Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File:                     my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier:          C26X4X9Y+P628F6H1AeyAX35zPrzHZgilOM3pQwKNWM=
Subject key identifier:   75:36:A3:82:E8:EA:8E:88:BA:C0:94:FC:13:6B:FB:63:BE:4E:8B:D0
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer:       /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial:       0193568A8D66CAF98E92AB1AC1201919BB46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number:          0B21
Signing time:             Sat 23 Nov 2024 01:02:20 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:20 +0000
Files and hashes:         1: 09Dmh-GqNnFLlOxqYqDZCRkuWEI.roa (hash: SL8cjPmiTlUn0kkdSyGuBaObW6MtXDFbYESf8K0Ca90=)
                          2: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: hfta9y8Y4N6J06pcwmh2Guanwe8ywMBKJuHGXv92x6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:8d:66:ca:f9:8e:92:ab:1a:c1:20:19:19:bb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
        Validity
            Not Before: Nov 23 01:02:20 2024 GMT
            Not After : Nov 24 01:02:20 2024 GMT
        Subject: CN=7536a382e8ea8e88bac094fc136bfb63be4e8bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:d6:99:44:9c:5d:2a:c9:79:67:b6:68:a4:
                    7f:02:f5:80:af:0d:03:95:2b:33:bc:e6:2c:95:67:
                    23:c9:f8:a9:fc:9b:a4:21:93:ad:89:92:67:1e:3c:
                    02:89:c8:9b:6b:b0:6a:6a:85:d4:1d:17:8f:2f:9b:
                    2a:b0:8e:d9:dd:74:b3:11:8f:eb:ed:d6:4d:9e:27:
                    d4:b2:74:97:dd:53:f5:63:b1:90:b6:e1:a6:d0:37:
                    13:12:f2:a9:cf:ae:39:82:cf:3b:16:5a:30:e9:0d:
                    a7:8c:d2:84:45:60:bd:8d:24:08:54:00:b1:a6:51:
                    0d:6e:65:6a:5a:36:08:f3:aa:71:83:d6:3e:d5:9d:
                    30:57:35:9c:50:71:01:d0:f7:68:ed:9f:4a:53:f5:
                    cd:bc:db:f1:88:52:0b:56:80:60:8e:b7:f9:04:57:
                    78:5c:d8:2f:e5:03:d6:14:f2:4b:11:0c:e4:3d:87:
                    93:a6:89:87:60:f0:9a:b3:6f:4e:d9:f7:16:6a:d6:
                    22:00:7c:86:b0:3c:82:11:c1:3a:f6:c5:33:4c:4c:
                    6d:d9:d1:90:d7:4d:8d:8c:aa:46:22:5a:5f:78:ec:
                    0f:13:79:d4:ae:8e:1e:b8:6e:95:5a:c3:b6:c2:7a:
                    b8:bf:f1:83:95:f0:a5:dd:5b:a4:2f:21:61:a0:50:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:36:A3:82:E8:EA:8E:88:BA:C0:94:FC:13:6B:FB:63:BE:4E:8B:D0
            X509v3 Authority Key Identifier:
                keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:bd:2d:56:86:fb:9e:66:6d:25:27:84:70:1b:a4:0f:fe:
         70:74:ea:6f:e7:d0:d8:35:28:0e:5a:e1:c2:77:2d:64:cb:d7:
         b2:ca:87:1b:ed:f2:91:d1:e6:8d:f1:a0:5a:e1:39:5f:aa:de:
         b4:06:77:06:be:b8:b7:2e:f2:44:6f:16:eb:c2:b4:b3:e6:c6:
         b9:c7:8e:02:0c:7c:a9:77:c8:f0:4f:2f:0b:12:75:53:35:d5:
         a5:16:84:69:85:16:e0:bd:83:96:75:13:4a:a6:51:60:84:c2:
         32:a3:87:02:c9:33:77:85:98:b6:1d:9d:11:ee:e6:21:d5:af:
         dd:e2:08:5a:45:46:d9:b3:9b:a3:ba:82:88:32:77:a8:7b:fd:
         72:89:99:d9:80:3f:9f:7f:fd:01:ac:db:eb:77:f0:92:d0:23:
         fe:82:bd:31:f8:9f:ef:94:55:af:a6:61:04:5d:45:23:fd:e4:
         a5:4e:59:d4:1e:86:54:da:16:1f:6f:d5:c1:64:c3:82:95:84:
         36:31:aa:85:86:b7:de:ec:94:59:15:fa:30:f4:e2:64:68:45:
         22:96:9f:6a:18:d7:ae:2e:ca:20:cd:92:22:8a:bf:02:1a:39:
         e9:40:16:10:48:2e:85:0c:fc:1e:74:94:a3:34:6f:ab:a5:c8:
         5f:7c:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:31 2024 by rpki-client on console-ams.rpki-client.org