Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File:                     k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier:          Y0XyP7wBc629u7cKLAScIJ/lzrxZagsfzLLzNXD6CbE=
Subject key identifier:   16:5C:BF:C2:62:E6:5C:A4:7D:41:8B:E5:15:40:0D:48:4A:A6:81:0F
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer:       /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial:       01936520240F1E5677E5FC7E67E9BB04281F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number:          02ED
Signing time:             Mon 25 Nov 2024 21:00:25 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:25 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:25 +0000
Files and hashes:         1: bhGzDCheos3H2iP6oNq8jb5C2Rk.roa (hash: mpU6psn+keAkm77Zl4VhZBF0xnlyfVY/xcCzF3MoGfc=)
                          2: ivpHAhe9DK-W1wLPVCSZnxsdX88.roa (hash: Z7bKvuN42Sb/1aYv1/5RiYISxaIu/1k9tGgN4pk+wvQ=)
                          3: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: 4X52zdis+LccUvAY7qtBi8Nn4JoImaDl7X4QmwQ/AfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:24:0f:1e:56:77:e5:fc:7e:67:e9:bb:04:28:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
        Validity
            Not Before: Nov 25 21:00:25 2024 GMT
            Not After : Nov 26 21:00:25 2024 GMT
        Subject: CN=165cbfc262e65ca47d418be515400d484aa6810f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:ba:3e:3d:2c:52:c0:c2:f0:5e:d0:be:e2:
                    64:e4:dd:55:83:e7:a5:b6:b8:7c:51:d2:07:04:9a:
                    24:27:92:34:b8:66:3c:f4:76:b9:2e:ee:b1:bf:63:
                    58:cc:3b:ff:d3:8f:fe:53:ea:36:c5:dd:46:2c:b9:
                    b3:c2:19:51:7e:9c:d0:46:05:33:7c:53:03:82:1c:
                    ee:bb:9a:5b:ba:a2:85:89:97:2e:59:0a:eb:c1:a0:
                    fd:09:42:ee:02:0f:53:48:2b:e7:4f:41:ca:46:a1:
                    d6:da:c5:71:80:65:de:2e:20:c7:b4:e2:41:c5:f4:
                    5a:ac:88:39:79:90:ad:b1:93:b9:75:f1:9c:c4:a0:
                    e8:38:bd:68:97:20:24:c0:8b:d1:3d:20:cf:30:c8:
                    c9:04:94:23:18:a7:46:ec:cb:7e:e4:80:17:ad:a9:
                    62:a7:18:75:17:99:0d:9b:4b:0e:de:e2:f5:12:1c:
                    55:f8:1e:36:15:c3:ef:94:37:41:35:95:7c:dd:4f:
                    7f:b7:73:62:80:07:eb:a4:fc:15:56:11:e5:52:00:
                    35:55:3b:77:1a:27:f2:b2:cb:15:42:e1:52:4b:3e:
                    98:cb:a4:86:e1:6a:3d:74:42:f1:17:be:d0:b4:75:
                    88:1f:a2:c3:ff:5d:c2:06:b1:cf:b3:2b:d6:2a:01:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5C:BF:C2:62:E6:5C:A4:7D:41:8B:E5:15:40:0D:48:4A:A6:81:0F
            X509v3 Authority Key Identifier:
                keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3d:1e:f3:03:a0:7e:ed:71:25:95:22:cc:d9:20:03:ef:b6:
         ac:4f:4b:5c:08:f2:9d:31:f3:24:ef:5c:48:ce:85:60:b2:3a:
         74:c4:d6:30:f2:e7:e0:1f:1a:98:c1:bf:e8:74:e3:93:28:a7:
         78:41:61:f0:fd:aa:85:19:d0:3c:93:47:e6:f9:7d:83:bf:c0:
         d4:39:60:bc:7a:5b:1c:ef:24:73:9a:80:32:65:0c:8b:ad:bd:
         dd:db:99:71:95:96:b2:43:11:f2:ca:6d:86:dd:d5:90:4f:c9:
         36:8b:51:67:66:5a:3c:cf:37:b8:00:21:a4:18:fa:9b:a4:c6:
         cf:7a:d8:d2:d5:04:08:1d:96:e3:9a:02:9a:b3:64:94:4e:a1:
         bc:56:4e:15:b7:90:b4:f9:7a:fb:4f:e0:08:11:98:b5:49:8a:
         03:f9:68:b3:0f:86:72:54:d5:cc:47:72:80:19:46:51:07:af:
         ad:fb:3a:65:31:c1:0a:2b:75:b8:5b:18:49:f4:57:db:de:23:
         80:78:a2:91:06:6f:51:a3:15:00:29:59:4e:aa:d5:bf:63:98:
         f2:d7:8e:75:17:27:50:75:41:d0:18:eb:bd:b7:89:8d:c8:87:
         1e:16:7c:44:5c:4d:4f:b8:64:fa:4b:3c:41:b6:fa:60:03:42:
         21:63:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:07 2024 by rpki-client on console-fra.rpki-client.org