Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File:                     vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier:          EGRl6gFMUu1XN3Dr6r1IRICYI6G18oY/tGTtV9QTWXE=
Subject key identifier:   C3:6B:55:C4:67:BD:EC:4E:A0:30:E8:FD:D1:80:50:87:A6:51:8A:57
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer:       /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial:       019355766D289DEF86ADF26774B602D9106B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number:          01A6
Signing time:             Fri 22 Nov 2024 20:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:44 +0000
Files and hashes:         1: lIgwX-I2ik6N3udZ1F74YnwPr7A.roa (hash: K4/1hb/wiyRnjV5+aDvkAB8h3ctF+CVuT79LAd2R7JE=)
                          2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: VMvCYtrhbzBrTZgKj5zwPpmygQRmVhY+yJCknsQd3Gg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:6d:28:9d:ef:86:ad:f2:67:74:b6:02:d9:10:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
        Validity
            Not Before: Nov 22 20:00:44 2024 GMT
            Not After : Nov 23 20:00:44 2024 GMT
        Subject: CN=c36b55c467bdec4ea030e8fdd1805087a6518a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:15:73:b6:38:e6:1b:5f:d5:3e:98:6d:ec:
                    ef:a5:b0:23:f5:f2:94:5c:7c:d1:68:19:0c:b0:1c:
                    bd:ca:36:f7:e6:06:92:6e:b1:67:5e:a7:e8:07:0d:
                    e4:7b:61:db:23:ff:1f:28:44:b8:61:7e:83:de:b6:
                    6a:04:6a:0d:47:85:c0:f7:76:e8:e2:85:62:4c:6f:
                    cc:29:c1:21:83:bf:7c:88:db:7c:66:3e:40:3b:1c:
                    40:ee:c7:70:fa:fc:6b:89:b4:06:85:ad:ac:96:05:
                    43:ec:e6:fe:84:c9:47:83:b7:7c:2f:e5:17:3a:50:
                    d4:0b:cf:57:0d:47:05:de:fd:a3:aa:1d:f7:56:6b:
                    68:5d:ab:b0:63:d5:8a:20:e5:f8:a4:16:bd:34:f4:
                    7a:36:38:fa:20:29:86:58:f2:4a:5f:9c:76:40:db:
                    5d:54:92:16:4c:a4:cf:a0:21:a9:96:69:7c:29:b8:
                    ca:6d:83:02:01:18:0c:e2:c3:bd:0e:8b:87:f4:cc:
                    e3:e0:7b:6f:24:72:56:2a:b3:1c:dc:14:30:14:df:
                    ff:63:3d:37:0c:09:3a:e1:f1:5e:95:1e:7d:a7:35:
                    22:9a:69:8f:b4:8e:da:5e:7d:fe:6c:e3:e0:6b:b4:
                    41:34:eb:c0:7a:31:07:40:53:b3:df:f4:05:87:5b:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:55:C4:67:BD:EC:4E:A0:30:E8:FD:D1:80:50:87:A6:51:8A:57
            X509v3 Authority Key Identifier:
                keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:94:57:8e:84:93:9e:24:c4:b9:1c:ff:db:22:6f:bd:67:d3:
         ba:29:1e:d5:58:8a:72:74:c7:ce:6d:95:63:95:26:67:89:dd:
         81:e7:f9:3f:a4:6c:80:10:8f:00:9c:a6:62:00:91:5b:60:dd:
         34:22:ef:82:ab:f6:c1:56:3d:8f:da:43:55:c2:ef:cd:80:5b:
         1c:d2:32:ec:8a:b6:5c:24:58:91:51:f5:11:44:40:9c:de:16:
         fa:a0:a1:08:09:92:a0:a6:a8:6a:04:a1:d3:15:8d:2c:0d:48:
         e9:4e:5a:60:6c:f6:8f:41:77:b4:86:39:34:ee:00:f0:54:20:
         06:d9:59:8e:27:0b:45:fc:83:cb:2c:27:a2:25:91:b3:85:9c:
         09:15:7f:c6:a5:60:f5:0d:35:bd:b4:c3:ad:cb:16:1f:ba:e3:
         a9:57:f5:38:01:83:dd:27:df:98:81:7b:93:e7:48:32:72:b6:
         6f:14:36:bc:33:de:c7:a3:86:55:3d:f9:7e:fa:d4:1c:37:c0:
         25:ad:e5:5f:d4:4c:ec:23:47:86:71:1f:8e:4b:94:81:ef:d8:
         16:7d:40:cd:03:7d:04:1d:26:d5:77:a6:18:8a:7b:2c:9a:be:
         ed:5d:8b:57:4d:5f:3f:e7:e3:95:4a:4d:41:6a:83:e9:0a:f3:
         f6:0b:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:33:40 2024 by rpki-client on console-ams.rpki-client.org