Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File:                     C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier:          HAqrx2kKwUjLOi155XyuhKnHpV85JYmswpPJVmJ0LkI=
Subject key identifier:   BE:D0:C2:A5:FF:76:32:55:4E:99:FD:A8:E8:2B:EF:19:DF:C6:E0:46
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer:       /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial:       01935199D4104F5F2DBF88C0A944D16BCC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number:          1379
Signing time:             Fri 22 Nov 2024 02:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:55 +0000
Files and hashes:         1: 5xxX0uDApWTnZ0BpbfEZ_71U8eI.roa (hash: atpe5V3gB3PY2TzVeziR6F1NDw3C54aqTtvrkpZ86GU=)
                          2: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: CBR2bRtgfwVeFSCLaasGCwhAF2jESWfrh9x5GzbjmE4=)
                          3: IwRoG8IXerjM3Cbz6ppWziFTtOk.roa (hash: 5FD3pTpShOBjKMGz1+/SccwUEeXKCprpRQmems+BpC0=)
                          4: Lxve1tsIhKwXolGkEGZ8iyWPTsM.roa (hash: szc7DB424TVl1bY8aLrwi4nUzc9VMPmZRd80FIO23jg=)
                          5: MYAo1fV_F-MtPJECr9lQv4qZ3Dw.roa (hash: UB2vRA0ad6lxICESdI41+FpsTuuI9PcA7KNZwQpj9FI=)
                          6: Va7HfjQgjvpr1-zTYcSX8ALm15Q.roa (hash: HaI9aVULYHJHysqttMQswrrutX8anZqzCbASvQkw/S4=)
                          7: _U2W79cFB0j0JGTZTqokLJJSamQ.roa (hash: 5P29wB6iZjChwrrpffNZqvHQ+Uy81I3ZNmISHXaVuvc=)
                          8: _wFugI9tKrJA4B13Om6PuIWrQj4.roa (hash: TwUqjPlnM6ec9PNrA6EAyHXabKb0j7iBc0p5/nMFoUs=)
                          9: bxW1b80TS-ewqrJ67DnnLW4Vl2Y.roa (hash: sV0TLPj3xGK1TjNG8loUz4GVPyK/sbicyxUIVnJFYvo=)
                          10: dqzeHgkcr6ZxKp9mhOQbxHMxUxE.roa (hash: TYjyvuzbOtDXmXJX/UWNndJipaE32HMHCAjEiE7bMnA=)
                          11: gvJg0TEtNFcU86o8arhTDgWUGjc.roa (hash: UIMzCSjH53uBN9IoiznGvFoeY3S3RzOPf+PzHemlhjs=)
                          12: pUI21f2q7uw1ASXphaA5bsNoGd0.roa (hash: kC6sydOoJ3liNI5kzSwrBcBZMuZ1yZfJRnPSHN6f6Oo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:d4:10:4f:5f:2d:bf:88:c0:a9:44:d1:6b:cc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
        Validity
            Not Before: Nov 22 02:00:55 2024 GMT
            Not After : Nov 23 02:00:55 2024 GMT
        Subject: CN=bed0c2a5ff7632554e99fda8e82bef19dfc6e046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:e8:8e:95:52:02:27:7f:06:9b:e0:08:ae:
                    84:2d:62:5b:6f:c6:4c:0d:08:00:09:ed:b6:5a:1a:
                    dd:9a:96:18:ea:03:5f:31:37:3d:cd:82:9d:8a:03:
                    ab:d2:35:8f:4c:51:32:06:18:92:de:19:29:32:74:
                    c6:5b:99:a3:3e:88:1a:6d:93:18:23:8f:f8:b5:dd:
                    48:98:9e:54:02:a9:54:f1:e9:ac:3e:0c:12:7a:43:
                    9f:af:65:c0:73:4d:a7:d9:fb:34:6c:63:66:79:a2:
                    51:ac:26:5f:1a:72:27:3d:a1:5b:74:45:50:fc:a4:
                    40:a2:06:59:c1:86:3f:95:07:72:b1:71:ae:2e:95:
                    cd:c7:57:31:fa:e2:5d:40:bf:36:95:6f:43:a4:41:
                    be:55:80:0a:ab:03:a4:2a:96:40:bd:66:4e:50:67:
                    8f:83:b0:d4:9d:ad:0d:07:fb:5e:33:de:c2:29:76:
                    5b:16:7a:0a:30:8c:d6:d3:86:b4:d5:32:0f:5b:2c:
                    5b:1b:11:8f:c8:f0:d0:fa:39:24:76:6c:7a:8b:27:
                    f7:f5:82:66:1c:d5:82:b7:b0:c3:10:e6:80:0f:94:
                    10:e3:75:fb:ad:0d:40:f1:73:c2:d2:17:22:64:0c:
                    4a:30:1f:54:26:ba:bb:17:97:f2:43:5e:5c:df:32:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D0:C2:A5:FF:76:32:55:4E:99:FD:A8:E8:2B:EF:19:DF:C6:E0:46
            X509v3 Authority Key Identifier:
                keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:1a:81:ab:48:d7:55:66:19:29:65:3a:f5:58:b1:27:ac:
         5a:c5:82:f9:37:b0:b3:b9:b0:d7:52:a4:41:7e:23:47:fd:b2:
         6d:61:25:d2:47:ce:c2:c6:82:75:69:0b:5d:e5:a5:b2:72:a2:
         46:40:18:26:81:fb:b3:de:56:f1:f1:19:c6:1f:4e:7c:c9:31:
         ad:a6:ce:9c:88:ce:3b:92:57:3b:50:f5:5f:ea:83:7e:41:93:
         cf:2e:7e:a0:d4:79:a3:b8:57:c2:6f:6e:4f:55:11:f9:eb:63:
         c4:3d:78:08:ce:ab:c7:f7:29:1b:0a:ec:dc:a4:58:76:ee:0d:
         95:f9:be:b2:99:71:5d:75:94:65:34:5b:38:3e:9d:94:17:c6:
         fa:9b:87:91:84:ae:c3:71:82:7d:f2:9c:27:8b:fe:61:c1:34:
         95:e8:33:1c:67:19:7e:1e:57:0c:9a:2c:93:e3:ac:91:12:20:
         de:22:f4:18:94:e6:82:21:f0:0b:cf:3d:fd:8d:50:31:2a:73:
         fa:b3:82:46:7a:73:52:69:0d:ea:8d:9d:97:e3:82:ec:48:d8:
         82:01:bb:4e:ce:c6:2b:8b:d7:30:d4:85:3e:a5:8f:74:94:1d:
         da:d9:a0:8c:68:ff:28:90:98:f9:dd:97:22:fa:97:a3:55:e1:
         0c:2f:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:16 2024 by rpki-client on console-ams.rpki-client.org