Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File:                     vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier:          cIunixpqlGPH8AJwy6odBEzNYc4xMn4P7BFl3iCFmjA=
Subject key identifier:   45:69:4C:CD:26:75:9C:84:13:79:91:F6:91:E4:7B:0C:D3:E7:A8:1B
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer:       /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial:       019358403A3AFB48C937E0DCE250DEC06B34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number:          0610
Signing time:             Sat 23 Nov 2024 09:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:24 +0000
Files and hashes:         1: fSsSofWUHpVpcaCiOnyni_fMMfE.roa (hash: FO5zAc5O8haqhhRyNjo4gAYi/n3wY9cmAk3QkXwFs7U=)
                          2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: LJLBPVGVgf6er74GIwjniQKvE3cVzRq77AbUiDXLrSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:3a:3a:fb:48:c9:37:e0:dc:e2:50:de:c0:6b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
        Validity
            Not Before: Nov 23 09:00:24 2024 GMT
            Not After : Nov 24 09:00:24 2024 GMT
        Subject: CN=45694ccd26759c84137991f691e47b0cd3e7a81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:5a:2e:14:2d:82:d2:a9:e7:16:a1:e7:50:
                    4d:6b:53:92:9b:91:49:41:a5:6a:d9:86:48:aa:37:
                    0e:82:3d:d4:86:be:b9:c1:fd:8b:2e:19:6d:74:36:
                    e4:dc:57:e3:e0:ee:66:76:c3:6d:0b:43:1f:fb:d2:
                    04:d6:a8:9d:a7:6e:3b:7e:41:74:c2:40:40:22:4f:
                    79:5d:7f:39:16:b0:01:6f:f2:ba:a9:b4:c2:a5:4a:
                    fa:b0:85:3c:95:6a:2b:5f:c6:16:8d:86:ad:09:b8:
                    d9:f0:6f:b9:18:02:da:0d:39:24:26:84:a3:37:22:
                    cd:a5:f6:50:b2:81:23:79:82:d9:19:81:f3:06:d5:
                    ef:3f:c4:73:a4:48:40:75:1a:5f:74:03:0c:32:c3:
                    bf:88:06:97:16:be:e0:99:e1:5c:ca:53:10:40:4c:
                    55:e0:a3:2e:d4:1c:43:78:15:d5:05:af:c6:c3:f1:
                    a1:81:46:b0:77:bd:3e:53:84:2c:79:c2:c4:f2:fd:
                    21:d1:57:c4:be:76:48:77:a8:94:93:d7:09:48:b9:
                    bd:0c:fc:ec:42:f1:9f:c1:87:3a:f5:6a:19:94:58:
                    54:9a:89:cf:58:0f:84:fd:3c:8a:b6:34:13:8f:6f:
                    03:df:53:a9:75:90:1c:51:ed:14:b0:ee:64:10:fb:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:69:4C:CD:26:75:9C:84:13:79:91:F6:91:E4:7B:0C:D3:E7:A8:1B
            X509v3 Authority Key Identifier:
                keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:36:eb:ab:ce:ae:c0:54:21:99:cb:89:87:ba:7d:6b:af:a4:
         76:43:b0:76:67:a4:0c:b0:cf:23:52:d4:14:52:89:59:d8:97:
         6c:35:08:da:32:8a:10:b4:f6:ab:40:9d:23:db:83:47:3c:c3:
         67:87:8c:fa:3b:e9:40:fe:f0:a9:e7:e1:c1:f9:03:05:59:27:
         0e:1e:c8:48:c5:a3:2f:9b:7f:1c:53:7a:2f:04:c9:f8:36:a6:
         54:d6:40:99:89:44:6c:c9:7b:a0:fb:a4:c0:3d:5c:c9:e2:51:
         d3:b9:12:fc:dd:b3:c0:87:43:ac:83:24:ba:c5:7e:06:8c:06:
         15:5a:e8:c9:e8:d1:de:a3:9a:b5:4d:56:df:70:22:91:e8:4c:
         9a:68:c4:05:fe:21:6b:7e:6e:72:58:53:2c:79:12:42:02:08:
         b7:0f:d1:31:47:62:5b:35:4a:46:2e:3b:9e:6d:94:01:e3:bd:
         fc:ab:e1:9a:be:e3:e0:43:86:f8:d6:95:09:9d:a0:b0:29:e1:
         ce:db:98:22:05:44:7d:da:14:a2:e0:bb:05:89:b9:ed:e1:1d:
         da:fd:6c:89:2e:d3:61:03:f0:ee:c8:58:b8:d6:8f:a7:38:7e:
         a9:f6:25:5e:9c:14:14:41:d6:25:7f:9c:56:b2:84:21:59:45:
         ef:8f:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:04 2024 by rpki-client on console-ams.rpki-client.org