Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
File:                     sLakm8wQ3jQOOdID9WZYvX1kjd8.mft (raw, json)
Hash identifier:          wV9WoW/KhizM5oKODHgGuugMGvA6jeGzherzNgzkero=
Subject key identifier:   69:A0:66:9E:94:A4:E0:B5:B9:EE:D1:A2:21:9E:5B:CA:8B:E1:FD:6B
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Certificate issuer:       /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial:       0193688F1D9245DF7CBDF695642B9ACE1F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
Manifest number:          10BF
Signing time:             Tue 26 Nov 2024 13:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:29 +0000
Files and hashes:         1: fCmZ2FJN1nKOioZi5I3N2ZVkrXU.roa (hash: 3DEbFUGRAX9tZ6C+aWYztr0T+vnKLb3Ge5Sf22AvSxc=)
                          2: sLakm8wQ3jQOOdID9WZYvX1kjd8.crl (hash: sbBnYdha2KrOmUWVgBytL0kjqQPR71FqypgTLDhxvHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:1d:92:45:df:7c:bd:f6:95:64:2b:9a:ce:1f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
        Validity
            Not Before: Nov 26 13:00:29 2024 GMT
            Not After : Nov 27 13:00:29 2024 GMT
        Subject: CN=69a0669e94a4e0b5b9eed1a2219e5bca8be1fd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:64:25:62:af:00:20:2e:ec:93:8c:91:88:
                    fd:6f:d8:f1:12:c7:13:df:d9:40:70:a4:56:f7:2f:
                    e0:07:89:d9:73:dd:52:90:87:52:31:d2:9d:d6:58:
                    44:8d:95:e2:51:d7:98:a8:7a:24:b6:8b:0c:7d:29:
                    dd:37:f9:76:27:0e:41:15:e5:24:72:5d:28:c9:d0:
                    bb:c6:eb:25:bf:ba:b2:23:c8:fa:f1:ae:3e:d3:a8:
                    6e:82:41:19:95:b8:71:e7:da:b3:3d:76:a4:80:1b:
                    a4:3f:db:65:8c:46:05:13:9d:89:eb:ac:80:f6:c3:
                    e7:83:23:c3:b7:98:93:37:28:98:9d:e4:df:c5:a4:
                    cf:8f:f5:77:19:dc:41:5f:9e:6a:1f:b3:31:dc:9a:
                    f3:fb:54:8a:7a:2c:91:59:a0:a8:d0:ba:62:60:31:
                    4a:59:d5:f9:3c:41:21:63:d8:09:c0:2a:14:29:7f:
                    24:b6:bd:e9:66:90:26:fa:bf:13:f1:88:d2:c3:f9:
                    f9:46:91:c0:c7:32:c3:cb:b4:fa:30:da:f4:aa:5e:
                    ea:32:c9:7f:e0:3d:b9:14:aa:63:eb:a4:a8:d4:49:
                    9b:83:98:ab:2d:a1:12:57:46:14:56:e6:c9:2f:6b:
                    1a:d4:98:48:bd:e6:cd:88:dc:ac:69:91:39:8e:e1:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A0:66:9E:94:A4:E0:B5:B9:EE:D1:A2:21:9E:5B:CA:8B:E1:FD:6B
            X509v3 Authority Key Identifier:
                keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:29:77:d3:92:a6:94:f1:47:bf:77:ba:51:76:dd:be:56:4b:
         2c:5e:8f:9f:69:a1:80:ee:ed:49:63:5d:a7:51:ac:c2:ea:c1:
         97:b3:d5:27:2f:06:ed:f3:fb:58:1a:12:28:e2:28:22:9b:2b:
         69:8a:7b:e1:a9:7c:34:bd:ed:2d:67:18:73:bf:54:ce:ac:33:
         4f:ca:40:95:e3:d7:62:a3:59:6f:22:cb:48:54:b4:d5:13:35:
         5d:63:e0:5e:b1:aa:0b:a6:f7:70:cc:f0:08:b8:8f:4e:8f:52:
         76:07:ff:05:7d:78:c0:d4:86:d6:7c:ee:8c:32:95:24:7e:9b:
         0c:87:04:15:39:31:f8:cb:10:d3:78:ba:32:28:3e:a0:60:20:
         e0:5a:35:da:1d:5e:2b:bc:1a:a5:74:4a:1a:ff:91:40:89:6a:
         3d:44:38:5d:dd:38:36:d1:04:f4:52:9a:eb:c9:75:6c:63:8b:
         b2:73:8d:a3:c4:f7:05:04:57:03:e6:5f:d0:46:3b:9c:6c:21:
         e7:90:a6:a0:2e:68:6a:53:93:b1:91:77:13:13:60:16:5a:23:
         d7:75:5b:26:d3:9d:c3:27:dd:6e:d6:6e:f5:d9:12:53:b2:3b:
         76:85:73:64:38:36:e1:02:11:86:10:c4:23:7e:50:41:78:cb:
         34:fd:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:30 2024 by rpki-client on console-ams.rpki-client.org