Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File:                     U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier:          b0apvVP/B+2ySkUN9W42h8ll9SmST6/W9BEw3ckeesQ=
Subject key identifier:   68:F8:FC:61:BD:41:28:75:2A:16:61:71:74:78:8C:90:0D:71:94:E1
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer:       /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial:       019352AD5AE1BBC5E00BB9D7A917EADB8C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number:          068E
Signing time:             Fri 22 Nov 2024 07:01:52 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:52 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:52 +0000
Files and hashes:         1: FJDfo9uNeuzaeFtBxgp66S0WRAA.roa (hash: WUWOgm3FxEU6+dEiJYSBQOaqBaoWQhLPeeteXCSqwxI=)
                          2: P0OxtFmFtiDHTNn92xY_JpRRpYE.roa (hash: h10jqpGcyY8uvsflw6sG4XOOrO1TLnvlhnWmFY3FNAM=)
                          3: Pm_z3REyQkP_ICGaQCDoZfaFcpE.roa (hash: QX4XTcCCvIbRCmyuQ9vuyXsnvOLtAZwluvFz2Nz6IGI=)
                          4: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: thfyQ6cfC/u6XeDCEC+um0d4pl2PHAIgFx6CLV0TA0Q=)
                          5: YEIDM5VP6pDNSzhVyIBvi8lDeCI.roa (hash: VfO7RaDBQnJXW+DJDu274bJ0HgDUiIBNrxwmhRosZYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:5a:e1:bb:c5:e0:0b:b9:d7:a9:17:ea:db:8c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
        Validity
            Not Before: Nov 22 07:01:52 2024 GMT
            Not After : Nov 23 07:01:52 2024 GMT
        Subject: CN=68f8fc61bd4128752a16617174788c900d7194e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d3:7c:ba:4a:31:1a:57:93:f3:9c:da:00:e2:
                    4a:c1:f6:27:40:48:fa:28:d3:39:66:9f:fa:b0:c0:
                    8f:fb:72:9d:78:1a:60:2e:25:66:b7:a4:5d:a4:9a:
                    58:df:ad:91:2d:0a:28:0d:ca:22:54:4a:a5:4c:c3:
                    d9:47:03:f0:f5:86:c5:b1:ef:a6:c4:12:11:13:84:
                    48:f8:88:9b:48:df:9e:c1:ac:4c:aa:00:7a:99:ce:
                    27:ea:93:c3:32:3c:4d:84:84:6d:52:f9:be:4a:49:
                    e2:75:97:71:d3:f4:7b:bd:87:e8:9f:84:1d:2b:76:
                    67:f6:0b:f3:80:b4:e9:b2:fa:55:d0:83:a8:07:f9:
                    9b:ba:5b:03:ff:38:22:47:57:2c:d8:8b:8b:64:fd:
                    f8:2a:4e:b7:5f:96:5f:07:28:3b:f5:ca:d7:13:92:
                    9a:c0:a3:8a:3e:80:b3:f4:bc:c4:b9:b2:12:0c:aa:
                    54:f1:5f:70:f7:5d:49:63:1e:51:d7:d9:7b:38:52:
                    a9:32:f6:05:e4:09:2d:e2:17:54:38:92:35:9e:d8:
                    32:09:bf:28:4e:22:ce:00:1a:21:5b:5f:e8:68:f6:
                    f9:18:9b:1b:04:2d:4d:ef:16:5f:eb:09:f6:8d:ba:
                    5e:3e:6a:70:e2:06:85:41:c7:e9:e6:43:f7:d1:6e:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:FC:61:BD:41:28:75:2A:16:61:71:74:78:8C:90:0D:71:94:E1
            X509v3 Authority Key Identifier:
                keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:47:a2:ce:f5:c5:69:11:5d:dd:d5:76:d2:8f:18:34:24:
         e8:cc:e8:f2:51:67:d7:98:5f:00:90:16:0d:7f:ab:c8:c2:55:
         38:48:ff:8b:ab:2d:5d:e1:aa:6a:13:be:4c:7a:f3:2a:fd:7a:
         74:53:92:7e:d8:57:cf:b4:96:a6:26:93:a4:3e:2f:f3:be:13:
         a8:a4:99:55:e2:16:bd:c1:07:14:84:f9:a5:92:20:d9:01:8a:
         71:f2:86:b9:e9:4e:26:e9:59:ff:eb:c6:c5:14:ba:dd:03:a7:
         ad:cc:7e:bc:13:a9:08:23:8f:21:c4:20:76:2c:f8:ab:7a:7a:
         ab:6b:53:f8:7c:fd:90:12:1d:d7:a4:ff:83:8f:60:3c:5d:5c:
         f6:75:1c:29:58:44:01:74:84:28:34:53:c3:c3:63:8c:39:eb:
         00:6f:40:81:20:a4:f9:26:7e:f1:95:69:7b:6c:cf:45:65:33:
         eb:78:77:fa:99:3f:b2:fd:b6:08:8f:84:fe:2c:a4:6d:28:53:
         a1:1e:e7:2e:0d:7f:23:aa:8b:8a:13:46:81:f6:61:ae:98:37:
         4b:bb:ab:75:a8:b4:e7:53:c6:0f:dd:5c:4c:bd:04:d4:eb:f5:
         54:a8:9b:a7:16:be:eb:be:f2:5d:b5:c0:99:76:7e:c9:86:1f:
         d0:53:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:20 2024 by rpki-client on console-fra.rpki-client.org