Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File:                     pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier:          6gs/WWj98u1oiyOMEiWK6QXjhrERlOMXq9lEVcBp2fE=
Subject key identifier:   3F:8D:B7:C9:19:E3:55:A6:74:4A:62:FB:D8:20:9F:FC:E9:BD:07:47
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer:       /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial:       01935689655A10FCF6531180444D5C1CA5B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number:          09BF
Signing time:             Sat 23 Nov 2024 01:01:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:05 +0000
Files and hashes:         1: LZJEHbKL_SqRndT4DSHOsWJ5K70.roa (hash: Lvu9fV08eqS0IELcm3umw5xzHsRXh4moV0oB8qvWeDA=)
                          2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: M9UTPRRSlbybRU68jMLBwu9t4fFx/p78S7rTu1gt5B4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:65:5a:10:fc:f6:53:11:80:44:4d:5c:1c:a5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
        Validity
            Not Before: Nov 23 01:01:05 2024 GMT
            Not After : Nov 24 01:01:05 2024 GMT
        Subject: CN=3f8db7c919e355a6744a62fbd8209ffce9bd0747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:f7:47:ed:35:a7:64:9b:68:aa:5a:2c:60:
                    22:f0:9b:c7:de:9e:dd:65:a6:68:e6:1f:0e:a1:28:
                    0a:dd:23:a8:9b:d5:f7:46:5e:c6:39:11:9b:5b:78:
                    c0:8c:d8:d2:c6:7f:23:37:ab:95:c9:f2:88:d8:6f:
                    9d:3e:12:0b:6a:02:17:b9:42:d8:0d:c0:af:b0:e8:
                    1c:ce:84:96:00:5d:88:e8:0d:8f:52:a6:69:a1:8c:
                    3c:99:d3:93:04:30:51:7a:0e:4e:4c:e3:23:3a:10:
                    f3:09:0c:96:88:d7:25:b5:ca:2c:03:6d:79:4b:79:
                    50:d9:30:af:c7:e8:5a:21:2b:99:ff:13:1d:ff:b3:
                    69:a6:11:6c:d3:81:19:89:9b:91:5a:6b:64:c7:06:
                    31:e1:de:c7:d0:70:09:d5:53:6f:9f:3c:0b:f9:12:
                    a3:36:b1:ab:17:52:55:df:e5:b7:13:ac:29:ba:09:
                    c4:61:d7:0c:67:a1:2e:f8:cf:90:1e:ed:a8:23:92:
                    39:2c:55:94:1a:46:b2:5a:bf:ec:ef:2b:db:f9:b4:
                    59:d9:9b:32:29:07:c0:1f:a4:23:6b:da:a9:e8:62:
                    ee:5b:75:0a:f4:e1:dd:85:41:30:73:92:1c:37:a9:
                    cf:82:3d:7d:58:60:7f:90:bb:e9:46:f3:85:58:20:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8D:B7:C9:19:E3:55:A6:74:4A:62:FB:D8:20:9F:FC:E9:BD:07:47
            X509v3 Authority Key Identifier:
                keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:44:98:1e:de:66:35:80:b3:0b:05:30:c7:a8:4d:fe:a9:d2:
         3a:07:a2:85:76:35:a2:4b:52:92:26:40:18:e3:7f:b8:2e:6b:
         7d:df:8d:26:bb:87:b5:65:e1:b3:f7:07:94:c8:c7:db:84:c0:
         2b:f6:b7:40:1f:ce:a3:c5:a4:e5:38:25:36:8b:62:f9:2f:42:
         47:bc:5d:91:3e:07:88:8c:be:20:a1:c0:2b:f5:43:d9:69:b3:
         ea:23:59:2c:74:aa:d8:8e:dd:dd:6d:ad:5b:46:cb:83:6b:eb:
         55:87:2c:54:0f:69:3f:c0:b7:f9:fc:c9:07:c2:0f:48:10:3e:
         5b:2e:4d:92:9f:70:fd:55:3a:6e:83:b9:1d:63:92:a8:68:dd:
         ff:dc:e5:27:e4:cc:82:e7:e1:09:f9:3d:37:f7:7a:1a:e8:9c:
         99:bf:c6:b3:68:69:a1:1d:88:e8:6e:fc:ea:88:a1:95:8f:51:
         9f:3a:21:aa:2d:61:03:dd:1d:ea:b9:bd:58:a7:e2:cb:5d:02:
         03:cf:05:22:ba:06:ad:05:36:fb:9e:b2:0e:a4:bf:4e:f0:61:
         76:8f:e2:93:02:45:16:7e:2d:22:ce:47:7f:26:85:28:19:ba:
         54:8f:0e:da:48:58:9f:49:8a:d5:ff:c2:de:43:bf:12:6a:dc:
         5c:f5:91:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:57 2024 by rpki-client on console-ams.rpki-client.org