Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File:                     bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier:          1EpdEc2bn0zVoNyl3xlTIAjdZPeaI4ead8ukNoDNRcs=
Subject key identifier:   6E:7C:34:07:6D:10:3F:A4:11:6E:B8:96:BD:C4:78:C7:32:F6:41:D6
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer:       /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial:       019358093A1DEEEDB6814EDEC1CE19D6FD8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number:          01E8
Signing time:             Sat 23 Nov 2024 08:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:19 +0000
Files and hashes:         1: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: fko3dnzstMqx/++C+WSYdPMnhxmmtDFHx65Z0OGxHcg=)
                          2: m9lk8mh67iXsrXtO1Q9ZlVmzyso.roa (hash: 6U+Ukpy0eAFkcjqhCJnjtbY5cVqEEkb6jaTe4U9G4bI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:3a:1d:ee:ed:b6:81:4e:de:c1:ce:19:d6:fd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
        Validity
            Not Before: Nov 23 08:00:19 2024 GMT
            Not After : Nov 24 08:00:19 2024 GMT
        Subject: CN=6e7c34076d103fa4116eb896bdc478c732f641d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:bc:c5:02:f3:20:78:74:bf:7b:b7:9d:f7:
                    42:f2:c5:55:bb:d5:82:e0:4b:f8:85:e9:13:cc:aa:
                    f0:7b:a1:28:f1:2a:a4:1e:5d:61:ce:67:b0:c6:4f:
                    7d:42:29:25:21:2b:ad:18:f0:b6:c8:8a:9f:97:00:
                    47:d9:1e:97:94:1b:78:44:f6:af:4e:0e:7b:d8:38:
                    f5:09:6e:51:15:af:23:8d:82:60:c2:a7:45:b5:4b:
                    f0:78:3a:cc:08:b5:b6:1e:47:4a:bd:2c:07:58:ad:
                    f1:dd:62:af:12:18:68:c9:82:2e:10:a4:4d:69:fa:
                    f7:a9:d8:60:60:15:52:5f:21:a9:ba:23:8b:8c:4e:
                    bc:8f:bb:86:f1:54:f4:00:92:d9:69:5f:62:41:94:
                    93:0d:e2:c9:bf:2a:7f:a8:b8:a0:6f:99:a5:9d:aa:
                    e8:eb:df:39:4b:8a:46:cf:0e:41:69:6b:8a:ff:a5:
                    8e:c5:df:cf:18:c8:85:2c:c8:bd:2e:ef:27:0f:22:
                    1d:ee:d1:23:10:35:ad:d4:cc:b3:ac:7e:0c:c2:fd:
                    9f:d5:85:01:3c:41:67:80:af:2e:3c:3b:aa:51:f9:
                    72:13:f2:e5:05:c2:6f:36:ed:e4:45:26:1d:4e:ba:
                    81:73:3b:59:32:5b:cd:89:53:bc:13:61:3c:22:10:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7C:34:07:6D:10:3F:A4:11:6E:B8:96:BD:C4:78:C7:32:F6:41:D6
            X509v3 Authority Key Identifier:
                keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:77:16:c9:e0:12:c6:62:8c:19:20:9d:ea:86:2f:0e:16:ed:
         d6:64:1e:3e:12:e8:c3:57:38:f2:98:e9:1d:2a:1c:15:a3:49:
         a7:7a:31:67:b6:bc:12:4b:64:2c:06:6b:8d:4b:17:35:2c:d7:
         4e:36:12:69:93:b2:c1:02:b8:94:e0:ab:91:8a:32:9f:05:cc:
         c8:6c:ba:27:30:e6:86:f5:46:a6:fa:2d:db:42:be:f9:29:de:
         f6:26:13:ff:a0:2c:23:01:e1:45:8d:ea:fd:7e:b0:60:c9:55:
         19:ff:03:6c:cd:31:0c:7f:e6:85:32:b4:06:b4:76:bf:42:e2:
         e8:47:5b:e8:84:09:9d:ea:e7:be:f1:4c:de:02:cc:f6:15:51:
         97:41:ac:2d:48:5f:01:98:38:ef:b2:d0:86:e9:09:a7:82:e1:
         18:d7:9a:3b:dc:95:b9:18:ce:92:cd:c3:f9:3b:a2:21:19:71:
         3e:53:68:0d:6f:28:fc:39:40:5f:c5:9d:9f:f4:69:a5:ea:c8:
         86:c8:59:1d:2c:5f:94:8e:39:2e:51:77:27:4f:74:e4:8d:58:
         56:50:a8:95:b0:3f:e4:05:da:1e:2a:af:eb:14:78:e3:f0:9d:
         74:59:67:60:cc:18:7c:69:21:60:6e:3a:29:23:46:b5:96:e6:
         ce:a7:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:42 2024 by rpki-client on console-fra.rpki-client.org