Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
File:                     v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json)
Hash identifier:          kM3IgmuAo3CteDcfQCFkn+jcpFKECb0M35GeHsUxWsw=
Subject key identifier:   63:51:EF:89:33:E8:4A:69:55:C6:75:7C:01:DF:BE:8C:50:6E:9B:2E
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Certificate issuer:       /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial:       0193523E29B47A4444717354CA0504E637BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
Manifest number:          1376
Signing time:             Fri 22 Nov 2024 05:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:25 +0000
Files and hashes:         1: 6Wihf9vFW4LnNirisHS5t4ZEb00.roa (hash: U9Y2sCzE9v4D3TSwY0GE1IoU3EiawNNr23AvDr3BiXo=)
                          2: LBAPYASSvu5qlUE6hv2xicwQXrQ.roa (hash: lHeqOuVxi8IwwDndY/kV93P6GSnE4/CmQWGr5c3LIxc=)
                          3: ZtgSWNtF9UWTs3TCbvuDnnAl4e4.roa (hash: dOTEcO8IXvyMKQQnWPWkuq28624v0SB0tM7d+OQ+Fk4=)
                          4: bJe-5Pa0Cn_LBU_XJw9cJBEXLDY.roa (hash: 5yIjRscNzlYkBTKgSputHl4O6L18a4yb9iqX/FjClQE=)
                          5: uHrCo2U38g_3lTtpuHlznX5NC0M.roa (hash: NlBXsMlPafJW5FH/7hkKie1hBD3ZM92JbwsnxEA4V5E=)
                          6: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: P2X8hFArhUB8hYT7IBjhXQaxXphGW70RqVkrMdCPG/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:29:b4:7a:44:44:71:73:54:ca:05:04:e6:37:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
        Validity
            Not Before: Nov 22 05:00:25 2024 GMT
            Not After : Nov 23 05:00:25 2024 GMT
        Subject: CN=6351ef8933e84a6955c6757c01dfbe8c506e9b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:f4:b1:2e:b5:8f:6b:3a:dd:21:d9:ba:8e:
                    ff:d2:0a:8b:41:43:9d:c0:82:ef:65:d7:33:16:8f:
                    0d:a3:94:92:3c:f7:d2:03:6d:98:86:10:f0:69:4d:
                    5c:40:fc:90:8d:b6:c6:9b:f0:b7:41:92:65:4e:d1:
                    c6:bd:9c:88:9e:98:90:aa:bd:a8:97:8a:7e:21:6f:
                    dd:e5:62:ac:5a:49:26:c2:45:2a:aa:32:d2:8c:2c:
                    7b:27:7b:2a:bb:2d:08:ca:8b:33:51:f7:3a:f6:a6:
                    e4:06:08:01:a8:3f:61:66:cd:32:8e:1e:c8:f8:77:
                    22:3b:d7:5b:45:63:1f:ca:35:75:d9:11:de:9b:7c:
                    36:6b:4f:62:54:b4:b7:44:c3:35:4c:38:20:28:c4:
                    03:ca:da:50:40:0c:84:c5:28:95:be:66:0b:05:63:
                    10:a9:c5:71:a9:5d:a1:cc:3a:c7:4e:b3:35:ee:22:
                    f5:3b:74:cd:ff:68:f1:a3:ff:19:2b:ab:fe:12:04:
                    fd:d0:3f:19:31:4a:b5:9a:a2:66:ca:89:f2:d7:ca:
                    c0:8d:3f:70:8e:bf:89:29:99:b5:94:89:69:f5:08:
                    36:74:46:55:62:27:4e:f8:a8:84:57:76:30:56:68:
                    7c:b9:ee:c2:88:00:31:25:61:0f:a8:0f:61:77:8a:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:51:EF:89:33:E8:4A:69:55:C6:75:7C:01:DF:BE:8C:50:6E:9B:2E
            X509v3 Authority Key Identifier:
                keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:3f:ec:5b:b7:ec:ec:d8:81:16:72:f3:c4:60:68:41:12:
         ae:02:4f:fa:9d:fa:10:15:d4:47:ad:81:f4:82:0f:07:bd:15:
         a8:8e:d8:a8:58:1c:2c:cd:ba:9f:e4:13:79:61:00:7e:d2:74:
         94:2a:00:23:0a:e8:88:aa:3c:3e:49:8b:f7:2b:b5:da:89:27:
         be:44:48:d9:14:f6:9f:d6:dc:72:ca:b3:3e:b0:78:d3:bc:e8:
         2f:93:b4:9f:48:9a:c9:0b:af:90:97:01:bd:c1:73:03:aa:2c:
         3b:9d:89:0a:dc:cb:25:93:7b:12:81:e7:6f:f7:ee:1c:dd:15:
         07:04:76:e8:32:4e:51:78:e9:4b:7a:ea:91:e8:85:99:6b:6d:
         b5:89:37:b4:c9:1e:dc:50:04:c4:dd:c1:26:09:a0:b6:0b:0d:
         6f:2c:30:6f:4c:86:48:b1:4f:76:89:8d:ec:48:0a:38:c2:ef:
         d1:41:49:cd:0c:c1:a9:60:89:0e:1c:2b:9f:b9:e9:0e:32:c9:
         f5:95:26:8e:fa:5c:e7:20:0c:26:56:04:19:ce:63:5a:0d:08:
         46:7d:73:40:18:08:dc:02:25:96:64:27:ec:da:8f:90:b5:9d:
         bd:a4:15:a4:e0:52:6e:a7:cc:fe:1b:f6:a8:f9:22:a5:a6:29:
         47:68:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:03 2024 by rpki-client on console-ams.rpki-client.org