Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          4b6xFkV1LRYjabNWqRrcxtdKA+jmM+KIePa34SjtvUM=
Subject key identifier:   82:E0:31:D8:B2:D5:6B:39:57:43:24:6F:CE:F5:A9:89:39:A0:67:46
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019353BED16601CD51850AF1B5095E2E07BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 12:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:34 +0000
Files and hashes:         1: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: /lOA1pCTjHLGOHYZFvvnFsh6VAQsIueowTmqh/dp8Zo=)
                          2: cogAZfWrz6gwjbm1Nv9e3TAAch0.roa (hash: EvJ3soy1b9c8J82D4/FSSRGCc2e36n7pAkP6lj4++78=)
                          3: on6FwcC25vnn_PDWTP5R35XYo9Q.roa (hash: ao5D+tgVMdFltlpZgknXEKRjCOHq7SxkVgVrANV4E20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:d1:66:01:cd:51:85:0a:f1:b5:09:5e:2e:07:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Nov 22 12:00:34 2024 GMT
            Not After : Nov 23 12:00:34 2024 GMT
        Subject: CN=82e031d8b2d56b395743246fcef5a98939a06746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:83:44:9f:9e:ba:ef:b8:23:e9:27:b5:60:
                    d2:c6:12:53:43:2c:16:a5:c7:24:98:e7:62:b2:5b:
                    81:69:54:d3:19:11:56:99:c2:60:a8:87:8e:df:10:
                    8b:f9:36:c8:e3:f3:bb:1f:5a:01:a0:ee:c1:16:a2:
                    d1:a9:11:87:41:e2:39:2e:80:d8:01:d1:fd:4b:f2:
                    89:8a:d4:a1:01:99:da:ed:5b:88:e2:d1:80:d7:2d:
                    76:6c:67:3c:b2:79:f9:54:ce:93:0d:79:d2:0f:05:
                    1b:6c:20:27:2e:d5:6d:3e:60:be:a5:ab:79:8a:15:
                    5c:4b:9b:1c:66:f5:32:0c:fe:0f:22:55:c8:59:6d:
                    52:f8:21:8a:68:16:36:3d:f0:a2:19:82:15:33:d1:
                    3c:3e:e6:79:30:2b:fc:fb:91:1a:ae:5a:a2:d9:58:
                    47:d7:a1:d9:8e:2a:9e:b9:55:b0:7d:ef:35:36:e2:
                    50:7a:73:87:ba:e9:26:3f:2e:4a:52:18:55:b1:ae:
                    39:69:6d:db:d5:d6:7d:fb:0c:ad:0e:46:e7:02:66:
                    87:64:ed:db:e7:f8:5d:9e:44:ba:da:9c:cc:1a:0b:
                    41:69:bd:35:8d:9e:18:fc:85:a8:42:1a:37:46:00:
                    a1:a8:d7:77:c2:e9:20:93:85:90:f5:b5:af:f7:e3:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E0:31:D8:B2:D5:6B:39:57:43:24:6F:CE:F5:A9:89:39:A0:67:46
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:45:a9:83:c2:69:4c:69:fc:9d:37:5e:b0:9a:fe:70:4f:20:
         53:45:3f:ec:e3:dc:09:9f:42:0c:86:24:db:1a:24:f8:05:07:
         4c:14:93:1c:4f:23:db:2e:c3:84:95:c3:04:c7:5a:96:ae:d9:
         01:be:38:b0:2b:ec:8a:a2:6d:d8:75:a3:83:f1:62:38:d6:b6:
         0f:15:44:b8:31:99:9e:a2:f9:cb:ad:8c:7e:33:35:32:2f:58:
         16:61:55:62:04:bb:66:ac:b8:d6:ba:1c:21:82:7d:f8:0f:e5:
         fa:81:26:f6:26:30:60:53:10:a1:cd:3b:f4:03:ea:dc:b0:68:
         eb:39:d5:f8:94:0b:18:f1:a6:fc:34:a6:8d:99:d2:e9:85:7f:
         5e:43:b2:61:a0:30:75:4a:92:50:dc:4d:2f:6d:7b:df:42:e2:
         94:8d:96:61:0b:a4:b2:53:25:10:84:2c:b4:10:79:be:68:75:
         d4:90:94:a3:1d:83:2e:b5:db:bd:cf:52:1b:ab:a8:c2:6f:d0:
         2b:7f:bd:a6:1b:a8:bb:c9:bc:5f:f0:4c:b5:4c:df:7e:af:f8:
         a1:00:fe:e1:fd:e7:b7:14:ee:55:f4:98:d7:ba:ce:4f:53:3c:
         f2:8b:48:2e:94:b4:24:35:d0:ae:9b:94:cd:f6:12:22:38:3e:
         31:e4:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:26 2024 by rpki-client on console-ams.rpki-client.org