Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.mft
File:                     tq5hgU9xUMm4EX9JjKuU23KoM5w.mft (raw, json)
Hash identifier:          EpoBhSHgoqOPqzsWxre0/RLpRBKdGRIbDjESsNJcw5M=
Subject key identifier:   B8:D7:7F:28:7B:09:73:1D:56:AA:A3:BB:C0:02:88:FC:91:16:B5:16
Authority key identifier: B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C
Certificate issuer:       /CN=b6ae61814f7150c9b8117f498cab94db72a8339c
Certificate serial:       01935651A2D131CE60645970056F7C48D56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.mft
Manifest number:          0A57
Signing time:             Sat 23 Nov 2024 00:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:10 +0000
Files and hashes:         1: UrIC9K77bsZJrGkrV12-HUzS4cc.roa (hash: NnslkIJLLH4TyF9j/7kNuwdptL4oEpIbbkFU2TOwHks=)
                          2: Vd-eFipTUvLOALBRAAOJ26QoTTk.roa (hash: XbE/rePIDpGaEwt/aYSv8okh7wq+otPo2aJZ2uYvDxI=)
                          3: tq5hgU9xUMm4EX9JjKuU23KoM5w.crl (hash: 7y44JvgCEJ9g7keSVFun2hF11TGEOST9kUffqxi45X8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:a2:d1:31:ce:60:64:59:70:05:6f:7c:48:d5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6ae61814f7150c9b8117f498cab94db72a8339c
        Validity
            Not Before: Nov 23 00:00:10 2024 GMT
            Not After : Nov 24 00:00:10 2024 GMT
        Subject: CN=b8d77f287b09731d56aaa3bbc00288fc9116b516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:eb:84:72:39:1b:6e:6c:9d:58:e1:20:1b:
                    b8:44:a2:f5:6c:c8:d5:ee:9e:29:26:d2:60:a9:7b:
                    13:f5:fc:e8:1d:c7:e8:54:b3:04:86:59:1c:19:82:
                    bf:0e:02:ec:3a:b4:ca:55:16:6f:57:c9:6f:8d:6a:
                    7c:78:ef:73:47:bc:15:e9:ac:d9:1f:9f:2e:0a:02:
                    de:5b:fb:60:56:79:55:78:31:55:da:cb:68:e2:d6:
                    f2:15:bd:c6:be:f6:50:87:dc:fc:f3:29:93:ea:50:
                    6e:00:9b:19:4b:3b:38:1a:60:a2:61:aa:da:ef:72:
                    e9:ab:2e:41:0e:73:5d:ce:16:44:44:81:28:8d:50:
                    83:f9:32:eb:26:e6:aa:78:ca:17:62:49:62:a3:41:
                    2e:40:ac:22:9e:70:91:ea:59:6b:33:ef:37:78:f9:
                    3e:49:3a:12:69:9c:d0:7b:ef:28:12:5d:6e:36:fc:
                    56:6f:b4:e0:9e:c3:a9:ab:25:d7:bd:20:68:ac:6c:
                    9c:b1:c0:08:31:ed:2c:08:b1:d2:48:41:3b:e5:4f:
                    5d:76:3e:7f:76:8f:3f:8b:a8:fa:f7:ca:4a:08:4a:
                    b6:3f:64:22:28:0d:3b:51:1d:d9:63:a8:2c:5c:95:
                    4e:0b:b8:af:4d:3b:a2:c5:2a:51:47:92:c1:c2:99:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:7F:28:7B:09:73:1D:56:AA:A3:BB:C0:02:88:FC:91:16:B5:16
            X509v3 Authority Key Identifier:
                keyid:B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:da:92:27:77:24:e6:2c:a9:5f:60:0c:f9:60:57:61:5a:
         17:61:bc:d6:10:f8:64:16:ad:f3:6d:6d:c8:90:ab:23:0c:7a:
         03:3d:b3:5b:88:4e:1b:a1:96:0b:98:64:47:72:1f:28:b6:87:
         48:3b:0e:98:8b:1a:37:9b:31:90:3f:c1:38:80:c2:af:38:09:
         6b:8f:7d:31:e9:32:68:6b:71:dd:0b:9d:83:47:bc:01:c4:df:
         c5:42:01:e8:4d:10:a0:d0:02:38:69:c2:3a:a4:fa:f3:39:33:
         99:0c:bc:d2:53:c9:0f:de:4e:ab:e8:e7:35:58:fe:44:a4:1a:
         12:3c:ea:10:32:41:7d:8d:5c:b3:3b:cf:fe:69:3a:82:a6:0e:
         41:68:ea:86:41:d3:c9:44:ee:0b:ac:03:88:25:2e:71:c0:8d:
         67:0b:92:92:ff:9b:29:be:9b:a6:b0:6e:30:2d:78:b9:c3:23:
         1d:4f:9e:31:33:dc:c7:95:a8:b6:f3:94:82:64:54:a5:0e:cc:
         42:2f:32:1a:05:fa:8f:5d:61:2a:81:08:6b:16:77:1f:cf:94:
         a6:2d:7f:14:5c:d6:53:48:c1:7a:14:2a:9f:85:70:64:c6:41:
         8a:9a:b7:e3:c2:70:e4:da:05:27:48:13:b7:81:05:92:24:ca:
         8a:a3:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:28 2024 by rpki-client on console-ams.rpki-client.org