Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
File:                     6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json)
Hash identifier:          NmbKqmRhRfjHxjhaBtqQeXBBmK5f3eZw6EHOuyFxDKU=
Subject key identifier:   F6:CA:D7:E1:41:31:1D:72:03:66:7C:21:26:F6:25:EA:C4:BE:C4:2C
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       019353882F3475EA4E08639FFFEEE04FA442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
Manifest number:          0D9E
Signing time:             Fri 22 Nov 2024 11:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:54 +0000
Files and hashes:         1: 4d0qBkZbBd5zNUKtA-x8heBefsM.roa (hash: 1fVSgyLdMwz/h8JZL07Yno0g5y/JHmrvBy6qXO8+Ooc=)
                          2: 61l3ljgmVgW7JZ5yPV9H9T0j_fU.roa (hash: 83ZkWMz6xoiBVwcBoUGZRAYb+RKRqXMXPt5o2VzoO8U=)
                          3: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: L8J42RebyBo6DNzikNirBPWApfuBT2Wcnwelwil9Cw4=)
                          4: AfytqL7NTYaPxWLZxUQ5w70T2Yc.roa (hash: AxxYjWK/smfLt+rY0JJ60YGa2ldDlQaRge9q3qA4JlM=)
                          5: IKbDv3h7qyqkqkPMVt4xtOpqscc.roa (hash: ClXJ5f/aVxQkhF6CJXhOcGkFoJOd8IsMItZjLjvlmIo=)
                          6: L4Xe1niDm7mXAc_tGRsEPBfTyCE.roa (hash: mj0subICubl8SdoCC1hPOD5TMl0Co7cyp0M3+s5r4Kk=)
                          7: Se7VjjFOgqAbfnU9Rpi6bk0ri6U.roa (hash: NaXP20uHns5b9gnddHNt7sVIgu44BQ5ybHeb7SHBK3I=)
                          8: aBbx5cxQU7q__I8EWrYjtazyQxk.roa (hash: TdvgF9jEg+GJiYk/Apmp5Nc50tFBJIY+yevbI7C+iHo=)
                          9: mxajRPj2DyjQc11L9tjm3bxKLcU.roa (hash: kHfuDNQWpwzCMQE29w2unIxo3IuWFxB0XBzSXPJyQWM=)
                          10: zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa (hash: EeCIle7XfC3hUZPyLgVwAyGSFircda7g8rSNaf+7y9s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:88:2f:34:75:ea:4e:08:63:9f:ff:ee:e0:4f:a4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Nov 22 11:00:54 2024 GMT
            Not After : Nov 23 11:00:54 2024 GMT
        Subject: CN=f6cad7e141311d7203667c2126f625eac4bec42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:54:57:6e:e2:5d:25:de:93:72:7c:c1:8e:
                    47:06:5f:2f:ba:2b:6a:fa:6c:58:da:9f:25:ee:0a:
                    a2:c4:e8:64:65:96:68:e0:9e:b2:3c:4c:a7:c7:b1:
                    50:0e:1c:c4:c4:dc:9e:a4:9c:33:90:50:12:de:a7:
                    c9:14:46:7b:13:72:33:81:36:d7:8f:5d:ea:71:53:
                    94:03:6e:0f:86:d1:32:a0:3d:aa:f2:9d:76:27:36:
                    e5:14:b8:14:54:06:e3:f7:52:e0:c4:70:00:ed:7d:
                    b5:cb:4c:1c:a6:49:fb:2f:1f:7c:cc:55:5b:03:fb:
                    e7:73:4b:c9:c0:8d:aa:eb:8e:4a:50:b4:2f:7f:d7:
                    33:f2:91:4d:62:cd:c7:09:fe:a5:d7:05:fc:34:83:
                    90:a9:d0:b3:d1:84:ae:2e:cc:d9:97:b4:d3:c3:f2:
                    11:01:c7:a9:4f:0d:c8:e0:79:3f:0c:98:c3:5d:35:
                    b3:9f:5e:6d:05:30:cf:53:7e:0e:54:3b:d3:67:1b:
                    33:83:97:ec:14:a4:f4:57:ca:78:53:29:3a:e1:2f:
                    2b:90:21:b3:ed:e7:c9:1b:2f:58:11:65:f5:98:a8:
                    9e:8a:b0:8f:a3:16:ac:6b:12:c4:84:21:bd:ee:aa:
                    a3:92:ae:b6:8a:ef:69:57:19:2b:e6:3b:67:d4:8c:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:D7:E1:41:31:1D:72:03:66:7C:21:26:F6:25:EA:C4:BE:C4:2C
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:ab:d1:ce:da:9e:5a:19:1c:a9:cb:ed:6d:07:55:ea:6b:
         55:74:bd:54:66:d7:21:3b:8a:98:dc:9f:ac:fb:e5:df:b3:99:
         fc:66:a9:05:0d:4b:7e:5b:fb:86:06:83:e1:72:b0:97:13:be:
         bc:b6:6e:e3:57:f4:46:25:12:71:f0:95:6b:30:1a:68:47:40:
         29:0c:a7:15:c1:d4:2b:c8:5c:b7:01:01:20:60:4f:14:e8:3d:
         c9:cf:36:fe:fc:c9:e0:49:2d:4b:67:96:e6:d5:e5:e4:84:73:
         da:5d:40:34:d5:bb:24:1d:58:fa:a7:a1:4f:98:8f:2c:ac:dd:
         48:c6:41:40:46:20:12:67:de:fb:72:3b:b0:9e:f5:2b:40:eb:
         ca:76:cc:db:61:97:ef:fd:55:42:55:ec:7b:54:30:4d:c7:89:
         89:8e:76:f8:51:9d:84:d0:4a:c4:00:a8:99:9c:d0:ae:e6:cd:
         3a:b3:54:7f:c5:06:cf:e1:dd:de:aa:58:a3:59:44:d3:6e:5c:
         62:ce:fd:58:e8:b5:ec:fd:6d:76:f3:44:44:07:c9:cd:8e:1d:
         33:48:f1:56:e7:47:91:db:08:93:19:2b:33:8f:11:8e:e2:da:
         a1:a6:64:57:71:98:60:25:85:78:72:0a:9e:e2:7f:c9:94:f2:
         4c:5b:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:11 2024 by rpki-client on console-fra.rpki-client.org