Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File:                     14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier:          MR26ybqLino57D4WyZ6VkawufldSwC8VLYKLqRG5q9U=
Subject key identifier:   D2:30:98:9D:E5:0E:CB:48:B8:43:29:8C:A4:F3:01:04:97:CD:D4:40
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer:       /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial:       01936B224A3B0081B7FEF74AC69C7EF9BA99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number:          10B3
Signing time:             Wed 27 Nov 2024 01:00:29 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:29 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:29 +0000
Files and hashes:         1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: JroSgZJH4+7vPbfqZZ8xDwbbPN/lQtUFSS+85EzndHE=)
                          2: KgyFNC7NtSDcpU6bxF1Knxln2xY.roa (hash: yMgMF1E+HdZWhT3pUnMdaXdT2DodPPKJ0/39MvqCJYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:4a:3b:00:81:b7:fe:f7:4a:c6:9c:7e:f9:ba:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
        Validity
            Not Before: Nov 27 01:00:29 2024 GMT
            Not After : Nov 28 01:00:29 2024 GMT
        Subject: CN=d230989de50ecb48b843298ca4f3010497cdd440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:9d:b7:35:bd:c2:30:8c:6a:6f:a2:6f:b4:
                    8b:ed:df:14:f5:d8:78:e8:6e:5d:6b:59:57:36:18:
                    0b:a5:27:3f:fa:9a:42:89:0b:db:3c:91:41:cf:81:
                    a9:26:9d:6f:b9:a4:2c:94:26:44:2c:58:ab:6c:60:
                    22:3b:6c:04:88:f5:55:d7:f7:1d:cd:f3:f0:e0:49:
                    a4:cb:0c:b7:2b:5c:9b:f0:83:c3:73:c1:1a:4a:cb:
                    1c:07:fa:d1:3f:37:c7:3f:89:ed:b7:82:b9:04:dd:
                    7f:35:df:8d:7e:f9:d1:32:90:47:67:38:36:59:8f:
                    37:c0:62:69:41:8a:ae:43:09:72:f0:f6:b2:7b:fc:
                    8f:01:d7:a5:24:f9:cd:3c:60:dc:ad:b2:58:f9:2d:
                    88:36:ef:18:c1:87:0d:a1:85:0d:10:60:96:71:f9:
                    d8:28:32:6b:9c:88:38:59:ff:94:e2:87:ab:6d:2f:
                    db:75:95:81:b4:60:b2:e8:38:af:8a:ef:f5:39:b1:
                    a6:7d:90:44:41:21:11:59:4b:ae:9d:67:f0:20:09:
                    9b:2e:f9:fa:51:5f:e7:b7:18:30:7d:a2:3a:1a:64:
                    f2:e7:fd:66:ce:b3:9e:ce:e0:e7:92:74:0e:5a:7d:
                    19:5d:e6:77:ac:bc:ed:f0:54:61:56:48:69:ca:e6:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:98:9D:E5:0E:CB:48:B8:43:29:8C:A4:F3:01:04:97:CD:D4:40
            X509v3 Authority Key Identifier:
                keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5c:31:91:b1:78:26:84:83:84:e6:85:1e:3e:3d:17:60:da:
         23:c2:5e:a1:c1:2f:4b:e1:88:ca:39:c2:87:f4:da:c8:0a:0a:
         a2:da:a6:77:dc:78:4d:fc:f2:0e:e2:1b:b6:fe:18:f2:d7:29:
         3b:98:52:1a:4b:d2:e7:76:74:d9:be:12:f2:86:0b:bc:23:ab:
         19:c4:8a:e4:b5:15:d7:9f:6b:6d:2e:bd:4a:29:51:3d:c4:38:
         59:9f:80:11:7e:bf:36:5b:65:e5:a2:0b:17:42:24:f0:40:9d:
         fd:d6:4c:76:55:82:c0:5d:5c:de:e9:a0:ea:18:07:e4:a5:15:
         7c:b6:35:19:f8:02:d3:2c:38:f6:fe:4a:55:d1:31:e4:df:b0:
         52:38:fe:94:95:5f:0f:43:1d:c1:2d:84:71:80:d8:11:92:e0:
         dd:95:ca:00:3b:d7:77:b0:59:84:e2:bb:bb:bd:24:8c:74:64:
         8e:6c:f5:1a:8f:3f:ae:c1:e7:2c:76:cb:e6:c7:ef:c5:68:d5:
         76:f9:ed:aa:2b:fa:2c:8d:9b:d2:be:ab:4a:ad:48:43:bd:8b:
         86:89:25:e4:8b:0b:86:b4:19:3d:9e:f6:2b:3d:46:f9:73:e4:
         43:68:cc:a1:bd:46:74:c3:5d:93:a5:64:48:44:6f:db:63:0f:
         7f:70:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:33 2024 by rpki-client on console-ams.rpki-client.org