Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File:                     tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier:          muLw1U7XlO0kzqVl3Oq2VihdE9iTZqp7qtVjlnnZGes=
Subject key identifier:   6E:41:4C:06:CD:21:2C:94:44:06:20:A3:D3:3B:9E:32:6D:E3:08:C8
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer:       /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial:       019369D991372989D25A062E8533E2168F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number:          0C49
Signing time:             Tue 26 Nov 2024 19:01:26 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:26 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:26 +0000
Files and hashes:         1: GEpKy_gDNk7dmMu9TbaDtO4Ax9I.roa (hash: +q+XbCFbZwSUzRB/pKV//eMyxxZ+uN2JVEKmqnucr8Q=)
                          2: hRMOaUHeEjef81WhvI8wv4LF0fM.roa (hash: NqJ3x/MYCjsJ6LIE925pIo0Wvta9x/LKcCiWmrT3wvg=)
                          3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: cQgtHJgD84fh3Mhm4EMN4zRhYj4XsU540gm4mwnDEeY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:91:37:29:89:d2:5a:06:2e:85:33:e2:16:8f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
        Validity
            Not Before: Nov 26 19:01:26 2024 GMT
            Not After : Nov 27 19:01:26 2024 GMT
        Subject: CN=6e414c06cd212c94440620a3d33b9e326de308c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:c0:1b:07:08:40:86:f0:a1:98:80:8c:8c:
                    99:8f:bb:e0:89:0d:3d:9d:38:bb:eb:60:42:e6:f5:
                    16:18:76:c2:54:c3:7c:3c:28:50:9c:59:fc:e6:5a:
                    7d:fa:ab:c5:44:9a:aa:9f:8a:65:c2:24:91:8d:4c:
                    e2:9c:91:f3:4a:bf:3d:d8:a1:41:97:22:6c:95:20:
                    94:c0:d1:9e:0c:4e:91:c2:d4:2e:f7:74:db:5b:d0:
                    a0:bb:27:4b:19:6b:cb:2e:ed:30:c8:91:48:61:d5:
                    18:7f:f5:54:01:57:d5:c3:14:29:09:08:aa:a4:95:
                    77:8e:2f:d1:f9:75:62:f6:04:65:ee:2c:ce:d0:d5:
                    af:18:26:a4:3d:1f:20:67:9f:f0:42:76:99:1e:ac:
                    a9:78:7e:db:ac:48:c4:f1:5a:d3:5b:94:12:a4:6e:
                    c6:c6:da:30:44:97:5f:b6:21:7f:c3:23:78:a1:7c:
                    ab:dd:92:9f:73:71:dd:0e:09:d7:a3:1b:a1:9a:d2:
                    de:49:49:61:2d:15:37:8b:3d:f7:56:0c:1e:c4:f9:
                    52:85:64:1e:63:f8:bf:61:15:89:ab:cb:56:5d:c7:
                    5d:ed:b5:3c:30:69:cf:76:f7:28:58:54:d8:2d:d1:
                    81:2e:c7:5d:75:d5:2d:87:6e:21:5b:6e:fd:b5:12:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:41:4C:06:CD:21:2C:94:44:06:20:A3:D3:3B:9E:32:6D:E3:08:C8
            X509v3 Authority Key Identifier:
                keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:c8:8f:d5:6e:50:b2:16:f3:37:38:2e:5a:0d:ec:3f:d8:
         05:56:65:b4:51:f5:5f:4b:6f:d6:1d:58:69:80:b2:f1:12:14:
         0a:cf:64:35:38:97:c0:0d:ba:29:74:07:71:41:b3:20:af:63:
         35:c6:52:9a:de:d6:21:77:e6:80:33:f4:91:cd:ab:e6:f0:5f:
         59:18:67:6d:65:c1:4a:12:72:4e:73:a2:ba:db:09:6a:c1:ed:
         20:4c:71:ae:92:3c:79:76:48:97:7c:e9:6a:42:78:fc:2b:da:
         27:9e:d2:c6:1c:df:06:b1:46:b1:b5:33:26:1f:16:15:c1:d6:
         7d:87:9b:b1:9b:da:10:a2:f2:38:d8:3b:e3:32:2f:47:66:56:
         3a:74:65:f9:70:30:d9:19:e5:47:53:bf:d6:6c:38:20:69:41:
         c7:9f:96:7b:62:d9:c4:7e:ec:37:cb:6d:7f:db:1a:10:51:52:
         62:9f:dc:b6:61:86:1b:50:fc:2b:88:a5:e9:46:4c:33:ae:66:
         4b:3d:48:85:0b:db:b7:c9:3c:40:04:1c:02:ec:95:db:40:b1:
         0d:b1:c0:14:92:19:8b:36:8d:10:5d:6c:98:5b:b9:9a:7a:80:
         12:bc:5d:95:22:e0:57:50:be:f4:46:c3:1f:00:e0:48:90:0e:
         1c:01:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:30 2024 by rpki-client on console-ams.rpki-client.org