Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
File:                     BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft (raw, json)
Hash identifier:          AZVGek7LiCEmR+EfgOEVgmlDcb0NNPxUt3XEUYmFSts=
Subject key identifier:   47:DE:CF:3D:22:C3:03:CC:87:B8:25:B7:7A:40:10:9A:4A:56:EC:94
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Certificate issuer:       /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial:       0193572D98E43F35D6D15DF72699FE3C6424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
Manifest number:          1076
Signing time:             Sat 23 Nov 2024 04:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:26 +0000
Files and hashes:         1: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl (hash: jwHIy+0gCehty2yjo0U6PSC56Q3yYy8eQY68lhbmOFY=)
                          2: G1av2SkScdA7pasMTkMgZ9DMDoM.roa (hash: DmAapwPH9qBCtwp/hvzAWHKwiBRMX4rOHpllKuQJZCk=)
                          3: kcLvebvinb_fU9cLNzlPp66YtiU.roa (hash: GqEC4CeIrVTOV+TeT278EX0iWT/g3V3BH7w6DFrfyHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:98:e4:3f:35:d6:d1:5d:f7:26:99:fe:3c:64:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
        Validity
            Not Before: Nov 23 04:00:26 2024 GMT
            Not After : Nov 24 04:00:26 2024 GMT
        Subject: CN=47decf3d22c303cc87b825b77a40109a4a56ec94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:aa:b2:e8:8d:ab:5c:f3:c6:e8:cc:55:81:
                    22:a4:5b:42:4f:eb:f9:96:61:61:41:b0:f3:1f:17:
                    50:62:b0:9e:ec:bd:cf:cc:31:fb:63:fa:80:d1:4e:
                    c3:44:ea:75:95:a4:ab:b0:57:a4:20:32:c6:cc:ad:
                    47:f5:b4:36:88:a8:1b:24:40:ef:c2:17:01:ae:9b:
                    bb:03:d4:b5:2d:c2:d9:52:5b:da:7c:fa:70:b0:75:
                    dd:23:6b:e1:d8:d3:b2:f3:e8:0e:24:54:7a:ee:ec:
                    0e:df:2e:7b:fb:ec:12:88:60:b2:9e:ea:09:32:2a:
                    3a:37:f6:1d:35:59:3c:49:4c:3a:9f:70:20:f6:91:
                    9d:25:cd:39:1b:be:b8:8d:51:ff:b1:e2:c0:a6:10:
                    84:b3:f1:2e:6e:c8:f6:85:65:22:82:ce:ee:9f:33:
                    e9:e9:34:ad:bb:c6:44:8d:a6:41:8c:a8:2f:7d:1c:
                    5c:90:84:97:7d:6d:d9:2d:1e:9b:1d:ef:b5:dc:a8:
                    1e:e1:4e:2b:52:42:33:57:f4:1f:03:66:89:75:92:
                    40:9d:06:49:24:10:95:b5:3a:bf:e3:92:e9:f5:c0:
                    e3:48:12:7c:2b:44:2b:81:83:03:a2:c9:80:0e:b0:
                    65:7a:f6:ae:6f:fb:9d:82:a7:b3:ac:ef:c1:a2:53:
                    00:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DE:CF:3D:22:C3:03:CC:87:B8:25:B7:7A:40:10:9A:4A:56:EC:94
            X509v3 Authority Key Identifier:
                keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bf:90:fe:d2:0c:5f:35:43:70:6b:89:5d:51:06:74:19:d5:
         74:d1:c7:3e:f0:4e:72:36:47:3d:b1:15:fe:1b:2f:87:bc:fc:
         8b:db:3f:34:e6:a2:37:22:db:2f:71:83:90:0b:23:e0:ff:e9:
         ee:97:4f:f5:7c:f5:52:2b:ad:d3:15:91:25:44:67:64:e5:84:
         1f:51:76:89:60:45:cd:3b:09:24:60:ee:4b:6f:47:a5:75:0d:
         12:71:29:80:4c:ab:e7:6b:23:81:85:66:e2:58:9e:8d:ef:87:
         98:35:fe:e1:10:dc:6d:54:b8:29:36:43:77:10:02:01:24:16:
         4a:b8:ee:98:cb:34:31:1f:86:7d:59:63:6c:0a:8b:09:d6:02:
         2d:56:9c:b4:94:bf:2a:13:12:8f:23:3f:41:fd:3f:90:41:56:
         fe:0e:fc:00:8f:3a:f6:c8:43:cc:7a:29:eb:c9:64:ca:a6:bd:
         93:51:ea:36:97:d1:33:ee:75:f0:64:fd:43:6c:fb:58:6a:3c:
         af:58:dd:84:92:5e:d2:72:21:2b:e2:ed:e2:e1:47:2e:a8:c5:
         01:67:fe:f3:74:7d:73:e7:10:2d:44:eb:e2:ea:c2:62:17:fc:
         e4:33:0e:8e:f8:ab:94:0e:db:ef:9f:18:0c:e7:18:5f:91:e0:
         c6:7f:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:33 2024 by rpki-client on console-fra.rpki-client.org