Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File:                     bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier:          3XKSKxQPlSGxfDoVHApYDqFL87XUF5jEE1NMhFPic0s=
Subject key identifier:   12:A4:CA:46:B3:C1:10:00:B3:0D:8F:EE:40:B6:19:23:4B:5F:11:DE
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer:       /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial:       01935989D00D3265553AC90A74A943896240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number:          0A56
Signing time:             Sat 23 Nov 2024 15:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:24 +0000
Files and hashes:         1: ASQCV7ISCNA9khNapLDcQfxE_RE.roa (hash: RCz+qng+VMmmzK1urenXb/2pz+f0lhdBPpL4c93pWx8=)
                          2: KWBpE_vq11TOYQtDQegGmCOxt3U.roa (hash: Axz5haOlAjNXcBpWePEphTyWnxv+RUAnuTUUa6E3SUc=)
                          3: MtNV3H76VBv8k53WlVvx0c0aOvo.roa (hash: sOOu6/a/RNv5da2LftcXJ/BJZSfwHHSJllefB0VVIIE=)
                          4: TF_cfHDtSrX1ZYMKzl0nyQ4BkoA.roa (hash: 6dDIM+tSI8QK5e0nzvdCzB7FRO2DYS67qDgkfQMI8xM=)
                          5: VcJ2Kgn-JXs45Lai3k_Nn6BKelY.roa (hash: BimJ7H6En08y1r+L3jMzwsa8J0FtFJkF8igD2hfgaEc=)
                          6: _fI-7S9ZgiooZeexXWA41atmup8.roa (hash: T1iMhU4XK6ZiMWqF6/v1zioJ/PqjpqoZAKVM15IZG14=)
                          7: bRmDT7jaQGYBSNOHB3YIpHs7dsE.roa (hash: wdFo6x3SOD184srcDqMVF4l61ZB51uRrx4aKmJgoWUQ=)
                          8: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: 8ShQKQlLbajHUC8QRipaIUouKTxYIAWlP0X+ww4m8Ds=)
                          9: n4VBQQv_gdS4dqFQ5X-txG6lUBI.roa (hash: UIGtIl4FIPZrFXAWgZHyN7SQhr0BJUp4kV9UC4avs7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:d0:0d:32:65:55:3a:c9:0a:74:a9:43:89:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
        Validity
            Not Before: Nov 23 15:00:24 2024 GMT
            Not After : Nov 24 15:00:24 2024 GMT
        Subject: CN=12a4ca46b3c11000b30d8fee40b619234b5f11de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:48:be:33:ba:71:fd:ff:25:7d:e4:2d:9b:
                    1e:1a:2b:60:cb:ba:cb:7d:ac:8a:d2:ff:ae:50:01:
                    c1:d4:77:4c:03:24:23:8b:77:2d:b8:02:9e:40:f4:
                    7f:cc:21:98:0d:07:b0:45:67:f9:ad:c2:3f:6c:84:
                    1d:bd:db:07:72:38:7c:c1:1e:de:00:56:94:ac:eb:
                    41:cf:33:e0:0f:a9:17:6e:79:4f:0d:2c:fd:4e:19:
                    45:20:40:9e:61:1a:4c:24:05:ca:5f:23:d3:71:49:
                    eb:73:8a:ad:0f:ab:2c:53:e9:c2:9c:db:64:f7:ce:
                    2c:e6:40:38:94:dd:e4:60:fa:4b:99:35:a9:cf:a1:
                    35:e1:e1:51:dc:f5:c3:8f:44:c3:74:f8:98:a7:59:
                    1a:0b:76:2f:5e:c7:22:e2:9d:67:2f:12:58:6c:11:
                    e9:93:c6:e2:66:f2:cd:ec:ed:21:19:23:45:30:eb:
                    1b:2e:fe:9e:00:2c:7a:fb:bc:c4:55:43:5a:30:4e:
                    d1:b3:b8:89:40:7e:18:e1:6b:15:53:58:cd:de:58:
                    6c:3c:48:c1:3e:6a:87:20:38:bb:5d:40:f2:d6:08:
                    32:d3:e9:6a:66:1b:8c:76:fe:20:e9:eb:c7:cf:18:
                    9e:a1:b6:aa:0d:ab:b8:8c:a7:58:cb:ff:9c:c5:17:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:CA:46:B3:C1:10:00:B3:0D:8F:EE:40:B6:19:23:4B:5F:11:DE
            X509v3 Authority Key Identifier:
                keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:00:5d:fe:e6:a3:1d:02:e7:a5:a9:46:ce:1c:a4:94:8f:
         4f:bb:01:b7:61:5e:b7:80:b8:32:cd:f6:84:33:6f:c7:fe:ff:
         5f:b4:ad:6e:54:ce:69:40:80:7f:48:ae:42:fe:44:1d:c3:8a:
         48:66:10:1d:55:f0:cb:95:38:c5:8d:8e:d0:d6:bd:b1:8a:f3:
         f9:87:e1:87:a4:bb:bd:7e:bc:9b:c2:74:a6:83:fb:33:ad:39:
         d0:1a:d9:b0:da:c0:91:9a:cc:ed:fd:44:6b:7f:c8:63:41:c4:
         44:0b:6a:df:a9:31:38:cf:0f:67:2c:58:33:b6:f2:48:fc:53:
         06:bf:3f:03:bc:2f:34:4f:1c:53:29:c8:7c:e4:b8:ad:bc:ac:
         ed:7d:14:ec:75:9d:29:29:ba:24:52:fc:38:a8:9d:34:9c:c1:
         a7:87:85:13:7e:dc:56:dc:ed:47:c0:25:9c:09:e6:7e:54:ac:
         c1:bc:0b:32:6e:b6:fe:13:ab:b5:1d:12:cd:a2:fc:89:7e:59:
         3a:ec:df:df:e1:bf:e7:71:73:62:8e:d4:b7:e2:c7:ef:96:79:
         e6:7e:48:b4:47:ff:c8:86:7d:2f:cb:6d:ac:3b:9f:c0:93:2f:
         26:41:60:a2:c3:ff:07:4a:81:12:35:b2:23:8e:2f:03:91:50:
         a7:d9:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:05:50 2024 by rpki-client on console-fra.rpki-client.org