Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File:                     RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier:          MwY5aaYwEt1Pn+XaxHj2HblvuRERPEN5S8PQZVL9tZg=
Subject key identifier:   CC:12:4D:F4:86:C4:8C:B7:39:85:10:52:8F:45:4D:80:E4:B1:64:A6
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer:       /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial:       019361B13C7E74FB025F22E54E403CC41126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number:          0692
Signing time:             Mon 25 Nov 2024 05:00:25 +0000
Manifest this update:     Mon 25 Nov 2024 05:00:25 +0000
Manifest next update:     Tue 26 Nov 2024 05:00:25 +0000
Files and hashes:         1: 2BYD8DCOWXMfrD4ngWAhWfhD8UM.roa (hash: O6V1lmEL5GM2/cUI6RmDA1sH5ifn1W24Aoa2bUYbG+0=)
                          2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: TGUzGsIxBR9368xcxH9qMHbEP4tiCeSDBg3SDiD9CwI=)
                          3: yM-OBUoc-1WgxCIJQK-OqkIfHec.roa (hash: kNe5nOSY3Uh0tOLVs/DbzsuUrysd374VTJYM5u6zauk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:b1:3c:7e:74:fb:02:5f:22:e5:4e:40:3c:c4:11:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
        Validity
            Not Before: Nov 25 05:00:25 2024 GMT
            Not After : Nov 26 05:00:25 2024 GMT
        Subject: CN=cc124df486c48cb7398510528f454d80e4b164a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0f:c4:f9:e4:45:70:78:8e:99:d6:de:2d:49:
                    53:b8:66:d3:8c:8b:30:3f:be:51:a1:de:86:3d:24:
                    da:7e:92:10:56:89:c5:6a:1a:5d:4b:15:af:1f:5c:
                    e6:df:cb:87:96:d9:4b:bd:4b:db:9a:7a:1a:a2:4a:
                    0d:1c:dd:76:88:7a:cc:48:23:f8:7a:a7:79:6a:ea:
                    bb:e5:b6:bd:d9:44:d6:23:c3:62:2f:06:43:c1:d8:
                    a4:61:b6:a7:ca:56:15:9b:c6:9d:d5:46:31:95:fd:
                    36:7c:9d:ed:8f:09:ce:1a:36:e2:25:f8:e2:64:3c:
                    b9:50:66:54:d5:35:00:26:15:a2:08:32:d8:fc:42:
                    9a:1b:ca:c3:72:d4:23:5a:3f:e7:97:eb:b2:c0:da:
                    68:64:bf:2f:0b:0f:eb:2e:a9:ed:cf:f6:1a:bb:b1:
                    cf:dc:d2:91:74:1c:34:cb:bb:50:9b:a7:52:ec:1d:
                    aa:7d:ac:f1:52:b3:6c:f8:6f:83:13:b1:d1:2e:77:
                    17:c9:81:1f:e1:53:0a:76:00:7b:08:a0:32:15:67:
                    89:53:28:03:10:e0:72:32:72:01:5d:1e:40:ac:43:
                    4a:f6:15:e0:c5:09:08:ce:1f:6f:53:82:af:6b:30:
                    67:5b:aa:0f:e8:10:9a:2f:63:f5:57:fc:1f:74:62:
                    1c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:12:4D:F4:86:C4:8C:B7:39:85:10:52:8F:45:4D:80:E4:B1:64:A6
            X509v3 Authority Key Identifier:
                keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d7:51:09:5d:36:b4:23:03:57:50:70:07:4d:59:d0:f8:14:
         ae:2b:8b:9e:e0:61:d2:96:4a:41:b3:e4:ad:88:b8:81:08:67:
         c3:11:92:d4:09:04:a7:8a:ab:7f:1c:b9:db:fd:7d:0e:02:2c:
         48:af:ed:59:09:ff:e5:fa:33:02:47:c9:60:62:1b:cb:22:e2:
         e0:ec:f1:8e:b1:d9:d0:8a:0f:76:b2:96:6b:3c:fb:97:ce:7c:
         a2:f0:72:df:b8:b4:85:8c:ba:81:16:88:f3:06:18:b2:43:b3:
         3b:13:37:cc:65:c1:d8:c4:bd:f9:68:db:c1:4e:f8:58:c6:10:
         3f:9f:30:bb:a1:05:5b:01:00:57:70:77:61:01:66:bb:85:91:
         a3:8e:67:ae:11:66:4f:4f:39:59:20:33:d9:1c:0c:79:8b:a4:
         dc:8a:31:09:45:fc:eb:2d:4e:59:bf:4c:cb:90:7a:05:0c:1b:
         59:29:b6:39:c6:52:02:e8:55:d8:d7:2c:ca:0e:ba:c8:29:0c:
         f4:94:8e:80:16:df:76:af:9b:bf:1c:96:3f:68:1b:8f:05:99:
         02:05:0d:e2:7b:cd:53:b2:d2:a3:b8:33:56:05:d7:ab:5d:b1:
         5c:5e:e8:c4:74:63:ef:8d:fc:fa:2a:e4:e6:7a:75:df:60:38:
         63:91:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:15:58 2024 by rpki-client on console-ams.rpki-client.org