:9b:bf:58:45:02:08:55:5c:57:c8:3c:
         3b:89:42:82:2e:c2:0b:42:5c:16:2b:d9:27:39:11:82:de:be:
         4d:de:db:3d:27:ae:f7:86:8f:30:81:4f:36:e4:f0:1f:aa:25:
         36:c6:db:3b:83:e8:22:50:58:71:c6:99:62:49:50:7d:ff:ef:
         c7:ff:14:54:48:17:04:8c:df:af:3b:97:1e:bb:8d:a6:70:ed:
         24:36:7a:58:67:3d:a3:d0:eb:09:96:d8:ba:85:16:a0:ce:72:
         96:0c:e5:86:d2:35:57:b3:5b:61:df:40:4b:a7:f1:fb:84:a6:
         20:f1:27:61:3c:a7:77:9e:96:ef:a2:7f:ee:43:a0:6b:1a:fe:
         75:64:6a:5d:9d:84:d0:88:22:2a:64:f9:54:86:5e:ef:47:5d:
         b1:9e:fc:6c:62:e8:ed:ad:d3:6f:d1:76:e5:d8:29:b0:e7:0c:
         f5:4a:58:0c:da:4e:4e:6b:52:e2:06:b2:c3:3d:97:95:d0:c2:
         d9:f6:f0:81:5e:74:d7:55:2a:46:97:8b:92:3f:23:f3:5b:e8:
         c0:49:4f:f4:3f:41:6a:f0:5c:3a:de:9e:1d:f8:66:fd:2a:e5:
         93:43:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:11 2024 by rpki-client on console-fra.rpki-client.org