Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File:                     Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier:          g80BGhLB9x9F+mQLlpsbeUbqJAWVm0RriT7d2xHtxAY=
Subject key identifier:   A8:EF:67:7E:3D:B4:8E:7F:23:7C:81:8D:66:E7:BA:C1:36:1C:91:66
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer:       /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial:       0193553F74A70221E6A4F242D7A02AA793EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number:          0A60
Signing time:             Fri 22 Nov 2024 19:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:42 +0000
Files and hashes:         1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: Fy0+NXWPOOipKaTSbdlJyVE5X1jpxOXxpib9f4IQX78=)
                          2: KmrMWw-SpiymPWIlrLSCoDddkX4.roa (hash: V51qQ1tFXdQhQv6SJndzcfpocuqfhWFxCJK2YoeYOZ8=)
                          3: LL5qSPP3Ldsm-or0BFtm7MuLU60.roa (hash: u99LqKNqet4qPeahTFgmyfzZNiRiG2GMOM9hWO61vyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:74:a7:02:21:e6:a4:f2:42:d7:a0:2a:a7:93:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
        Validity
            Not Before: Nov 22 19:00:42 2024 GMT
            Not After : Nov 23 19:00:42 2024 GMT
        Subject: CN=a8ef677e3db48e7f237c818d66e7bac1361c9166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:df:e0:dc:f4:ae:75:1e:a1:83:11:03:98:
                    3f:a3:b4:9b:75:a3:a3:91:b7:23:2b:27:79:89:7c:
                    12:fd:e3:32:e5:0a:dd:bb:47:0f:21:4b:e6:d0:b2:
                    0b:49:ce:71:04:b5:da:34:7e:ee:85:f1:3a:1f:0c:
                    a7:18:5a:7c:b8:43:83:52:2e:6c:55:cf:0e:08:a1:
                    5f:7b:6a:75:d7:23:b1:f4:c1:16:c3:7c:da:3a:c4:
                    61:bb:9c:1e:28:ec:42:c8:3d:cc:37:ec:e7:c4:1f:
                    a9:8c:ac:04:63:0e:24:89:56:c1:24:1c:a4:ba:82:
                    fe:8d:02:f9:ca:5f:c8:f4:94:06:34:22:94:10:e2:
                    63:1b:bc:10:ce:04:50:5e:c4:83:df:da:7d:7a:9f:
                    d1:26:63:70:c5:09:c9:40:ea:86:b9:d1:30:cf:b0:
                    64:b9:06:e1:d3:1a:0c:6d:2f:63:8e:85:34:27:e9:
                    75:bd:18:fd:fa:05:aa:f5:8d:fd:b3:50:22:75:29:
                    84:2c:26:06:38:63:c5:f3:39:f0:fd:93:61:1a:94:
                    40:f0:10:c6:f3:9c:43:2a:2f:a6:40:19:9d:e2:10:
                    10:f4:af:2e:8b:f6:09:48:a8:f4:83:ca:57:12:fd:
                    63:c5:8e:2e:79:ce:51:b5:d6:d6:7d:3d:bd:e0:23:
                    41:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EF:67:7E:3D:B4:8E:7F:23:7C:81:8D:66:E7:BA:C1:36:1C:91:66
            X509v3 Authority Key Identifier:
                keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b7:a8:a6:d5:58:a3:f8:a4:f1:37:3f:79:2e:76:d1:2e:36:
         17:25:37:1d:88:1b:2f:be:b2:7d:8c:e0:41:77:a4:5a:19:cf:
         85:8b:87:5f:0e:90:b4:05:81:6a:e2:ad:0e:58:b6:6e:3a:b0:
         cd:98:ab:be:20:53:35:74:ce:47:96:92:6b:a6:3b:22:a8:e7:
         df:1b:0e:44:79:f5:c1:cf:77:e8:b1:3d:22:26:a2:99:f3:b6:
         e7:3a:44:87:6d:42:65:b3:f7:02:32:74:69:81:d1:38:d3:7a:
         9f:e7:3c:a5:d2:97:dd:9f:1c:dc:1c:34:95:22:3d:d1:c0:0a:
         c6:99:49:0e:7a:c9:31:e4:1c:4f:f3:07:38:42:bc:4f:e7:69:
         2e:d8:c5:a9:9e:e1:2f:43:a2:c7:f8:a6:5b:80:4c:c2:4d:97:
         60:4f:c8:96:7b:17:ef:eb:71:b3:bf:04:49:06:7d:d1:8b:c2:
         2d:51:45:15:26:01:0b:e0:8a:15:29:5a:60:db:cb:f0:84:78:
         c2:27:35:ee:40:1c:6d:0e:78:39:c1:77:46:f3:20:38:1f:fd:
         12:38:0b:1a:f7:f1:21:9f:94:db:11:c3:22:ac:ff:fa:42:0a:
         9f:ee:0d:12:19:62:a2:90:43:50:16:53:7c:c9:58:bf:3b:6f:
         b0:cd:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:10 2024 by rpki-client on console-fra.rpki-client.org