Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
File:                     bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft (raw, json)
Hash identifier:          gG7M9IpwQho51dXOhZFcbqTiPDJxXyrsCe1SfhQBBLs=
Subject key identifier:   CC:4F:3A:8A:6A:F9:A4:0E:A2:10:15:F3:71:2B:41:B1:00:F9:38:88
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Certificate issuer:       /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial:       01936933F3A92F6DD0A71D7602882335E0C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
Manifest number:          096A
Signing time:             Tue 26 Nov 2024 16:00:32 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:32 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:32 +0000
Files and hashes:         1: OS34xgpIU3Qko3Oy19TzuarvrKc.roa (hash: fo+pnDR0lSVVFRCobeGa3d0+dHgr1Wv+Cd4HUCqUrh8=)
                          2: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl (hash: F5qb6xiP7txbD+BPECsQxgBKoxyiBVKevLLeeZBgSeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:f3:a9:2f:6d:d0:a7:1d:76:02:88:23:35:e0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
        Validity
            Not Before: Nov 26 16:00:32 2024 GMT
            Not After : Nov 27 16:00:32 2024 GMT
        Subject: CN=cc4f3a8a6af9a40ea21015f3712b41b100f93888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:c1:a4:2f:c8:d5:b1:e5:d1:07:1b:5d:1f:
                    91:b1:3e:19:a9:af:21:bc:56:7e:f9:41:94:d6:da:
                    c7:c0:62:22:d3:d7:b1:aa:b6:7b:6c:e4:9f:f8:10:
                    87:bd:32:9f:a6:49:e4:2e:8d:70:41:d8:a7:a8:3f:
                    c2:63:2d:02:7a:2e:68:14:a1:f6:f6:8f:82:13:bc:
                    a5:ee:0f:61:fe:e8:fb:9c:37:9f:7f:ce:bf:2a:aa:
                    1e:ce:66:56:3b:2e:f2:3a:4d:f9:7c:5f:22:a0:e1:
                    fd:2f:a3:45:7d:82:d5:8c:c6:c7:7b:47:fa:66:5b:
                    99:ca:7f:bc:42:d2:3a:73:18:bc:a0:ff:8a:fc:ec:
                    df:7f:21:96:bb:85:36:67:b0:db:fa:16:1f:dc:7e:
                    d7:bb:e2:5f:fb:b9:d4:45:80:60:09:74:ff:d1:a0:
                    ca:64:d4:bc:50:32:ea:1a:1a:85:b4:6f:d8:c7:fe:
                    fa:a4:fb:8d:18:40:9b:e4:4f:3a:7a:fe:b2:6a:f7:
                    51:09:db:6c:87:99:24:67:21:f6:b8:37:4c:b7:72:
                    c1:71:8e:d4:f7:d2:c6:90:09:09:3f:fc:f3:68:da:
                    c5:54:76:2f:8a:ae:b3:b1:7f:d4:c6:90:aa:ee:e7:
                    67:7f:6a:22:46:c6:81:0c:fa:c0:8f:4f:35:ac:fc:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4F:3A:8A:6A:F9:A4:0E:A2:10:15:F3:71:2B:41:B1:00:F9:38:88
            X509v3 Authority Key Identifier:
                keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:ab:f7:1e:f7:e7:ec:a5:51:7b:3f:5b:23:7d:a0:ac:5d:
         e8:e5:31:d1:44:4d:25:6d:ce:fc:b3:ae:46:72:5c:ed:66:e2:
         c0:2c:ed:69:27:33:15:d5:bf:0a:27:b5:15:60:c7:4a:4d:58:
         dc:07:9e:57:81:0f:92:18:88:7c:a4:ac:6d:46:ce:bc:60:10:
         cb:25:e8:92:a7:42:88:9e:ea:75:d3:5f:8c:e5:b1:85:a0:72:
         e3:93:9d:de:2b:6a:1e:dd:d0:51:ed:0a:98:f8:6c:c4:ba:8c:
         a0:d1:54:1c:aa:a7:10:f0:88:f5:6c:b4:87:d3:5e:f0:e0:2b:
         f3:c6:8d:2a:73:23:d4:06:6e:99:e1:f1:9a:51:31:79:fb:6e:
         e9:50:e4:07:e2:e2:bf:42:7a:07:c1:37:50:e8:e1:c4:46:62:
         78:d2:cb:da:10:87:aa:c7:dd:9d:2a:01:8f:07:6b:a3:78:25:
         19:da:8a:d0:28:7a:d5:41:6d:24:15:df:88:b4:08:26:42:84:
         99:36:f0:d1:d3:9b:66:39:32:21:43:26:77:c9:bc:3e:22:82:
         80:03:37:d7:39:e8:0d:d6:ea:52:31:ac:c7:f2:ab:1e:66:5d:
         b2:67:bf:ea:66:7f:f7:47:7b:90:8d:e2:66:f3:07:04:8d:72:
         e9:7f:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:49 2024 by rpki-client on console-fra.rpki-client.org