Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
File:                     bss_s76ozI4249p9nEcEm_xv-xQ.mft (raw, json)
Hash identifier:          vDgzQbFmF/A8oGe6NeptsU/o0CufPDBopTTIAi/i7b4=
Subject key identifier:   BF:33:89:21:5F:06:93:8C:92:31:DC:F9:68:7C:75:69:8A:AD:31:4D
Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
Certificate issuer:       /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Certificate serial:       019369DAA51EF2B416F8F1A07CA05D6623F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 19:02:36 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:36 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:36 +0000
Files and hashes:         1: 1ffGi8YZYZjM0LTAmQ0mF7JOG80.roa (hash: Gj9aNpA2NGkLcQmQXjf4RVLt8+Z2sZgCcTlVw3h89uA=)
                          2: 4u6__k1J6QjYFgg9L-jMwtPUcM4.roa (hash: FU/ttt+OsafLEcAmmHsjKyW4pS36bgL1aiYUASSTVB8=)
                          3: 6bBGc2KjC72Elt_3014E5z9r2K0.roa (hash: /C/JmZJgKUNjt8zv9Dhxvt9cKz1TGxrw4XPz6dly2DA=)
                          4: Jets4GFTC9FOTixDIMjE7i4eK30.roa (hash: ndu0crd+O0Tz75oYp9h+E0BHRU0q39rMuCU6Ymz4tOE=)
                          5: bss_s76ozI4249p9nEcEm_xv-xQ.crl (hash: wiz1cy5GPncaOzi6NISK6vudDJp/NnOFzJEt5d4JblQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:a5:1e:f2:b4:16:f8:f1:a0:7c:a0:5d:66:23:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
        Validity
            Not Before: Nov 26 19:02:36 2024 GMT
            Not After : Nov 27 19:02:36 2024 GMT
        Subject: CN=bf3389215f06938c9231dcf9687c75698aad314d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:99:e4:4a:4c:68:6b:c4:c7:68:f4:fd:37:
                    92:a7:ae:59:f0:f6:93:ab:70:48:83:42:52:8b:5a:
                    ad:3e:91:93:ba:a4:68:80:fa:75:55:a6:c7:b4:f3:
                    b5:76:90:81:da:3e:3a:e2:65:80:27:f9:df:50:04:
                    ef:18:4c:44:8f:34:96:9e:49:63:5a:00:71:9f:e2:
                    fd:fe:0a:7f:65:6a:d2:6f:40:ac:82:e5:0a:ec:63:
                    97:2d:fd:88:db:1b:73:98:72:4e:f9:85:9b:1c:80:
                    84:1f:ed:60:22:f1:d9:8c:11:06:eb:18:94:b8:85:
                    45:2f:a2:56:a4:79:89:58:dd:73:48:08:0c:15:81:
                    09:32:ff:15:15:00:4f:20:8d:8c:5c:80:06:18:8a:
                    8b:08:36:2e:95:15:17:de:68:98:fd:92:d6:78:6f:
                    99:9f:f1:cc:dd:14:66:96:31:93:b0:2e:ef:06:30:
                    55:e4:76:80:b7:e7:ed:af:a9:e0:dd:f4:ee:af:98:
                    87:90:bb:cd:8d:24:8f:1e:b3:fe:90:91:b9:35:00:
                    01:c3:2b:e5:dc:80:71:c2:b0:93:8f:c4:ac:a6:45:
                    13:77:72:01:a8:6c:31:de:04:ee:81:90:c7:99:e1:
                    bc:d4:e6:03:b2:93:7a:40:73:05:d4:04:ab:3d:08:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:33:89:21:5F:06:93:8C:92:31:DC:F9:68:7C:75:69:8A:AD:31:4D
            X509v3 Authority Key Identifier:
                keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e7:a7:47:8b:18:1f:7b:7c:fa:0b:7e:15:31:f3:4a:5b:a4:
         77:77:8f:9f:57:de:23:46:5d:bc:8c:12:89:79:fd:f1:6d:50:
         09:02:1d:6d:6b:f7:41:73:d9:fb:f9:5b:1a:6a:11:33:fd:a0:
         e8:45:b3:f0:64:94:f8:2b:bd:48:f1:34:b8:57:bb:5f:d0:b9:
         bf:24:c7:40:cd:a2:15:a7:ab:ac:3e:0c:b7:03:d7:72:27:61:
         5a:19:15:f9:e2:4b:47:d9:cd:0f:35:13:0b:9d:31:60:b6:0d:
         5c:20:aa:32:0d:8f:7f:3f:41:6f:33:e3:d4:61:26:65:b5:ec:
         c5:4d:ee:7d:e5:12:9a:00:00:2e:45:fb:76:1c:0a:69:9b:23:
         ff:8f:7a:d8:ac:e9:af:63:cb:a6:ec:a1:8f:ba:de:7a:f6:0d:
         15:3c:9d:ca:c8:97:e6:eb:3d:8b:48:69:7a:50:79:28:a2:81:
         e5:2d:b8:b6:7b:48:0a:fa:1a:ac:77:e3:83:49:7f:cc:63:52:
         bc:f0:d0:da:32:32:61:a7:e1:93:ca:32:17:cb:72:64:51:5c:
         31:03:71:29:4a:b7:c2:ef:eb:a0:5c:2d:79:2e:e1:56:ad:6a:
         20:8b:3a:3d:c7:2d:9a:9c:18:b9:06:50:2a:48:3d:d4:89:7c:
         27:fa:43:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:35 2024 by rpki-client on console-ams.rpki-client.org