Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File:                     BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier:          syt7rT6dyEgseKB0Ox6IVKMVfZtt+ePVoZuNS+Qb2eE=
Subject key identifier:   AF:DD:8F:FB:C3:5D:6F:C0:2D:FD:2C:D7:3E:22:EC:EE:B1:88:9A:84
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer:       /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial:       0193546359A97070DACFA8E32D44B872C856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 15:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 15:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 15:00:17 +0000
Files and hashes:         1: 2wL5dJbFPEwoQ6fOUCsJqJcerz4.roa (hash: G2kqyYGvfN96+ZhJ+YwZLbrsPqpcmuNa0QiKdzf5X9E=)
                          2: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: E+AAFeMZ/O8aBtSFNlYo9s4Vf26AGqGW/lPYa0m5uOo=)
                          3: NqWOE0MJi99DCMUKDhItL0tssWk.roa (hash: vQ/3IAvs1qlAkjBA36PdnbWWnbf/8pXbq6pJvNHwWg0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:63:59:a9:70:70:da:cf:a8:e3:2d:44:b8:72:c8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
        Validity
            Not Before: Nov 22 15:00:17 2024 GMT
            Not After : Nov 23 15:00:17 2024 GMT
        Subject: CN=afdd8ffbc35d6fc02dfd2cd73e22eceeb1889a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:03:e8:9a:bf:cf:85:18:aa:31:32:f4:36:
                    76:13:ba:e1:89:ab:b5:98:96:5f:8d:a0:27:50:48:
                    c6:36:64:f9:64:e2:0f:5b:40:17:5c:fd:df:66:4d:
                    67:33:df:5e:a4:31:1e:f3:81:f9:13:c9:7e:60:f3:
                    09:28:af:7d:4e:cd:f1:bf:b4:3d:f7:85:ef:f3:f4:
                    5b:48:54:14:e1:3e:a9:fd:03:40:df:ee:a3:13:8d:
                    1f:e5:20:ce:c0:17:38:64:b0:92:17:a1:a5:9a:58:
                    4e:67:37:5b:0f:a6:f7:03:4d:bd:08:10:68:cd:77:
                    4e:f5:13:a3:19:1a:f5:4b:1d:f8:45:d6:06:1d:32:
                    28:54:65:46:20:b8:1c:64:42:33:37:5b:1b:96:54:
                    00:77:cd:f2:37:a8:09:3d:8f:9b:fc:b4:c1:c3:5d:
                    87:da:6d:56:63:98:b2:bb:9d:d5:3d:39:02:4f:53:
                    63:73:ef:dc:34:04:e0:fa:8d:8b:49:9a:35:b4:45:
                    3b:05:f8:dd:21:fe:20:84:d4:01:dd:e1:eb:27:e9:
                    58:a4:dd:c6:00:15:f5:e3:64:55:8a:8a:9c:07:0f:
                    5f:d5:ce:0b:15:b3:b6:d6:31:7b:3c:bb:1d:ff:1e:
                    c1:55:16:61:82:56:d2:a0:a8:99:7f:ef:f1:c8:f4:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DD:8F:FB:C3:5D:6F:C0:2D:FD:2C:D7:3E:22:EC:EE:B1:88:9A:84
            X509v3 Authority Key Identifier:
                keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:80:ac:10:39:a2:24:a8:7d:d5:0f:d8:c7:a7:ff:e2:e5:
         e3:62:02:13:be:7d:68:ab:61:3b:b3:e5:f2:c6:e3:91:4a:ee:
         01:34:21:c5:a0:d6:a5:68:c7:20:ab:2e:35:01:7b:71:89:95:
         2a:f3:a6:44:ff:4f:ee:59:66:69:bf:46:fd:8c:dc:d3:23:7e:
         e6:58:43:ff:ed:ab:78:7b:f5:0f:44:0f:ef:b3:d9:2c:c3:41:
         c2:c7:d4:c8:ed:66:c6:8b:40:35:a0:8b:04:b8:ea:ec:31:71:
         5e:a2:3f:be:36:08:2c:73:16:56:9b:de:3c:26:4e:33:bd:4c:
         e5:47:1e:92:4d:b7:1e:53:b8:0f:a6:b2:a6:46:91:8f:bf:ea:
         93:e9:90:13:34:3f:9e:c5:54:a0:71:dd:66:eb:11:5e:74:f3:
         f7:c8:f1:eb:10:1c:b5:8f:07:39:ca:2f:dc:c6:b5:f1:9d:cf:
         26:97:1d:4f:75:72:28:91:4a:f0:11:9c:bd:b5:98:cf:88:fb:
         9d:94:8c:b1:53:9f:34:b2:4d:59:cc:6f:42:f7:12:06:51:94:
         ae:24:43:6c:d8:b9:d1:18:04:40:e6:26:0f:b3:83:e8:2b:06:
         ca:27:06:10:b9:81:64:b0:96:54:31:ad:a7:62:00:1d:56:1c:
         d5:ba:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:28 2024 by rpki-client on console-ams.rpki-client.org